{"grype_matches":[{"artifact":{"id":"9eebaea2eda844dd","cpes":["cpe:2.3:a:curl-minimal:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl-minimal:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl_minimal:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl_minimal:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*"],"name":"curl-minimal","purl":"pkg:rpm/redhat/curl-minimal@7.76.1-40.el9_8.7?arch=x86_64&distro=rhel-9.8&upstream=curl-7.76.1-40.el9_8.7.src.rpm","type":"rpm","version":"7.76.1-40.el9_8.7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.76.1-40.el9_8.7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-7264","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"curl","version":"7.76.1-40.el9_8.7"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2024-7264","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H","metrics":{"baseScore":5.3,"impactScore":4.3,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-7264","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-7264","date":"2026-10-10","epss":0.17301,"percentile":0.97044}],"risk":7.179915,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2024-7264","description":"A flaw was found in libcurl, where libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized Time field. If a syntactically incorrect field is given, the parser can use -1 for the length of the *time fraction*, leading to a `strlen()` performed on a pointer to a heap buffer area that is not purposely NULL terminated."},"relatedVulnerabilities":[{"id":"CVE-2024-7264","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":6.3,"impactScore":3.4,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-7264","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-7264","date":"2026-10-10","epss":0.17301,"percentile":0.97044}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/31/1","https://curl.se/docs/CVE-2024-7264.html","https://curl.se/docs/CVE-2024-7264.json","https://hackerone.com/reports/2629968","https://github.com/curl/curl/commit/27959ecce75cdb2809c0bdb3286e60e08fadb519","https://security.netapp.com/advisory/ntap-20240828-0008/","https://security.netapp.com/advisory/ntap-20241025-0006/","https://security.netapp.com/advisory/ntap-20241025-0010/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-7264","description":"libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an\nASN.1 Generalized Time field. If given an syntactically incorrect field, the\nparser might end up using -1 for the length of the *time fraction*, leading to\na `strlen()` getting performed on a pointer to a heap buffer area that is not\n(purposely) null terminated.\n\nThis flaw most likely leads to a crash, but can also lead to heap contents\ngetting returned to the application when\n[CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used."}]},{"artifact":{"id":"b685606a6baf0f79","cpes":["cpe:2.3:a:libcurl-minimal:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl-minimal:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl_minimal:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl_minimal:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*"],"name":"libcurl-minimal","purl":"pkg:rpm/redhat/libcurl-minimal@7.76.1-40.el9_8.7?arch=x86_64&distro=rhel-9.8&upstream=curl-7.76.1-40.el9_8.7.src.rpm","type":"rpm","version":"7.76.1-40.el9_8.7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.76.1-40.el9_8.7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-7264","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"curl","version":"7.76.1-40.el9_8.7"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2024-7264","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H","metrics":{"baseScore":5.3,"impactScore":4.3,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-7264","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-7264","date":"2026-10-10","epss":0.17301,"percentile":0.97044}],"risk":7.179915,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2024-7264","description":"A flaw was found in libcurl, where libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized Time field. If a syntactically incorrect field is given, the parser can use -1 for the length of the *time fraction*, leading to a `strlen()` performed on a pointer to a heap buffer area that is not purposely NULL terminated."},"relatedVulnerabilities":[{"id":"CVE-2024-7264","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":6.3,"impactScore":3.4,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-7264","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-7264","date":"2026-10-10","epss":0.17301,"percentile":0.97044}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/31/1","https://curl.se/docs/CVE-2024-7264.html","https://curl.se/docs/CVE-2024-7264.json","https://hackerone.com/reports/2629968","https://github.com/curl/curl/commit/27959ecce75cdb2809c0bdb3286e60e08fadb519","https://security.netapp.com/advisory/ntap-20240828-0008/","https://security.netapp.com/advisory/ntap-20241025-0006/","https://security.netapp.com/advisory/ntap-20241025-0010/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-7264","description":"libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an\nASN.1 Generalized Time field. If given an syntactically incorrect field, the\nparser might end up using -1 for the length of the *time fraction*, leading to\na `strlen()` getting performed on a pointer to a heap buffer area that is not\n(purposely) null terminated.\n\nThis flaw most likely leads to a crash, but can also lead to heap contents\ngetting returned to the application when\n[CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used."}]},{"artifact":{"id":"406b3abfffe1d292","cpes":["cpe:2.3:a:git-lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git-lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*"],"name":"git-lfs","purl":"pkg:rpm/redhat/git-lfs@3.7.1-4.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=git-lfs-3.7.1-4.el9_8.3.src.rpm","type":"rpm","version":"3.7.1-4.el9_8.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-41723","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"git-lfs","version":"0:3.7.1-4.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-41723","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-41723","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-41723","date":"2026-10-10","epss":0.04561,"percentile":0.91374}],"risk":2.8506249999999995,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-41723","description":"A flaw was found in golang. A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of requests."},"relatedVulnerabilities":[{"id":"CVE-2022-41723","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-41723","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-41723","date":"2026-10-10","epss":0.04561,"percentile":0.91374}],"urls":["https://go.dev/cl/468135","https://go.dev/cl/468295","https://go.dev/issue/57855","https://groups.google.com/g/golang-announce/c/V0aBFqaFs_E","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BUK2ZIAGCULOOYDNH25JPU6JBES5NF2/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4MA5XS5DAOJ5PKKNG5TUXKPQOFHT5VBC/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/REMHVVIBDNKSRKNOTV7EQSB7CYQWOUOU/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGW7GE2Z32ZT47UFAQFDRQE33B7Q7LMT/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RLBQ3A7ROLEQXQLXFDLNJ7MYPKG5GULE/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7N5GV4CHH6WAGX3GFMDD3COEOVCZ4RI/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XX3IMUTZKRQ73PBZM4E2JP4BKYH4C6XE/","https://pkg.go.dev/vuln/GO-2023-1571","https://security.gentoo.org/glsa/202311-09","https://www.couchbase.com/alerts/","https://security.netapp.com/advisory/ntap-20230331-0010/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-41723","description":"A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests."}]},{"artifact":{"id":"c0b424c4c915f6c5","cpes":["cpe:2.3:a:redhat:tar:2\\:1.34-13.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:tar:tar:2\\:1.34-13.el9_8:*:*:*:*:*:*:*"],"name":"tar","purl":"pkg:rpm/redhat/tar@1.34-13.el9_8?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=tar-1.34-13.el9_8.src.rpm","type":"rpm","version":"2:1.34-13.el9_8","language":"","licenses":["GPLv3+"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2005-2541","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"tar","version":"2:1.34-13.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2005-2541","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2005-2541","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2005-2541","date":"2026-10-10","epss":0.03992,"percentile":0.90269}],"risk":2.3951999999999996,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2005-2541","description":"A flaw was found in tar utility that can allow the root user to extract files with preserved setuid and setgid permissions without any warning. This behavior can lead to the creation of malicious setuid executables owned by root from a crafted tar file, posing significant security risks."},"relatedVulnerabilities":[{"id":"CVE-2005-2541","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","metrics":{"baseScore":10,"impactScore":10.1,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2005-2541","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2005-2541","date":"2026-10-10","epss":0.03992,"percentile":0.90269}],"urls":["http://marc.info/?l=bugtraq&m=112327628230258&w=2","https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c%40%3Cissues.guacamole.apache.org%3E"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2005-2541","description":"Tar 1.15.1 does not properly warn the user when extracting setuid or setgid files, which may allow local users or remote attackers to gain privileges."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-1616","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-1616","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-1616","cwe":"CWE-416","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-1616","cwe":"CWE-416","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-1616","date":"2026-10-10","epss":0.02712,"percentile":0.85592}],"risk":1.46448,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-1616","description":"A flaw was found in vim, which is vulnerable to a heap-buffer-overflow in append_command of the src/ex_docmd.c function. This flaw allows a specially crafted file to crash software, modify memory, or execute code when opened in vim."},"relatedVulnerabilities":[{"id":"CVE-2022-1616","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.3,"impactScore":5.5,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-1616","cwe":"CWE-416","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-1616","cwe":"CWE-416","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-1616","date":"2026-10-10","epss":0.02712,"percentile":0.85592}],"urls":["http://seclists.org/fulldisclosure/2022/Oct/28","http://seclists.org/fulldisclosure/2022/Oct/41","https://github.com/vim/vim/commit/d88934406c5375d88f8f1b65331c9f0cab68cc6c","https://huntr.dev/bounties/40f1d75f-fb2f-4281-b585-a41017f217e2","https://lists.debian.org/debian-lts-announce/2022/05/msg00022.html","https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A6BY5P7ERZS7KXSBCGFCOXLMLGWUUJIH/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HIP7KG7TVS5YF3QREAY2GOGUT3YUBZAI/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JUN33257RUM4RS2I4GZETKFSAXPETATG/","https://security.gentoo.org/glsa/202208-32","https://security.gentoo.org/glsa/202305-16","https://support.apple.com/kb/HT213488","https://lists.debian.org/debian-lts-announce/2025/03/msg00023.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-1616","description":"Use after free in append_command in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution"}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-1619","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-1619","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-1619","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-1619","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-1619","date":"2026-10-10","epss":0.02544,"percentile":0.84561}],"risk":1.37376,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-1619","description":"A flaw was found in vim, which is vulnerable to a heap-buffer-overflow in cmdline_erase_chars of the ex_getln.c function. This flaw allows a specially crafted file to crash software, modify memory or execute code when opened in vim."},"relatedVulnerabilities":[{"id":"CVE-2022-1619","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-1619","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-1619","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-1619","date":"2026-10-10","epss":0.02544,"percentile":0.84561}],"urls":["http://seclists.org/fulldisclosure/2022/Oct/28","http://seclists.org/fulldisclosure/2022/Oct/41","https://github.com/vim/vim/commit/ef02f16609ff0a26ffc6e20263523424980898fe","https://huntr.dev/bounties/b3200483-624e-4c76-a070-e246f62a7450","https://lists.debian.org/debian-lts-announce/2022/05/msg00022.html","https://lists.debian.org/debian-lts-announce/2022/11/msg00032.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A6BY5P7ERZS7KXSBCGFCOXLMLGWUUJIH/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HIP7KG7TVS5YF3QREAY2GOGUT3YUBZAI/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JUN33257RUM4RS2I4GZETKFSAXPETATG/","https://security.gentoo.org/glsa/202208-32","https://security.gentoo.org/glsa/202305-16","https://security.netapp.com/advisory/ntap-20220930-0007/","https://support.apple.com/kb/HT213488"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-1619","description":"Heap-based Buffer Overflow in function cmdline_erase_chars in GitHub repository vim/vim prior to 8.2.4899. This vulnerabilities are capable of crashing software, modify memory, and possible remote execution"}]},{"artifact":{"id":"406b3abfffe1d292","cpes":["cpe:2.3:a:git-lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git-lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*"],"name":"git-lfs","purl":"pkg:rpm/redhat/git-lfs@3.7.1-4.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=git-lfs-3.7.1-4.el9_8.3.src.rpm","type":"rpm","version":"3.7.1-4.el9_8.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-24534","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"git-lfs","version":"0:3.7.1-4.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2023-24534","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-24534","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-24534","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-24534","date":"2026-10-10","epss":0.01888,"percentile":0.78945}],"risk":1.1800000000000002,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-24534","description":"A flaw was found in Golang Go, where it is vulnerable to a denial of service caused by memory exhaustion in the common function in HTTP and MIME header parsing. By sending a specially crafted request, a remote attacker can cause a denial of service."},"relatedVulnerabilities":[{"id":"CVE-2023-24534","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-24534","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-24534","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-24534","date":"2026-10-10","epss":0.01888,"percentile":0.78945}],"urls":["https://go.dev/cl/481994","https://go.dev/issue/58975","https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8","https://pkg.go.dev/vuln/GO-2023-1704","https://security.gentoo.org/glsa/202311-09","https://security.netapp.com/advisory/ntap-20230526-0007/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-24534","description":"HTTP and MIME header parsing can allocate large amounts of memory, even when parsing small inputs, potentially leading to a denial of service. Certain unusual patterns of input data can cause the common function used to parse HTTP and MIME headers to allocate substantially more memory than required to hold the parsed headers. An attacker can exploit this behavior to cause an HTTP server to allocate large amounts of memory from a small request, potentially leading to memory exhaustion and a denial of service. With fix, header parsing now correctly allocates only the memory required to hold parsed headers."}]},{"artifact":{"id":"2b5bc20e81b1f7ae","cpes":["cpe:2.3:a:redhat:unzip:6.0-60.el9:*:*:*:*:*:*:*","cpe:2.3:a:unzip:unzip:6.0-60.el9:*:*:*:*:*:*:*"],"name":"unzip","purl":"pkg:rpm/redhat/unzip@6.0-60.el9?arch=x86_64&distro=rhel-9.8&upstream=unzip-6.0-60.el9.src.rpm","type":"rpm","version":"6.0-60.el9","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-0529","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"unzip","version":"0:6.0-60.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-0529","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-0529","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-0529","date":"2026-10-10","epss":0.02421,"percentile":0.83718}],"risk":1.028925,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-0529","description":"A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-bound write. This flaw allows an attacker to input a specially crafted zip file, leading to a crash."},"relatedVulnerabilities":[{"id":"CVE-2022-0529","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-0529","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-0529","date":"2026-10-10","epss":0.02421,"percentile":0.83718}],"urls":["https://bugzilla.redhat.com/show_bug.cgi?id=2051395","https://github.com/ByteHackr/unzip_poc","https://lists.debian.org/debian-lts-announce/2022/09/msg00028.html","https://security.gentoo.org/glsa/202310-17","https://www.debian.org/security/2022/dsa-5202"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-0529","description":"A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-bound write. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-1720","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-1720","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-1720","cwe":"CWE-126","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-1720","cwe":"CWE-125","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-1720","date":"2026-10-10","epss":0.02177,"percentile":0.81817}],"risk":0.990535,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-1720","description":"A heap buffer over-read vulnerability was found in Vim's grab_file_name() function of the src/findfile.c file. This flaw occurs because the function reads after the NULL terminates the line with \"gf\" in Visual block mode. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap buffer over-read vulnerability that causes an application to crash and corrupt memory."},"relatedVulnerabilities":[{"id":"CVE-2022-1720","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":6.6,"impactScore":4.8,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-1720","cwe":"CWE-126","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-1720","cwe":"CWE-125","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-1720","date":"2026-10-10","epss":0.02177,"percentile":0.81817}],"urls":["http://seclists.org/fulldisclosure/2022/Oct/28","http://seclists.org/fulldisclosure/2022/Oct/41","http://seclists.org/fulldisclosure/2022/Oct/43","http://seclists.org/fulldisclosure/2022/Oct/45","https://github.com/vim/vim/commit/395bd1f6d3edc9f7edb5d1f2d7deaf5a9e3ab93c","https://huntr.dev/bounties/5ccfb386-7eb9-46e5-98e5-243ea4b358a8","https://lists.debian.org/debian-lts-announce/2022/06/msg00014.html","https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U743FMJGFQ35GBPCQ6OWMVZEJPDFVEWM/","https://security.gentoo.org/glsa/202208-32","https://security.gentoo.org/glsa/202305-16","https://support.apple.com/kb/HT213443","https://support.apple.com/kb/HT213444","https://support.apple.com/kb/HT213488"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-1720","description":"Buffer Over-read in function grab_file_name in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software, memory modification, and possible remote execution."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-3973","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2021-3973","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-3973","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2021-3973","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-3973","date":"2026-10-10","epss":0.01786,"percentile":0.77701}],"risk":0.9644400000000001,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-3973","description":"A flaw was found in vim. A possible heap-based buffer overflow could allow an attacker to input a specially crafted file leading to a crash or code execution. The highest threat from this vulnerability is to system availability."},"relatedVulnerabilities":[{"id":"CVE-2021-3973","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","metrics":{"baseScore":9.3,"impactScore":10.1,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.3,"impactScore":5.5,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-3973","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2021-3973","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-3973","date":"2026-10-10","epss":0.01786,"percentile":0.77701}],"urls":["http://www.openwall.com/lists/oss-security/2022/01/15/1","https://github.com/vim/vim/commit/615ddd5342b50a6878a907062aa471740bd9a847","https://huntr.dev/bounties/ce6e8609-77c6-4e17-b9fc-a2e5abed052e","https://lists.debian.org/debian-lts-announce/2022/03/msg00018.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNXY7T5OORA7UJIMGSJBGHFMU6UZWS6P/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IH2LS2DXBTYOCWGAKFMBF3HTWWXPBEFL/","https://security.gentoo.org/glsa/202208-32"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-3973","description":"vim is vulnerable to Heap-based Buffer Overflow"}]},{"artifact":{"id":"f5eb0651fec88df5","cpes":["cpe:2.3:a:com.fasterxml.jackson.core:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.20.1:*:*:*:*:*:*:*"],"name":"jackson-databind","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1","type":"java-archive","version":"2.20.1","language":"java","licenses":["The Apache Software License, Version 2.0"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/opt/jenkins-plugin-manager.jar:com.fasterxml.jackson.core:jackson-databind","manifestName":"","pomArtifactID":"jackson-databind","archiveDigests":null},"locations":[{"path":"/opt/jenkins-plugin-manager.jar","layerID":"sha256:1303dd889187d7e25ac68bf0fb8d636f5a922b6753d092bcae3924d569cb869a","accessPath":"/opt/jenkins-plugin-manager.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.21.4"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-rmj7-2vxq-3g9f","versionConstraint":">=2.19.0,<2.21.4 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-databind","version":"2.20.1"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-rmj7-2vxq-3g9f","fix":{"state":"fixed","versions":["2.21.4"],"available":[{"date":"2026-06-24","kind":"first-observed","version":"2.21.4"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54513","cwe":"CWE-184","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-54513","cwe":"CWE-184","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-54513","date":"2026-10-10","epss":0.01226,"percentile":0.67987}],"risk":0.95628,"urls":["https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-rmj7-2vxq-3g9f","https://github.com/FasterXML/jackson-databind/issues/5981","https://github.com/FasterXML/jackson-databind/issues/5983","https://github.com/FasterXML/jackson-databind/pull/5984","https://github.com/FasterXML/jackson-databind/commit/01d1692c8d0ed03e51a0e3c4f8a9e6908e4931e5","https://github.com/FasterXML/jackson-databind/commit/24529da29fdf46ff94ca38de9ebf31cd188f5e8e","https://nvd.nist.gov/vuln/detail/CVE-2026-54513","https://access.redhat.com/errata/RHSA-2026:36839","https://access.redhat.com/errata/RHSA-2026:40895","https://access.redhat.com/security/cve/CVE-2026-54513","https://bugzilla.redhat.com/show_bug.cgi?id=2492010","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54513.json","https://access.redhat.com/errata/RHSA-2026:41951","https://access.redhat.com/errata/RHSA-2026:43218","https://access.redhat.com/errata/RHSA-2026:44271","https://access.redhat.com/errata/RHSA-2026:44066","https://access.redhat.com/errata/RHSA-2026:44065","https://access.redhat.com/errata/RHSA-2026:44064","https://access.redhat.com/errata/RHSA-2026:44063","https://access.redhat.com/errata/RHSA-2026:44062","https://access.redhat.com/errata/RHSA-2026:44061","https://access.redhat.com/errata/RHSA-2026:43400","https://access.redhat.com/errata/RHSA-2026:48151","https://access.redhat.com/errata/RHSA-2026:48095","https://access.redhat.com/errata/RHSA-2026:50849","https://access.redhat.com/errata/RHSA-2026:50848","https://access.redhat.com/errata/RHSA-2026:50847","https://access.redhat.com/errata/RHSA-2026:50846","https://access.redhat.com/errata/RHSA-2026:54435","https://access.redhat.com/errata/RHSA-2026:54622","https://access.redhat.com/errata/RHSA-2026:62260","https://access.redhat.com/errata/RHSA-2026:66488","https://access.redhat.com/errata/RHSA-2026:66545"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-rmj7-2vxq-3g9f","description":"jackson-databind has an array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray)"},"relatedVulnerabilities":[{"id":"CVE-2026-54513","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54513","cwe":"CWE-184","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-54513","cwe":"CWE-184","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-54513","date":"2026-10-10","epss":0.01226,"percentile":0.67987}],"urls":["https://github.com/FasterXML/jackson-databind/commit/01d1692c8d0ed03e51a0e3c4f8a9e6908e4931e5","https://github.com/FasterXML/jackson-databind/commit/24529da29fdf46ff94ca38de9ebf31cd188f5e8e","https://github.com/FasterXML/jackson-databind/issues/5981","https://github.com/FasterXML/jackson-databind/issues/5983","https://github.com/FasterXML/jackson-databind/pull/5984","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-rmj7-2vxq-3g9f","https://access.redhat.com/errata/RHSA-2026:36839","https://access.redhat.com/errata/RHSA-2026:40895","https://access.redhat.com/errata/RHSA-2026:41951","https://access.redhat.com/errata/RHSA-2026:43218","https://access.redhat.com/errata/RHSA-2026:43400","https://access.redhat.com/errata/RHSA-2026:44061","https://access.redhat.com/errata/RHSA-2026:44062","https://access.redhat.com/errata/RHSA-2026:44063","https://access.redhat.com/errata/RHSA-2026:44064","https://access.redhat.com/errata/RHSA-2026:44065","https://access.redhat.com/errata/RHSA-2026:44066","https://access.redhat.com/errata/RHSA-2026:44271","https://access.redhat.com/errata/RHSA-2026:48095","https://access.redhat.com/errata/RHSA-2026:48151","https://access.redhat.com/errata/RHSA-2026:50846","https://access.redhat.com/errata/RHSA-2026:50847","https://access.redhat.com/errata/RHSA-2026:50848","https://access.redhat.com/errata/RHSA-2026:50849","https://access.redhat.com/errata/RHSA-2026:54435","https://access.redhat.com/errata/RHSA-2026:54622","https://access.redhat.com/errata/RHSA-2026:62260","https://access.redhat.com/errata/RHSA-2026:66488","https://access.redhat.com/errata/RHSA-2026:66545","https://access.redhat.com/security/cve/CVE-2026-54513","https://bugzilla.redhat.com/show_bug.cgi?id=2492010","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54513.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-54513","description":"jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, and 3.1.4, BasicPolymorphicTypeValidator.Builder.allowIfSubTypeIsArray() allowlists any array type based only on clazz.isArray(), without validating the array's component (element) type against the configured allowlist. A PTV built with allowIfSubTypeIsArray() plus an explicit concrete-type allowlist therefore still permits EvilType[] even though EvilType is not allowlisted. When Jackson deserializes the elements and no per-element type IDs are present, it instantiates the component type directly with no further PTV check, bypassing the allowlist. This vulnerability is fixed in 2.18.8, 2.21.4, and 3.1.4."}]},{"artifact":{"id":"406b3abfffe1d292","cpes":["cpe:2.3:a:git-lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git-lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*"],"name":"git-lfs","purl":"pkg:rpm/redhat/git-lfs@3.7.1-4.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=git-lfs-3.7.1-4.el9_8.3.src.rpm","type":"rpm","version":"3.7.1-4.el9_8.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-24536","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"git-lfs","version":"0:3.7.1-4.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2023-24536","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-24536","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-24536","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-24536","date":"2026-10-10","epss":0.01479,"percentile":0.73156}],"risk":0.9243750000000001,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-24536","description":"A flaw was found in Golang Go, where it is vulnerable to a denial of service caused by an issue during multipart form parsing. By sending a specially crafted input, a remote attacker can consume large amounts of CPU and memory, resulting in a denial of service."},"relatedVulnerabilities":[{"id":"CVE-2023-24536","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-24536","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-24536","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-24536","date":"2026-10-10","epss":0.01479,"percentile":0.73156}],"urls":["https://go.dev/cl/482075","https://go.dev/cl/482076","https://go.dev/cl/482077","https://go.dev/issue/59153","https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8","https://pkg.go.dev/vuln/GO-2023-1705","https://security.gentoo.org/glsa/202311-09","https://security.netapp.com/advisory/ntap-20230526-0007/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-24536","description":"Multipart form parsing can consume large amounts of CPU and memory when processing form inputs containing very large numbers of parts. This stems from several causes: 1. mime/multipart.Reader.ReadForm limits the total memory a parsed multipart form can consume. ReadForm can undercount the amount of memory consumed, leading it to accept larger inputs than intended. 2. Limiting total memory does not account for increased pressure on the garbage collector from large numbers of small allocations in forms with many parts. 3. ReadForm can allocate a large number of short-lived buffers, further increasing pressure on the garbage collector. The combination of these factors can permit an attacker to cause an program that parses multipart forms to consume large amounts of CPU and memory, potentially resulting in a denial of service. This affects programs that use mime/multipart.Reader.ReadForm, as well as form parsing in the net/http package with the Request methods FormFile, FormValue, ParseMultipartForm, and PostFormValue. With fix, ReadForm now does a better job of estimating the memory consumption of parsed forms, and performs many fewer short-lived allocations. In addition, the fixed mime/multipart.Reader imposes the following limits on the size of parsed forms: 1. Forms parsed with ReadForm may contain no more than 1000 parts. This limit may be adjusted with the environment variable GODEBUG=multipartmaxparts=. 2. Form parts parsed with NextPart and NextRawPart may contain no more than 10,000 header fields. In addition, forms parsed with ReadForm may contain no more than 10,000 header fields across all parts. This limit may be adjusted with the environment variable GODEBUG=multipartmaxheaders=."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-4136","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2021-4136","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L","metrics":{"baseScore":6.8,"impactScore":5.5,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-4136","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2021-4136","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-4136","date":"2026-10-10","epss":0.01831,"percentile":0.78278}],"risk":0.8971899999999999,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-4136","description":"A flaw was found in vim. A possible heap-based buffer overflow could allow an attacker to input a specially crafted file leading to a crash or code execution."},"relatedVulnerabilities":[{"id":"CVE-2021-4136","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L","metrics":{"baseScore":7.3,"impactScore":5.5,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-4136","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2021-4136","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-4136","date":"2026-10-10","epss":0.01831,"percentile":0.78278}],"urls":["http://seclists.org/fulldisclosure/2022/Jul/14","http://seclists.org/fulldisclosure/2022/Mar/29","http://seclists.org/fulldisclosure/2022/May/35","http://www.openwall.com/lists/oss-security/2022/01/15/1","https://github.com/vim/vim/commit/605ec91e5a7330d61be313637e495fa02a6dc264","https://huntr.dev/bounties/5c6b93c1-2d27-4e98-a931-147877b8c938","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2EY2VFBU3YGGWI5BW4XKT3F37MYGEQUD/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3FH2J57GDA2WMBS6J56F6QQRA6BXQQFZ/","https://security.gentoo.org/glsa/202208-32","https://support.apple.com/kb/HT213183","https://support.apple.com/kb/HT213256","https://support.apple.com/kb/HT213343"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-4136","description":"vim is vulnerable to Heap-based Buffer Overflow"}]},{"artifact":{"id":"2b5bc20e81b1f7ae","cpes":["cpe:2.3:a:redhat:unzip:6.0-60.el9:*:*:*:*:*:*:*","cpe:2.3:a:unzip:unzip:6.0-60.el9:*:*:*:*:*:*:*"],"name":"unzip","purl":"pkg:rpm/redhat/unzip@6.0-60.el9?arch=x86_64&distro=rhel-9.8&upstream=unzip-6.0-60.el9.src.rpm","type":"rpm","version":"6.0-60.el9","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-0530","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"unzip","version":"0:6.0-60.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-0530","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-0530","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-0530","date":"2026-10-10","epss":0.02108,"percentile":0.81236}],"risk":0.8959000000000001,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-0530","description":"A flaw was found in Unzip. The vulnerability occurs during the conversion of a UTF-8 string to a local string that leads to a segmentation fault. This flaw allows an attacker to input a specially crafted zip file, leading to a crash."},"relatedVulnerabilities":[{"id":"CVE-2022-0530","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-0530","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-0530","date":"2026-10-10","epss":0.02108,"percentile":0.81236}],"urls":["http://seclists.org/fulldisclosure/2022/May/33","http://seclists.org/fulldisclosure/2022/May/35","http://seclists.org/fulldisclosure/2022/May/38","https://bugzilla.redhat.com/show_bug.cgi?id=2051395","https://github.com/ByteHackr/unzip_poc","https://lists.debian.org/debian-lts-announce/2022/09/msg00028.html","https://security.gentoo.org/glsa/202310-17","https://support.apple.com/kb/HT213255","https://support.apple.com/kb/HT213256","https://support.apple.com/kb/HT213257","https://www.debian.org/security/2022/dsa-5202"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-0530","description":"A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-bound write. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-2125","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-2125","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2125","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-2125","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-2125","date":"2026-10-10","epss":0.01643,"percentile":0.75743}],"risk":0.88722,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-2125","description":"Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2."},"relatedVulnerabilities":[{"id":"CVE-2022-2125","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2125","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-2125","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-2125","date":"2026-10-10","epss":0.01643,"percentile":0.75743}],"urls":["http://seclists.org/fulldisclosure/2022/Oct/28","http://seclists.org/fulldisclosure/2022/Oct/41","http://seclists.org/fulldisclosure/2022/Oct/43","http://seclists.org/fulldisclosure/2022/Oct/45","https://github.com/vim/vim/commit/0e8e938d497260dd57be67b4966cb27a5f72376f","https://huntr.dev/bounties/17dab24d-beec-464d-9a72-5b6b11283705","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U743FMJGFQ35GBPCQ6OWMVZEJPDFVEWM/","https://security.gentoo.org/glsa/202208-32","https://security.gentoo.org/glsa/202305-16","https://support.apple.com/kb/HT213443","https://support.apple.com/kb/HT213444","https://support.apple.com/kb/HT213488"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-2125","description":"Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-3927","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2021-3927","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.3,"impactScore":5.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-3927","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2021-3927","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-3927","date":"2026-10-10","epss":0.01708,"percentile":0.76671}],"risk":0.8796200000000001,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-3927","description":"A flaw was found in vim. A possible heap-based buffer overflow could allow an attacker to input a specially crafted file leading to a crash or code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability."},"relatedVulnerabilities":[{"id":"CVE-2021-3927","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.3,"impactScore":5.5,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-3927","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2021-3927","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-3927","date":"2026-10-10","epss":0.01708,"percentile":0.76671}],"urls":["http://www.openwall.com/lists/oss-security/2022/01/15/1","https://github.com/vim/vim/commit/0b5b06cb4777d1401fdf83e7d48d287662236e7e","https://huntr.dev/bounties/9c2b2c82-48bb-4be9-ab8f-a48ea252d1b0","https://lists.debian.org/debian-lts-announce/2022/03/msg00018.html","https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BCQWPEY2AEYBELCMJYHYWYCD3PZVD2H7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNXY7T5OORA7UJIMGSJBGHFMU6UZWS6P/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PGW56Z6IN4UVM3E5RXXF4G7LGGTRBI5C/","https://security.gentoo.org/glsa/202208-32"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-3927","description":"vim is vulnerable to Heap-based Buffer Overflow"}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-4173","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2021-4173","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-4173","cwe":"CWE-416","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2021-4173","cwe":"CWE-416","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-4173","date":"2026-10-10","epss":0.01621,"percentile":0.7541}],"risk":0.87534,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-4173","description":"A flaw was found in vim. A possible use after free vulnerability could allow an attacker to input a specially crafted file leading to a crash or code execution."},"relatedVulnerabilities":[{"id":"CVE-2021-4173","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:H","metrics":{"baseScore":6.8,"impactScore":5.5,"exploitabilityScore":1.4},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-4173","cwe":"CWE-416","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2021-4173","cwe":"CWE-416","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-4173","date":"2026-10-10","epss":0.01621,"percentile":0.7541}],"urls":["http://seclists.org/fulldisclosure/2022/Jul/14","http://seclists.org/fulldisclosure/2022/Mar/29","http://seclists.org/fulldisclosure/2022/May/35","http://www.openwall.com/lists/oss-security/2022/01/15/1","https://github.com/vim/vim/commit/9c23f9bb5fe435b28245ba8ac65aa0ca6b902c04","https://huntr.dev/bounties/a1b236b9-89fb-4ccf-9689-ba11b471e766","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2EY2VFBU3YGGWI5BW4XKT3F37MYGEQUD/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3FH2J57GDA2WMBS6J56F6QQRA6BXQQFZ/","https://security.gentoo.org/glsa/202208-32","https://support.apple.com/kb/HT213183","https://support.apple.com/kb/HT213256","https://support.apple.com/kb/HT213343","https://lists.debian.org/debian-lts-announce/2025/03/msg00023.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-4173","description":"vim is vulnerable to Use After Free"}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-1620","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-1620","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-1620","cwe":"CWE-476","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-1620","cwe":"CWE-476","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-1620","date":"2026-10-10","epss":0.01593,"percentile":0.75}],"risk":0.8602200000000001,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-1620","description":"A flaw was found in vim, which is vulnerable to a NULL pointer dereference in vim_regexec_string() of the regexp.c function. This flaw allows a specially crafted file to crash software when opened in vim."},"relatedVulnerabilities":[{"id":"CVE-2022-1620","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":6.6,"impactScore":4.8,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-1620","cwe":"CWE-476","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-1620","cwe":"CWE-476","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-1620","date":"2026-10-10","epss":0.01593,"percentile":0.75}],"urls":["http://seclists.org/fulldisclosure/2022/Oct/28","http://seclists.org/fulldisclosure/2022/Oct/41","https://github.com/vim/vim/commit/8e4b76da1d7e987d43ca960dfbc372d1c617466f","https://huntr.dev/bounties/7a4c59f3-fcc0-4496-995d-5ca6acd2da51","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A6BY5P7ERZS7KXSBCGFCOXLMLGWUUJIH/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HIP7KG7TVS5YF3QREAY2GOGUT3YUBZAI/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JUN33257RUM4RS2I4GZETKFSAXPETATG/","https://security.gentoo.org/glsa/202208-32","https://security.gentoo.org/glsa/202305-16","https://support.apple.com/kb/HT213488"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-1620","description":"NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in GitHub repository vim/vim prior to 8.2.4901. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 allows attackers to cause a denial of service (application crash) via a crafted input."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-2124","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-2124","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2124","cwe":"CWE-126","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-2124","cwe":"CWE-125","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-2124","date":"2026-10-10","epss":0.01566,"percentile":0.74614}],"risk":0.8456400000000001,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-2124","description":"Buffer Over-read in GitHub repository vim/vim prior to 8.2."},"relatedVulnerabilities":[{"id":"CVE-2022-2124","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2124","cwe":"CWE-126","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-2124","cwe":"CWE-125","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-2124","date":"2026-10-10","epss":0.01566,"percentile":0.74614}],"urls":["http://seclists.org/fulldisclosure/2022/Oct/28","http://seclists.org/fulldisclosure/2022/Oct/41","http://seclists.org/fulldisclosure/2022/Oct/43","http://seclists.org/fulldisclosure/2022/Oct/45","https://github.com/vim/vim/commit/2f074f4685897ab7212e25931eeeb0212292829f","https://huntr.dev/bounties/8e9e056d-f733-4540-98b6-414bf36e0b42","https://lists.debian.org/debian-lts-announce/2022/06/msg00014.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U743FMJGFQ35GBPCQ6OWMVZEJPDFVEWM/","https://security.gentoo.org/glsa/202208-32","https://security.gentoo.org/glsa/202305-16","https://support.apple.com/kb/HT213443","https://support.apple.com/kb/HT213444","https://support.apple.com/kb/HT213488"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-2124","description":"Buffer Over-read in GitHub repository vim/vim prior to 8.2."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-2126","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-2126","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2126","cwe":"CWE-125","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-2126","cwe":"CWE-125","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-2126","date":"2026-10-10","epss":0.01566,"percentile":0.74614}],"risk":0.8456400000000001,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-2126","description":"Out-of-bounds Read in GitHub repository vim/vim prior to 8.2."},"relatedVulnerabilities":[{"id":"CVE-2022-2126","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2126","cwe":"CWE-125","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-2126","cwe":"CWE-125","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-2126","date":"2026-10-10","epss":0.01566,"percentile":0.74614}],"urls":["http://seclists.org/fulldisclosure/2022/Oct/28","http://seclists.org/fulldisclosure/2022/Oct/41","http://seclists.org/fulldisclosure/2022/Oct/43","http://seclists.org/fulldisclosure/2022/Oct/45","https://github.com/vim/vim/commit/156d3911952d73b03d7420dc3540215247db0fe8","https://huntr.dev/bounties/8d196d9b-3d10-41d2-9f70-8ef0d08c946e","https://lists.debian.org/debian-lts-announce/2022/06/msg00014.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U743FMJGFQ35GBPCQ6OWMVZEJPDFVEWM/","https://security.gentoo.org/glsa/202208-32","https://security.gentoo.org/glsa/202305-16","https://support.apple.com/kb/HT213443","https://support.apple.com/kb/HT213444","https://support.apple.com/kb/HT213488"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-2126","description":"Out-of-bounds Read in GitHub repository vim/vim prior to 8.2."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-4187","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2021-4187","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.3,"impactScore":5.9,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-4187","cwe":"CWE-416","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2021-4187","cwe":"CWE-416","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-4187","date":"2026-10-10","epss":0.01629,"percentile":0.75508}],"risk":0.838935,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-4187","description":"A flaw was found in vim. A possible use after free vulnerability could allow an attacker to input a specially crafted file leading to a crash or code execution."},"relatedVulnerabilities":[{"id":"CVE-2021-4187","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:H","metrics":{"baseScore":6.8,"impactScore":5.5,"exploitabilityScore":1.4},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-4187","cwe":"CWE-416","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2021-4187","cwe":"CWE-416","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-4187","date":"2026-10-10","epss":0.01629,"percentile":0.75508}],"urls":["http://seclists.org/fulldisclosure/2022/Jul/14","http://seclists.org/fulldisclosure/2022/Mar/29","http://seclists.org/fulldisclosure/2022/May/35","http://www.openwall.com/lists/oss-security/2022/01/15/1","https://github.com/vim/vim/commit/4bf1006cae7e87259ccd5219128c3dba75774441","https://huntr.dev/bounties/a8bee03a-6e2e-43bf-bee3-4968c5386a2e","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2EY2VFBU3YGGWI5BW4XKT3F37MYGEQUD/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3FH2J57GDA2WMBS6J56F6QQRA6BXQQFZ/","https://security.gentoo.org/glsa/202208-32","https://support.apple.com/kb/HT213183","https://support.apple.com/kb/HT213256","https://support.apple.com/kb/HT213343","https://lists.debian.org/debian-lts-announce/2025/03/msg00023.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-4187","description":"vim is vulnerable to Use After Free"}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-2182","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-2182","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2182","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2022-2182","date":"2026-10-10","epss":0.01547,"percentile":0.74303}],"risk":0.83538,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-2182","description":"Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2."},"relatedVulnerabilities":[{"id":"CVE-2022-2182","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2182","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2022-2182","date":"2026-10-10","epss":0.01547,"percentile":0.74303}],"urls":["https://github.com/vim/vim/commit/f7c7c3fad6d2135d558f3b36d0d1a943118aeb5e","https://huntr.dev/bounties/238d8650-3beb-4831-a8f7-6f0b597a6fb8","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U743FMJGFQ35GBPCQ6OWMVZEJPDFVEWM/","https://security.gentoo.org/glsa/202208-32","https://security.gentoo.org/glsa/202305-16"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-2182","description":"Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2."}]},{"artifact":{"id":"406b3abfffe1d292","cpes":["cpe:2.3:a:git-lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git-lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*"],"name":"git-lfs","purl":"pkg:rpm/redhat/git-lfs@3.7.1-4.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=git-lfs-3.7.1-4.el9_8.3.src.rpm","type":"rpm","version":"3.7.1-4.el9_8.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-29409","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"git-lfs","version":"0:3.7.1-4.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2023-29409","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-29409","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-29409","date":"2026-10-10","epss":0.01601,"percentile":0.75107}],"risk":0.824515,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-29409","description":"A denial of service vulnerability was found in the Golang Go package caused by an uncontrolled resource consumption flaw. By persuading a victim to use a specially crafted certificate with large RSA keys, a remote attacker can cause a client/server to expend significant CPU time verifying signatures, resulting in a denial of service condition."},"relatedVulnerabilities":[{"id":"CVE-2023-29409","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-29409","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-29409","date":"2026-10-10","epss":0.01601,"percentile":0.75107}],"urls":["https://go.dev/cl/515257","https://go.dev/issue/61460","https://groups.google.com/g/golang-announce/c/X0b6CsSAaYI/m/Efv5DbZ9AwAJ","https://pkg.go.dev/vuln/GO-2023-1987","https://security.gentoo.org/glsa/202311-09","https://security.netapp.com/advisory/ntap-20230831-0010/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-29409","description":"Extremely large RSA keys in certificate chains can cause a client/server to expend significant CPU time verifying signatures. With fix, the size of RSA keys transmitted during handshakes is restricted to <= 8192 bits. Based on a survey of publicly trusted RSA keys, there are currently only three certificates in circulation with keys larger than this, and all three appear to be test certificates that are not actively deployed. It is possible there are larger keys in use in private PKIs, but we target the web PKI, so causing breakage here in the interests of increasing the default safety of users of crypto/tls seems reasonable."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-2304","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-2304","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2304","cwe":"CWE-121","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-2304","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-2304","date":"2026-10-10","epss":0.01489,"percentile":0.7334}],"risk":0.80406,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-2304","description":"A stack-based buffer overflow vulnerability was found in Vim's spell_dump_compl() function of the src/spell.c file. This issue occurs because the spell dump goes beyond the end of an array when crafted input is processed. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering an out-of-bounds write that causes an application to crash, possibly executing code and corrupting memory."},"relatedVulnerabilities":[{"id":"CVE-2022-2304","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2304","cwe":"CWE-121","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-2304","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-2304","date":"2026-10-10","epss":0.01489,"percentile":0.7334}],"urls":["https://github.com/vim/vim/commit/54e5fed6d27b747ff152cdb6edfb72ff60e70939","https://huntr.dev/bounties/eb7402f3-025a-402f-97a7-c38700d9548a","https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/43Y3VJPOTTY3NTREDIFUPITM2POG4ZLP/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UXPO5EHDV6J4B27E65DOQGZFELUFPRSK/","https://security.gentoo.org/glsa/202208-32","https://security.gentoo.org/glsa/202305-16","https://lists.debian.org/debian-lts-announce/2025/03/msg00023.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-2304","description":"Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-2042","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-2042","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2042","cwe":"CWE-416","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-2042","cwe":"CWE-416","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-2042","date":"2026-10-10","epss":0.01481,"percentile":0.73211}],"risk":0.79974,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-2042","description":"A heap use-after-free vulnerability was found in Vim's skipwhite() function of the src/charset.c file. This flaw occurs because of an uninitialized attribute value and freed memory in the spell command. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap use-after-free that causes an application to crash and corrupt memory."},"relatedVulnerabilities":[{"id":"CVE-2022-2042","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L","metrics":{"baseScore":7.4,"impactScore":6,"exploitabilityScore":0.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2042","cwe":"CWE-416","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-2042","cwe":"CWE-416","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-2042","date":"2026-10-10","epss":0.01481,"percentile":0.73211}],"urls":["http://seclists.org/fulldisclosure/2022/Oct/28","http://seclists.org/fulldisclosure/2022/Oct/41","http://seclists.org/fulldisclosure/2022/Oct/43","http://seclists.org/fulldisclosure/2022/Oct/45","https://github.com/vim/vim/commit/2813f38e021c6e6581c0c88fcf107e41788bc835","https://huntr.dev/bounties/8628b4cd-4055-4059-aed4-64f7fdc10eba","https://security.gentoo.org/glsa/202208-32","https://security.gentoo.org/glsa/202305-16","https://support.apple.com/kb/HT213443","https://support.apple.com/kb/HT213444","https://support.apple.com/kb/HT213488"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-2042","description":"Use After Free in GitHub repository vim/vim prior to 8.2."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-4166","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2021-4166","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":5.2,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-4166","cwe":"CWE-125","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2021-4166","cwe":"CWE-125","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-4166","date":"2026-10-10","epss":0.01578,"percentile":0.74789}],"risk":0.7968899999999999,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-4166","description":"A flaw was found in vim. A possible heap-based buffer overflow could allow an attacker to input a specially crafted file leading to a crash or code execution."},"relatedVulnerabilities":[{"id":"CVE-2021-4166","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":5.2,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","metrics":{"baseScore":5.8,"impactScore":5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":5.2,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-4166","cwe":"CWE-125","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2021-4166","cwe":"CWE-125","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-4166","date":"2026-10-10","epss":0.01578,"percentile":0.74789}],"urls":["http://seclists.org/fulldisclosure/2022/Jul/14","http://seclists.org/fulldisclosure/2022/Mar/29","http://seclists.org/fulldisclosure/2022/May/35","http://www.openwall.com/lists/oss-security/2022/01/15/1","https://github.com/vim/vim/commit/6f98371532fcff911b462d51bc64f2ce8a6ae682","https://huntr.dev/bounties/229df5dd-5507-44e9-832c-c70364bdf035","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2EY2VFBU3YGGWI5BW4XKT3F37MYGEQUD/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3FH2J57GDA2WMBS6J56F6QQRA6BXQQFZ/","https://security.gentoo.org/glsa/202208-32","https://support.apple.com/kb/HT213183","https://support.apple.com/kb/HT213256","https://support.apple.com/kb/HT213343"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-4166","description":"vim is vulnerable to Out-of-bounds Read"}]},{"artifact":{"id":"f5eb0651fec88df5","cpes":["cpe:2.3:a:com.fasterxml.jackson.core:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.20.1:*:*:*:*:*:*:*"],"name":"jackson-databind","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1","type":"java-archive","version":"2.20.1","language":"java","licenses":["The Apache Software License, Version 2.0"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/opt/jenkins-plugin-manager.jar:com.fasterxml.jackson.core:jackson-databind","manifestName":"","pomArtifactID":"jackson-databind","archiveDigests":null},"locations":[{"path":"/opt/jenkins-plugin-manager.jar","layerID":"sha256:1303dd889187d7e25ac68bf0fb8d636f5a922b6753d092bcae3924d569cb869a","accessPath":"/opt/jenkins-plugin-manager.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.21.4"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-j3rv-43j4-c7qm","versionConstraint":">=2.19.0,<=2.21.3 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-databind","version":"2.20.1"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-j3rv-43j4-c7qm","fix":{"state":"fixed","versions":["2.21.4"],"available":[{"date":"2026-06-24","kind":"first-observed","version":"2.21.4"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54512","cwe":"CWE-184","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-54512","cwe":"CWE-502","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-54512","date":"2026-10-10","epss":0.00999,"percentile":0.61732}],"risk":0.7792200000000001,"urls":["https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm","https://github.com/FasterXML/jackson-databind/issues/5988","https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5","https://nvd.nist.gov/vuln/detail/CVE-2026-54512"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-j3rv-43j4-c7qm","description":"jackson-databind has a PolymorphicTypeValidator bypass via generic type parameters that allows arbitrary class instantiation"},"relatedVulnerabilities":[{"id":"CVE-2026-54512","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54512","cwe":"CWE-184","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-54512","cwe":"CWE-502","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-54512","date":"2026-10-10","epss":0.00999,"percentile":0.61732}],"urls":["https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5","https://github.com/FasterXML/jackson-databind/issues/5988","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-54512","description":"jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, and 3.1.4, jackson-databind's PolymorphicTypeValidator (PTV) is the primary safety mechanism guarding polymorphic deserialization. When polymorphic typing is enabled and a type identifier contains generic parameters (i.e. the type ID string contains <), DatabindContext._resolveAndValidateGeneric() validates only the raw container class name (the substring before <) against the configured PTV. If the container type is approved, the method parses the full canonical type string via TypeFactory.constructFromCanonical() and returns the fully parameterized type without ever validating the nested type arguments against the PTV. The nested type arguments are then resolved, instantiated, and populated as beans during deserialization. An attacker who controls the type ID can therefore place a denied class as a generic type parameter of an allowed container — for example java.util.ArrayList<com.evil.Gadget> when only java.util.ArrayList is allow-listed. The container passes the PTV check; com.evil.Gadget is loaded via Class.forName(name, true, loader), instantiated, and its properties are set from attacker-controlled JSON. This completely bypasses an explicitly configured PTV allow-list. This vulnerability is fixed in 2.18.8, 2.21.4, and 3.1.4."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-2284","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-2284","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2284","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2022-2284","date":"2026-10-10","epss":0.01442,"percentile":0.72472}],"risk":0.77868,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-2284","description":"Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0."},"relatedVulnerabilities":[{"id":"CVE-2022-2284","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2284","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2022-2284","date":"2026-10-10","epss":0.01442,"percentile":0.72472}],"urls":["https://github.com/vim/vim/commit/3d51ce18ab1be4f9f6061568a4e7fabf00b21794","https://huntr.dev/bounties/571d25ce-8d53-4fa0-b620-27f2a8a14874","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/43Y3VJPOTTY3NTREDIFUPITM2POG4ZLP/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UXPO5EHDV6J4B27E65DOQGZFELUFPRSK/","https://security.gentoo.org/glsa/202208-32","https://security.gentoo.org/glsa/202305-16"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-2284","description":"Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0."}]},{"artifact":{"id":"406b3abfffe1d292","cpes":["cpe:2.3:a:git-lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git-lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*"],"name":"git-lfs","purl":"pkg:rpm/redhat/git-lfs@3.7.1-4.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=git-lfs-3.7.1-4.el9_8.3.src.rpm","type":"rpm","version":"3.7.1-4.el9_8.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-41725","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"git-lfs","version":"0:3.7.1-4.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-41725","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-41725","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-41725","date":"2026-10-10","epss":0.01241,"percentile":0.68339}],"risk":0.7756249999999999,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-41725","description":"A flaw was found in Go, where it is vulnerable to a denial of service caused by an excessive resource consumption flaw in the net/http and mime/multipart packages. By sending a specially-crafted request, a remote attacker can cause a denial of service."},"relatedVulnerabilities":[{"id":"CVE-2022-41725","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-41725","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-41725","date":"2026-10-10","epss":0.01241,"percentile":0.68339}],"urls":["https://go.dev/cl/468124","https://go.dev/issue/58006","https://groups.google.com/g/golang-announce/c/V0aBFqaFs_E","https://pkg.go.dev/vuln/GO-2023-1569","https://security.gentoo.org/glsa/202311-09"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-41725","description":"A denial of service is possible from excessive resource consumption in net/http and mime/multipart. Multipart form parsing with mime/multipart.Reader.ReadForm can consume largely unlimited amounts of memory and disk files. This also affects form parsing in the net/http package with the Request methods FormFile, FormValue, ParseMultipartForm, and PostFormValue. ReadForm takes a maxMemory parameter, and is documented as storing \"up to maxMemory bytes +10MB (reserved for non-file parts) in memory\". File parts which cannot be stored in memory are stored on disk in temporary files. The unconfigurable 10MB reserved for non-file parts is excessively large and can potentially open a denial of service vector on its own. However, ReadForm did not properly account for all memory consumed by a parsed form, such as map entry overhead, part names, and MIME headers, permitting a maliciously crafted form to consume well over 10MB. In addition, ReadForm contained no limit on the number of disk files created, permitting a relatively small request body to create a large number of disk temporary files. With fix, ReadForm now properly accounts for various forms of memory overhead, and should now stay within its documented limit of 10MB + maxMemory bytes of memory consumption. Users should still be aware that this limit is high and may still be hazardous. In addition, ReadForm now creates at most one on-disk temporary file, combining multiple form parts into a single temporary file. The mime/multipart.File interface type's documentation states, \"If stored on disk, the File's underlying concrete type will be an *os.File.\". This is no longer the case when a form contains more than one file part, due to this coalescing of parts into a single file. The previous behavior of using distinct files for each form part may be reenabled with the environment variable GODEBUG=multipartfiles=distinct. Users should be aware that multipart.ReadForm and the http.Request methods that call it do not limit the amount of disk consumed by temporary files. Callers can limit the size of form data with http.MaxBytesReader."}]},{"artifact":{"id":"badc115167ed0f1b","cpes":["cpe:2.3:a:python3-rpm:python3-rpm:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:python3-rpm:python3_rpm:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:python3_rpm:python3-rpm:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:python3_rpm:python3_rpm:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3-rpm:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3_rpm:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3-rpm:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3_rpm:4.16.1.3-40.el9:*:*:*:*:*:*:*"],"name":"python3-rpm","purl":"pkg:rpm/redhat/python3-rpm@4.16.1.3-40.el9?arch=x86_64&distro=rhel-9.8&upstream=rpm-4.16.1.3-40.el9.src.rpm","type":"rpm","version":"4.16.1.3-40.el9","language":"","licenses":["GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"rpm","version":"4.16.1.3-40.el9"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-84837","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"rpm","version":"4.16.1.3-40.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-84837","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84837","cwe":"CWE-78","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-84837","date":"2026-10-10","epss":0.01199,"percentile":0.67284}],"risk":0.76736,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-84837","description":"A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename of a tarball processed by `rpmbuild -t*` to include shell metacharacters. This is particularly relevant in automated build or continuous integration (CI) workflows that ingest externally supplied artifact names. Successful exploitation allows for arbitrary command execution with the privileges of the build user, which could lead to information disclosure or disruption of the build environment."},"relatedVulnerabilities":[{"id":"CVE-2026-84837","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84837","cwe":"CWE-78","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-84837","date":"2026-10-10","epss":0.01199,"percentile":0.67284}],"urls":["https://access.redhat.com/security/cve/CVE-2026-84837","https://bugzilla.redhat.com/show_bug.cgi?id=2478408"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-84837","description":"A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename of a tarball processed by `rpmbuild -t*` to include shell metacharacters. This is particularly relevant in automated build or continuous integration (CI) workflows that ingest externally supplied artifact names. Successful exploitation allows for arbitrary command execution with the privileges of the build user, which could lead to information disclosure or disruption of the build environment."}]},{"artifact":{"id":"fe0a59036b95950c","cpes":["cpe:2.3:a:redhat:rpm:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm:rpm:4.16.1.3-40.el9:*:*:*:*:*:*:*"],"name":"rpm","purl":"pkg:rpm/redhat/rpm@4.16.1.3-40.el9?arch=x86_64&distro=rhel-9.8&upstream=rpm-4.16.1.3-40.el9.src.rpm","type":"rpm","version":"4.16.1.3-40.el9","language":"","licenses":["GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-84837","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"rpm","version":"0:4.16.1.3-40.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-84837","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84837","cwe":"CWE-78","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-84837","date":"2026-10-10","epss":0.01199,"percentile":0.67284}],"risk":0.76736,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-84837","description":"A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename of a tarball processed by `rpmbuild -t*` to include shell metacharacters. This is particularly relevant in automated build or continuous integration (CI) workflows that ingest externally supplied artifact names. Successful exploitation allows for arbitrary command execution with the privileges of the build user, which could lead to information disclosure or disruption of the build environment."},"relatedVulnerabilities":[{"id":"CVE-2026-84837","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84837","cwe":"CWE-78","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-84837","date":"2026-10-10","epss":0.01199,"percentile":0.67284}],"urls":["https://access.redhat.com/security/cve/CVE-2026-84837","https://bugzilla.redhat.com/show_bug.cgi?id=2478408"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-84837","description":"A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename of a tarball processed by `rpmbuild -t*` to include shell metacharacters. This is particularly relevant in automated build or continuous integration (CI) workflows that ingest externally supplied artifact names. Successful exploitation allows for arbitrary command execution with the privileges of the build user, which could lead to information disclosure or disruption of the build environment."}]},{"artifact":{"id":"27707240ebd32452","cpes":["cpe:2.3:a:rpm-build-libs:rpm-build-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm-build-libs:rpm_build_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm_build_libs:rpm-build-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm_build_libs:rpm_build_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm-build:rpm-build-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm-build:rpm_build_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm_build:rpm-build-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm_build:rpm_build_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:rpm-build-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:rpm_build_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm:rpm-build-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm:rpm_build_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*"],"name":"rpm-build-libs","purl":"pkg:rpm/redhat/rpm-build-libs@4.16.1.3-40.el9?arch=x86_64&distro=rhel-9.8&upstream=rpm-4.16.1.3-40.el9.src.rpm","type":"rpm","version":"4.16.1.3-40.el9","language":"","licenses":["GPLv2+ and LGPLv2+ with exceptions"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"rpm","version":"4.16.1.3-40.el9"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-84837","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"rpm","version":"4.16.1.3-40.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-84837","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84837","cwe":"CWE-78","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-84837","date":"2026-10-10","epss":0.01199,"percentile":0.67284}],"risk":0.76736,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-84837","description":"A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename of a tarball processed by `rpmbuild -t*` to include shell metacharacters. This is particularly relevant in automated build or continuous integration (CI) workflows that ingest externally supplied artifact names. Successful exploitation allows for arbitrary command execution with the privileges of the build user, which could lead to information disclosure or disruption of the build environment."},"relatedVulnerabilities":[{"id":"CVE-2026-84837","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84837","cwe":"CWE-78","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-84837","date":"2026-10-10","epss":0.01199,"percentile":0.67284}],"urls":["https://access.redhat.com/security/cve/CVE-2026-84837","https://bugzilla.redhat.com/show_bug.cgi?id=2478408"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-84837","description":"A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename of a tarball processed by `rpmbuild -t*` to include shell metacharacters. This is particularly relevant in automated build or continuous integration (CI) workflows that ingest externally supplied artifact names. Successful exploitation allows for arbitrary command execution with the privileges of the build user, which could lead to information disclosure or disruption of the build environment."}]},{"artifact":{"id":"108e4bcd5f0cf305","cpes":["cpe:2.3:a:rpm-libs:rpm-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm-libs:rpm_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm_libs:rpm-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm_libs:rpm_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:rpm-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:rpm_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm:rpm-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm:rpm_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*"],"name":"rpm-libs","purl":"pkg:rpm/redhat/rpm-libs@4.16.1.3-40.el9?arch=x86_64&distro=rhel-9.8&upstream=rpm-4.16.1.3-40.el9.src.rpm","type":"rpm","version":"4.16.1.3-40.el9","language":"","licenses":["GPLv2+ and LGPLv2+ with exceptions"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"rpm","version":"4.16.1.3-40.el9"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-84837","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"rpm","version":"4.16.1.3-40.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-84837","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84837","cwe":"CWE-78","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-84837","date":"2026-10-10","epss":0.01199,"percentile":0.67284}],"risk":0.76736,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-84837","description":"A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename of a tarball processed by `rpmbuild -t*` to include shell metacharacters. This is particularly relevant in automated build or continuous integration (CI) workflows that ingest externally supplied artifact names. Successful exploitation allows for arbitrary command execution with the privileges of the build user, which could lead to information disclosure or disruption of the build environment."},"relatedVulnerabilities":[{"id":"CVE-2026-84837","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84837","cwe":"CWE-78","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-84837","date":"2026-10-10","epss":0.01199,"percentile":0.67284}],"urls":["https://access.redhat.com/security/cve/CVE-2026-84837","https://bugzilla.redhat.com/show_bug.cgi?id=2478408"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-84837","description":"A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename of a tarball processed by `rpmbuild -t*` to include shell metacharacters. This is particularly relevant in automated build or continuous integration (CI) workflows that ingest externally supplied artifact names. Successful exploitation allows for arbitrary command execution with the privileges of the build user, which could lead to information disclosure or disruption of the build environment."}]},{"artifact":{"id":"fd3a4056ba2de6c5","cpes":["cpe:2.3:a:rpm-sign-libs:rpm-sign-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm-sign-libs:rpm_sign_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm_sign_libs:rpm-sign-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm_sign_libs:rpm_sign_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm-sign:rpm-sign-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm-sign:rpm_sign_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm_sign:rpm-sign-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm_sign:rpm_sign_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:rpm-sign-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:rpm_sign_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm:rpm-sign-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm:rpm_sign_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*"],"name":"rpm-sign-libs","purl":"pkg:rpm/redhat/rpm-sign-libs@4.16.1.3-40.el9?arch=x86_64&distro=rhel-9.8&upstream=rpm-4.16.1.3-40.el9.src.rpm","type":"rpm","version":"4.16.1.3-40.el9","language":"","licenses":["GPLv2+ and LGPLv2+ with exceptions"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"rpm","version":"4.16.1.3-40.el9"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-84837","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"rpm","version":"4.16.1.3-40.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-84837","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84837","cwe":"CWE-78","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-84837","date":"2026-10-10","epss":0.01199,"percentile":0.67284}],"risk":0.76736,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-84837","description":"A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename of a tarball processed by `rpmbuild -t*` to include shell metacharacters. This is particularly relevant in automated build or continuous integration (CI) workflows that ingest externally supplied artifact names. Successful exploitation allows for arbitrary command execution with the privileges of the build user, which could lead to information disclosure or disruption of the build environment."},"relatedVulnerabilities":[{"id":"CVE-2026-84837","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84837","cwe":"CWE-78","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-84837","date":"2026-10-10","epss":0.01199,"percentile":0.67284}],"urls":["https://access.redhat.com/security/cve/CVE-2026-84837","https://bugzilla.redhat.com/show_bug.cgi?id=2478408"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-84837","description":"A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename of a tarball processed by `rpmbuild -t*` to include shell metacharacters. This is particularly relevant in automated build or continuous integration (CI) workflows that ingest externally supplied artifact names. Successful exploitation allows for arbitrary command execution with the privileges of the build user, which could lead to information disclosure or disruption of the build environment."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-2129","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-2129","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2129","cwe":"CWE-787","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-2129","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-2129","date":"2026-10-10","epss":0.0142,"percentile":0.72072}],"risk":0.7668000000000001,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-2129","description":"Out-of-bounds Write in GitHub repository vim/vim prior to 8.2."},"relatedVulnerabilities":[{"id":"CVE-2022-2129","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2129","cwe":"CWE-787","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-2129","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-2129","date":"2026-10-10","epss":0.0142,"percentile":0.72072}],"urls":["https://github.com/vim/vim/commit/d6211a52ab9f53b82f884561ed43d2fe4d24ff7d","https://huntr.dev/bounties/3aaf06e7-9ae1-454d-b8ca-8709c98e5352","https://lists.debian.org/debian-lts-announce/2022/11/msg00032.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U743FMJGFQ35GBPCQ6OWMVZEJPDFVEWM/","https://security.gentoo.org/glsa/202208-32","https://security.gentoo.org/glsa/202305-16","https://lists.debian.org/debian-lts-announce/2025/03/msg00023.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-2129","description":"Out-of-bounds Write in GitHub repository vim/vim prior to 8.2."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-2285","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-2285","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2285","cwe":"CWE-190","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-2285","cwe":"CWE-190","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-2285","date":"2026-10-10","epss":0.0142,"percentile":0.72072}],"risk":0.7668000000000001,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-2285","description":"Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0."},"relatedVulnerabilities":[{"id":"CVE-2022-2285","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2285","cwe":"CWE-190","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-2285","cwe":"CWE-190","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-2285","date":"2026-10-10","epss":0.0142,"percentile":0.72072}],"urls":["https://github.com/vim/vim/commit/27efc62f5d86afcb2ecb7565587fe8dea4b036fe","https://huntr.dev/bounties/64574b28-1779-458d-a221-06c434042736","https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/43Y3VJPOTTY3NTREDIFUPITM2POG4ZLP/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UXPO5EHDV6J4B27E65DOQGZFELUFPRSK/","https://security.gentoo.org/glsa/202208-32","https://security.gentoo.org/glsa/202305-16"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-2285","description":"Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-2257","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-2257","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2257","cwe":"CWE-125","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2022-2257","date":"2026-10-10","epss":0.01407,"percentile":0.71842}],"risk":0.75978,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-2257","description":"A flaw was found in vim, which is vulnerable to an out-of-bounds read in the msg_outtrans_special function. This flaw allows a specially crafted file to crash software or execute code when opened in vim."},"relatedVulnerabilities":[{"id":"CVE-2022-2257","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2257","cwe":"CWE-125","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2022-2257","date":"2026-10-10","epss":0.01407,"percentile":0.71842}],"urls":["https://github.com/vim/vim/commit/083692d598139228e101b8c521aaef7bcf256e9a","https://huntr.dev/bounties/ca581f80-03ba-472a-b820-78f7fd05fe89","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/43Y3VJPOTTY3NTREDIFUPITM2POG4ZLP/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UXPO5EHDV6J4B27E65DOQGZFELUFPRSK/","https://security.gentoo.org/glsa/202208-32","https://security.gentoo.org/glsa/202305-16"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-2257","description":"Out-of-bounds Read in GitHub repository vim/vim prior to 9.0."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-2207","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-2207","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2207","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2022-2207","date":"2026-10-10","epss":0.01404,"percentile":0.71796}],"risk":0.7581600000000001,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-2207","description":"Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2."},"relatedVulnerabilities":[{"id":"CVE-2022-2207","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2207","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2022-2207","date":"2026-10-10","epss":0.01404,"percentile":0.71796}],"urls":["https://github.com/vim/vim/commit/0971c7a4e537ea120a6bb2195960be8d0815e97b","https://huntr.dev/bounties/05bc6051-4dc3-483b-ae56-cf23346b97b9","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U743FMJGFQ35GBPCQ6OWMVZEJPDFVEWM/","https://security.gentoo.org/glsa/202208-32","https://security.gentoo.org/glsa/202305-16"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-2207","description":"Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-2210","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-2210","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2210","cwe":"CWE-787","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2022-2210","date":"2026-10-10","epss":0.01395,"percentile":0.71621}],"risk":0.7533000000000001,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-2210","description":"Out-of-bounds Write in GitHub repository vim/vim prior to 8.2."},"relatedVulnerabilities":[{"id":"CVE-2022-2210","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2210","cwe":"CWE-787","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2022-2210","date":"2026-10-10","epss":0.01395,"percentile":0.71621}],"urls":["https://github.com/vim/vim/commit/c101abff4c6756db4f5e740fde289decb9452efa","https://huntr.dev/bounties/020845f8-f047-4072-af0f-3726fe1aea25","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U743FMJGFQ35GBPCQ6OWMVZEJPDFVEWM/","https://security.gentoo.org/glsa/202208-32","https://security.gentoo.org/glsa/202305-16"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-2210","description":"Out-of-bounds Write in GitHub repository vim/vim prior to 8.2."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-2343","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-2343","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2343","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2022-2343","date":"2026-10-10","epss":0.01377,"percentile":0.71285}],"risk":0.74358,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-2343","description":"A heap-based buffer overflow was found in Vim in the ins_compl_add function in the insexpand.c file. This issue occurs due to a read past the end of a buffer when a specially crafted input is processed. This flaw allows an attacker who can trick a user into opening a specially crafted file into triggering the heap-based buffer overflow, causing the application to crash, possibly executing code and corrupting memory."},"relatedVulnerabilities":[{"id":"CVE-2022-2343","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2343","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2022-2343","date":"2026-10-10","epss":0.01377,"percentile":0.71285}],"urls":["https://github.com/vim/vim/commit/caea66442d86e7bbba3bf3dc202c3c0d549b9853","https://huntr.dev/bounties/2ecb4345-2fc7-4e7f-adb0-83a20bb458f5","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/43Y3VJPOTTY3NTREDIFUPITM2POG4ZLP/","https://security.gentoo.org/glsa/202208-32","https://security.gentoo.org/glsa/202305-16"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-2343","description":"Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0044."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-2286","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-2286","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2286","cwe":"CWE-125","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2022-2286","date":"2026-10-10","epss":0.01375,"percentile":0.71233}],"risk":0.7425,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-2286","description":"Out-of-bounds Read in GitHub repository vim/vim prior to 9.0."},"relatedVulnerabilities":[{"id":"CVE-2022-2286","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2286","cwe":"CWE-125","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2022-2286","date":"2026-10-10","epss":0.01375,"percentile":0.71233}],"urls":["https://github.com/vim/vim/commit/f12129f1714f7d2301935bb21d896609bdac221c","https://huntr.dev/bounties/fe7681fb-2318-436b-8e65-daf66cd597d8","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/43Y3VJPOTTY3NTREDIFUPITM2POG4ZLP/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UXPO5EHDV6J4B27E65DOQGZFELUFPRSK/","https://security.gentoo.org/glsa/202208-32","https://security.gentoo.org/glsa/202305-16"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-2286","description":"Out-of-bounds Read in GitHub repository vim/vim prior to 9.0."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-2206","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-2206","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2206","cwe":"CWE-125","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2022-2206","date":"2026-10-10","epss":0.01363,"percentile":0.71003}],"risk":0.7360200000000001,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-2206","description":"Out-of-bounds Read in GitHub repository vim/vim prior to 8.2."},"relatedVulnerabilities":[{"id":"CVE-2022-2206","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2206","cwe":"CWE-125","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2022-2206","date":"2026-10-10","epss":0.01363,"percentile":0.71003}],"urls":["https://github.com/vim/vim/commit/e178af5a586ea023622d460779fdcabbbfac0908","https://huntr.dev/bounties/01d01e74-55d0-4d9e-878e-79ba599be668","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U743FMJGFQ35GBPCQ6OWMVZEJPDFVEWM/","https://security.gentoo.org/glsa/202208-32","https://security.gentoo.org/glsa/202305-16"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-2206","description":"Out-of-bounds Read in GitHub repository vim/vim prior to 8.2."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-2175","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-2175","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2175","cwe":"CWE-126","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-2175","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-2175","date":"2026-10-10","epss":0.01319,"percentile":0.70023}],"risk":0.7122600000000001,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-2175","description":"A heap buffer over-read vulnerability was found in Vim's put_on_cmdline() function of the src/ex_getln.c file. This issue occurs due to invalid memory access when using an expression on the command line. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap buffer overflow that causes an application to crash and corrupt memory."},"relatedVulnerabilities":[{"id":"CVE-2022-2175","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2175","cwe":"CWE-126","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-2175","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-2175","date":"2026-10-10","epss":0.01319,"percentile":0.70023}],"urls":["https://github.com/vim/vim/commit/6046aded8da002b08d380db29de2ba0268b6616e","https://huntr.dev/bounties/7f0481c2-8b57-4324-b47c-795d1ea67e55","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U743FMJGFQ35GBPCQ6OWMVZEJPDFVEWM/","https://security.gentoo.org/glsa/202208-32","https://security.gentoo.org/glsa/202305-16"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-2175","description":"Buffer Over-read in GitHub repository vim/vim prior to 8.2."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-2287","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-2287","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":5.2,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2287","cwe":"CWE-125","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2022-2287","date":"2026-10-10","epss":0.01395,"percentile":0.71623}],"risk":0.7044750000000001,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-2287","description":"Out-of-bounds Read in GitHub repository vim/vim prior to 9.0."},"relatedVulnerabilities":[{"id":"CVE-2022-2287","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":5.2,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","metrics":{"baseScore":5.8,"impactScore":5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","metrics":{"baseScore":8,"impactScore":5.5,"exploitabilityScore":2.6},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2287","cwe":"CWE-125","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2022-2287","date":"2026-10-10","epss":0.01395,"percentile":0.71623}],"urls":["https://github.com/vim/vim/commit/5e59ea54c0c37c2f84770f068d95280069828774","https://huntr.dev/bounties/654aa069-3a9d-45d3-9a52-c1cf3490c284","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/43Y3VJPOTTY3NTREDIFUPITM2POG4ZLP/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UXPO5EHDV6J4B27E65DOQGZFELUFPRSK/","https://security.gentoo.org/glsa/202208-32","https://security.gentoo.org/glsa/202305-16"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-2287","description":"Out-of-bounds Read in GitHub repository vim/vim prior to 9.0."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-2344","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-2344","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2344","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-2344","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-2344","date":"2026-10-10","epss":0.01295,"percentile":0.69526}],"risk":0.6993,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-2344","description":"A heap-based buffer overflow was found in Vim in the ins_compl_add function in the insexpand.c file. This issue occurs due to a read past the end of a buffer when a specially crafted input is processed. This flaw allows an attacker who can trick a user into opening a specially crafted file into triggering the heap-based buffer overflow, causing the application to crash, possibly executing code and corrupting memory."},"relatedVulnerabilities":[{"id":"CVE-2022-2344","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2344","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-2344","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-2344","date":"2026-10-10","epss":0.01295,"percentile":0.69526}],"urls":["https://github.com/vim/vim/commit/baefde14550231f6468ac2ed2ed495bc381c0c92","https://huntr.dev/bounties/4a095ed9-3125-464a-b656-c31b437e1996","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/43Y3VJPOTTY3NTREDIFUPITM2POG4ZLP/","https://security.gentoo.org/glsa/202208-32","https://security.gentoo.org/glsa/202305-16"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-2344","description":"Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0045."}]},{"artifact":{"id":"ea0f2a7e0eb5d962","cpes":["cpe:2.3:a:python3:python3:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3:3.9.25-7.el9_8.3:*:*:*:*:*:*:*"],"name":"python3","purl":"pkg:rpm/redhat/python3@3.9.25-7.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=python3.9-3.9.25-7.el9_8.3.src.rpm","type":"rpm","version":"3.9.25-7.el9_8.3","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python3.9","version":"3.9.25-7.el9_8.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-7210","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"python3.9","version":"3.9.25-7.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-7210","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-7210","cwe":"CWE-331","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-7210","date":"2026-10-10","epss":0.01351,"percentile":0.70717}],"risk":0.695765,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-7210","description":"A flaw was found in the `python` and `expat` components. Insufficient entropy in the hash-flooding protection mechanism of `xml.parsers.expat` and `xml.etree.ElementTree` allows a remote attacker to craft a malicious XML document. This crafted document can trigger a hash flooding attack, leading to a denial of service (DoS) condition."},"relatedVulnerabilities":[{"id":"CVE-2026-7210","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-7210","cwe":"CWE-331","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-7210","date":"2026-10-10","epss":0.01351,"percentile":0.70717}],"urls":["https://github.com/python/cpython/commit/24b8f12544468e4cedf5bfbe25442fcd495391e4","https://github.com/python/cpython/commit/3573b3b1ecbd99030a0b18658e1bfece771b2566","https://github.com/python/cpython/commit/cbaecf9f16da611a646d507c1cbca265c588fc56","https://github.com/python/cpython/commit/e37df2a6a71d6538698e2d3188a7c345b827640b","https://github.com/python/cpython/commit/ea70712d1a8508e14e9677d44f838dab04dc0286","https://github.com/python/cpython/commit/eeea765cb9d8f1fc3d8918b272ac3c477983f27a","https://github.com/python/cpython/commit/fc9b11ff49cbc82e6f917d07a61517a2b5f3145f","https://github.com/python/cpython/issues/149018","https://github.com/python/cpython/pull/149023","https://mail.python.org/archives/list/security-announce@python.org/thread/PNY5OMBDPM2FRUZTWFFPJ6LISWKV627K/","http://www.openwall.com/lists/oss-security/2026/05/11/13","http://www.openwall.com/lists/oss-security/2026/05/11/8"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-7210","description":"`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\\r\\n\\r\\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch."}]},{"artifact":{"id":"0ed3c72bb9ee9391","cpes":["cpe:2.3:a:python3-libs:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3-libs:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3_libs:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3_libs:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*"],"name":"python3-libs","purl":"pkg:rpm/redhat/python3-libs@3.9.25-7.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=python3.9-3.9.25-7.el9_8.3.src.rpm","type":"rpm","version":"3.9.25-7.el9_8.3","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python3.9","version":"3.9.25-7.el9_8.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-7210","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"python3.9","version":"3.9.25-7.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-7210","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-7210","cwe":"CWE-331","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-7210","date":"2026-10-10","epss":0.01351,"percentile":0.70717}],"risk":0.695765,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-7210","description":"A flaw was found in the `python` and `expat` components. Insufficient entropy in the hash-flooding protection mechanism of `xml.parsers.expat` and `xml.etree.ElementTree` allows a remote attacker to craft a malicious XML document. This crafted document can trigger a hash flooding attack, leading to a denial of service (DoS) condition."},"relatedVulnerabilities":[{"id":"CVE-2026-7210","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-7210","cwe":"CWE-331","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-7210","date":"2026-10-10","epss":0.01351,"percentile":0.70717}],"urls":["https://github.com/python/cpython/commit/24b8f12544468e4cedf5bfbe25442fcd495391e4","https://github.com/python/cpython/commit/3573b3b1ecbd99030a0b18658e1bfece771b2566","https://github.com/python/cpython/commit/cbaecf9f16da611a646d507c1cbca265c588fc56","https://github.com/python/cpython/commit/e37df2a6a71d6538698e2d3188a7c345b827640b","https://github.com/python/cpython/commit/ea70712d1a8508e14e9677d44f838dab04dc0286","https://github.com/python/cpython/commit/eeea765cb9d8f1fc3d8918b272ac3c477983f27a","https://github.com/python/cpython/commit/fc9b11ff49cbc82e6f917d07a61517a2b5f3145f","https://github.com/python/cpython/issues/149018","https://github.com/python/cpython/pull/149023","https://mail.python.org/archives/list/security-announce@python.org/thread/PNY5OMBDPM2FRUZTWFFPJ6LISWKV627K/","http://www.openwall.com/lists/oss-security/2026/05/11/13","http://www.openwall.com/lists/oss-security/2026/05/11/8"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-7210","description":"`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\\r\\n\\r\\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch."}]},{"artifact":{"id":"406b3abfffe1d292","cpes":["cpe:2.3:a:git-lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git-lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*"],"name":"git-lfs","purl":"pkg:rpm/redhat/git-lfs@3.7.1-4.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=git-lfs-3.7.1-4.el9_8.3.src.rpm","type":"rpm","version":"3.7.1-4.el9_8.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-41724","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"git-lfs","version":"0:3.7.1-4.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-41724","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-41724","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-41724","date":"2026-10-10","epss":0.01111,"percentile":0.64986}],"risk":0.6943750000000001,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-41724","description":"A flaw was found in Golang Go, where it is vulnerable to a denial of service caused when processing large TLS handshake records. By sending specially-crafted TLS handshake records, a remote, authenticated attacker can cause a denial of service condition."},"relatedVulnerabilities":[{"id":"CVE-2022-41724","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-41724","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-41724","date":"2026-10-10","epss":0.01111,"percentile":0.64986}],"urls":["https://go.dev/cl/468125","https://go.dev/issue/58001","https://groups.google.com/g/golang-announce/c/V0aBFqaFs_E","https://pkg.go.dev/vuln/GO-2023-1570","https://security.gentoo.org/glsa/202311-09"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-41724","description":"Large handshake records may cause panics in crypto/tls. Both clients and servers may send large TLS handshake records which cause servers and clients, respectively, to panic when attempting to construct responses. This affects all TLS 1.3 clients, TLS 1.2 clients which explicitly enable session resumption (by setting Config.ClientSessionCache to a non-nil value), and TLS 1.3 servers which request client certificates (by setting Config.ClientAuth >= RequestClientCert)."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-2345","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-2345","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2345","cwe":"CWE-416","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-2345","cwe":"CWE-416","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-2345","date":"2026-10-10","epss":0.01276,"percentile":0.69135}],"risk":0.6890400000000001,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-2345","description":"A use-after-free vulnerability was found in Vim in the skipwhite function in the charset.c file. This issue occurs because an already freed memory is used when a specially crafted input is processed. This flaw allows an attacker who can trick a user into opening a specially crafted file into triggering the use-after-free, and cause the application to crash, possibly executing code and corrupting memory."},"relatedVulnerabilities":[{"id":"CVE-2022-2345","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2345","cwe":"CWE-416","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-2345","cwe":"CWE-416","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-2345","date":"2026-10-10","epss":0.01276,"percentile":0.69135}],"urls":["https://github.com/vim/vim/commit/32acf1f1a72ebb9d8942b9c9d80023bf1bb668ea","https://huntr.dev/bounties/1eed7009-db6d-487b-bc41-8f2fd260483f","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/43Y3VJPOTTY3NTREDIFUPITM2POG4ZLP/","https://security.gentoo.org/glsa/202208-32","https://security.gentoo.org/glsa/202305-16"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-2345","description":"Use After Free in GitHub repository vim/vim prior to 9.0.0046."}]},{"artifact":{"id":"1c27b1fc065b3d30","cpes":["cpe:2.3:a:python3-pip-wheel:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip-wheel:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip_wheel:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip_wheel:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*"],"name":"python3-pip-wheel","purl":"pkg:rpm/redhat/python3-pip-wheel@21.3.1-2.el9_8?arch=noarch&distro=rhel-9.8&upstream=python-pip-21.3.1-2.el9_8.src.rpm","type":"rpm","version":"21.3.1-2.el9_8","language":"","licenses":["MIT and Python and ASL 2.0 and BSD and ISC and LGPLv2 and MPLv2.0 and (ASL 2.0 or BSD)"],"metadata":{"epoch":null,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python-pip","version":"21.3.1-2.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-3572","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"python-pip","version":"21.3.1-2.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2021-3572","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.5,"impactScore":3.6,"exploitabilityScore":1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-3572","cwe":"CWE-20","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2021-3572","date":"2026-10-10","epss":0.01829,"percentile":0.78252}],"risk":0.685875,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-3572","description":"A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity."},"relatedVulnerabilities":[{"id":"CVE-2021-3572","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.7,"impactScore":3.6,"exploitabilityScore":2.1},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","metrics":{"baseScore":3.5,"impactScore":2.9,"exploitabilityScore":6.9},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-3572","cwe":"CWE-20","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2021-3572","date":"2026-10-10","epss":0.01829,"percentile":0.78252}],"urls":["https://bugzilla.redhat.com/show_bug.cgi?id=1962856","https://security.netapp.com/advisory/ntap-20240621-0006/","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujul2022.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-3572","description":"A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1."}]},{"artifact":{"id":"9eebaea2eda844dd","cpes":["cpe:2.3:a:curl-minimal:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl-minimal:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl_minimal:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl_minimal:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*"],"name":"curl-minimal","purl":"pkg:rpm/redhat/curl-minimal@7.76.1-40.el9_8.7?arch=x86_64&distro=rhel-9.8&upstream=curl-7.76.1-40.el9_8.7.src.rpm","type":"rpm","version":"7.76.1-40.el9_8.7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.76.1-40.el9_8.7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-9681","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"curl","version":"7.76.1-40.el9_8.7"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2024-9681","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":3.9,"impactScore":2.6,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-9681","cwe":"CWE-697","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-9681","date":"2026-10-10","epss":0.01987,"percentile":0.80023}],"risk":0.6855149999999999,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2024-9681","description":"A vulnerability was found in curl. When curl is asked to use HSTS, the expiry time for a subdomain might overwrite a parent domain's cache entry, making it end sooner or later than intended."},"relatedVulnerabilities":[{"id":"CVE-2024-9681","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-9681","cwe":"CWE-697","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-9681","date":"2026-10-10","epss":0.01987,"percentile":0.80023}],"urls":["https://curl.se/docs/CVE-2024-9681.html","https://curl.se/docs/CVE-2024-9681.json","https://hackerone.com/reports/2764830","http://seclists.org/fulldisclosure/2025/Apr/10","http://seclists.org/fulldisclosure/2025/Apr/11","http://seclists.org/fulldisclosure/2025/Apr/12","http://seclists.org/fulldisclosure/2025/Apr/13","http://seclists.org/fulldisclosure/2025/Apr/4","http://seclists.org/fulldisclosure/2025/Apr/5","http://seclists.org/fulldisclosure/2025/Apr/8","http://seclists.org/fulldisclosure/2025/Apr/9","http://www.openwall.com/lists/oss-security/2024/11/06/2","https://security.netapp.com/advisory/ntap-20241213-0006/","https://github.com/curl/curl/commit/7385610d0c74c6a25","https://github.com/curl/curl/commit/a94973805df96269bf"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-9681","description":"When curl is asked to use HSTS, the expiry time for a subdomain might\noverwrite a parent domain's cache entry, making it end sooner or later than\notherwise intended.\n\nThis affects curl using applications that enable HSTS and use URLs with the\ninsecure `HTTP://` scheme and perform transfers with hosts like\n`x.example.com` as well as `example.com` where the first host is a subdomain\nof the second host.\n\n(The HSTS cache either needs to have been populated manually or there needs to\nhave been previous HTTPS accesses done as the cache needs to have entries for\nthe domains involved to trigger this problem.)\n\nWhen `x.example.com` responds with `Strict-Transport-Security:` headers, this\nbug can make the subdomain's expiry timeout *bleed over* and get set for the\nparent domain `example.com` in curl's HSTS cache.\n\nThe result of a triggered bug is that HTTP accesses to `example.com` get\nconverted to HTTPS for a different period of time than what was asked for by\nthe origin server. If `example.com` for example stops supporting HTTPS at its\nexpiry time, curl might then fail to access `http://example.com` until the\n(wrongly set) timeout expires. This bug can also expire the parent's entry\n*earlier*, thus making curl inadvertently switch back to insecure HTTP earlier\nthan otherwise intended."}]},{"artifact":{"id":"b685606a6baf0f79","cpes":["cpe:2.3:a:libcurl-minimal:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl-minimal:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl_minimal:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl_minimal:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*"],"name":"libcurl-minimal","purl":"pkg:rpm/redhat/libcurl-minimal@7.76.1-40.el9_8.7?arch=x86_64&distro=rhel-9.8&upstream=curl-7.76.1-40.el9_8.7.src.rpm","type":"rpm","version":"7.76.1-40.el9_8.7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.76.1-40.el9_8.7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-9681","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"curl","version":"7.76.1-40.el9_8.7"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2024-9681","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":3.9,"impactScore":2.6,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-9681","cwe":"CWE-697","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-9681","date":"2026-10-10","epss":0.01987,"percentile":0.80023}],"risk":0.6855149999999999,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2024-9681","description":"A vulnerability was found in curl. When curl is asked to use HSTS, the expiry time for a subdomain might overwrite a parent domain's cache entry, making it end sooner or later than intended."},"relatedVulnerabilities":[{"id":"CVE-2024-9681","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-9681","cwe":"CWE-697","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-9681","date":"2026-10-10","epss":0.01987,"percentile":0.80023}],"urls":["https://curl.se/docs/CVE-2024-9681.html","https://curl.se/docs/CVE-2024-9681.json","https://hackerone.com/reports/2764830","http://seclists.org/fulldisclosure/2025/Apr/10","http://seclists.org/fulldisclosure/2025/Apr/11","http://seclists.org/fulldisclosure/2025/Apr/12","http://seclists.org/fulldisclosure/2025/Apr/13","http://seclists.org/fulldisclosure/2025/Apr/4","http://seclists.org/fulldisclosure/2025/Apr/5","http://seclists.org/fulldisclosure/2025/Apr/8","http://seclists.org/fulldisclosure/2025/Apr/9","http://www.openwall.com/lists/oss-security/2024/11/06/2","https://security.netapp.com/advisory/ntap-20241213-0006/","https://github.com/curl/curl/commit/7385610d0c74c6a25","https://github.com/curl/curl/commit/a94973805df96269bf"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-9681","description":"When curl is asked to use HSTS, the expiry time for a subdomain might\noverwrite a parent domain's cache entry, making it end sooner or later than\notherwise intended.\n\nThis affects curl using applications that enable HSTS and use URLs with the\ninsecure `HTTP://` scheme and perform transfers with hosts like\n`x.example.com` as well as `example.com` where the first host is a subdomain\nof the second host.\n\n(The HSTS cache either needs to have been populated manually or there needs to\nhave been previous HTTPS accesses done as the cache needs to have entries for\nthe domains involved to trigger this problem.)\n\nWhen `x.example.com` responds with `Strict-Transport-Security:` headers, this\nbug can make the subdomain's expiry timeout *bleed over* and get set for the\nparent domain `example.com` in curl's HSTS cache.\n\nThe result of a triggered bug is that HTTP accesses to `example.com` get\nconverted to HTTPS for a different period of time than what was asked for by\nthe origin server. If `example.com` for example stops supporting HTTPS at its\nexpiry time, curl might then fail to access `http://example.com` until the\n(wrongly set) timeout expires. This bug can also expire the parent's entry\n*earlier*, thus making curl inadvertently switch back to insecure HTTP earlier\nthan otherwise intended."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-3705","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-3705","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-3705","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2022-3705","cwe":"CWE-416","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-3705","date":"2026-10-10","epss":0.01334,"percentile":0.70338}],"risk":0.6669999999999999,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-3705","description":"A use-after-free flaw was found in the qf_update_buffer function in vim. This issue allows a specially crafted file to crash a program, use unexpected values, or execute code."},"relatedVulnerabilities":[{"id":"CVE-2022-3705","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5,"impactScore":3.4,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-3705","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2022-3705","cwe":"CWE-416","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-3705","date":"2026-10-10","epss":0.01334,"percentile":0.70338}],"urls":["http://seclists.org/fulldisclosure/2023/Jan/19","https://github.com/vim/vim/commit/d0fab10ed2a86698937e3c3fed2f10bd9bb5e731","https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JCW33NOLMELTTTDJH7WGDIFJZ5YEEMK/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTBVD4J2SKVSWK4VBN5JP5OEVK6GDS3N/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JYEK5RNMH7MVQH6RPBKLSCCA6NMIKHDV/","https://security.gentoo.org/glsa/202305-16","https://security.netapp.com/advisory/ntap-20221223-0004/","https://support.apple.com/kb/HT213605","https://vuldb.com/?id.212324"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-3705","description":"A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qf_update_buffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to address this issue. The name of the patch is d0fab10ed2a86698937e3c3fed2f10bd9bb5e731. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-212324."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-3968","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2021-3968","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.9,"impactScore":1.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-3968","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2021-3968","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-3968","date":"2026-10-10","epss":0.02231,"percentile":0.82262}],"risk":0.658145,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-3968","description":"A flaw was found in vim. A possible heap use-after-free vulnerability could allow an attacker to input a specially crafted file leading to a crash or code execution. The highest threat from this vulnerability is to system availability."},"relatedVulnerabilities":[{"id":"CVE-2021-3968","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8,"impactScore":5.9,"exploitabilityScore":2.1},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:S/C:C/I:C/A:C","metrics":{"baseScore":8.5,"impactScore":10.1,"exploitabilityScore":6.9},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8,"impactScore":5.9,"exploitabilityScore":2.1},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-3968","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2021-3968","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-3968","date":"2026-10-10","epss":0.02231,"percentile":0.82262}],"urls":["http://www.openwall.com/lists/oss-security/2022/01/15/1","https://github.com/vim/vim/commit/a062006b9de0b2947ab5fb376c6e67ef92a8cd69","https://huntr.dev/bounties/00d62924-a7b4-4a61-ba29-acab2eaa1528","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNXY7T5OORA7UJIMGSJBGHFMU6UZWS6P/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IH2LS2DXBTYOCWGAKFMBF3HTWWXPBEFL/","https://security.gentoo.org/glsa/202208-32"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-3968","description":"vim is vulnerable to Heap-based Buffer Overflow"}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-1674","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-1674","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-1674","cwe":"CWE-476","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-1674","cwe":"CWE-476","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-1674","date":"2026-10-10","epss":0.01546,"percentile":0.74296}],"risk":0.6570500000000001,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-1674","description":"A NULL pointer dereference flaw was found in vim's vim_regexec_string() function in regexp.c file. The issue occurs when the function tries to match the buffer with an invalid pattern. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a NULL pointer dereference that causes an application to crash, leading to a denial of service."},"relatedVulnerabilities":[{"id":"CVE-2022-1674","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":6.6,"impactScore":4.8,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-1674","cwe":"CWE-476","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-1674","cwe":"CWE-476","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-1674","date":"2026-10-10","epss":0.01546,"percentile":0.74296}],"urls":["http://seclists.org/fulldisclosure/2022/Oct/28","http://seclists.org/fulldisclosure/2022/Oct/41","https://github.com/vim/vim/commit/a59f2dfd0cf9ee1a584d3de5b7c2d47648e79060","https://huntr.dev/bounties/a74ba4a4-7a39-4a22-bde3-d2f8ee07b385","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFAZTAT5CZC2R6KYDYA2HBAVEDSIX6MW/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IUPOLEX5GXC733HL4EFYMHFU7NISJJZG/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ODXVYZC5Z4XRRZK7CK6B6IURYVYHA25U/","https://security.gentoo.org/glsa/202208-32","https://security.gentoo.org/glsa/202305-16","https://support.apple.com/kb/HT213488"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-1674","description":"NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in GitHub repository vim/vim prior to 8.2.4938. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 allows attackers to cause a denial of service (application crash) via a crafted input."}]},{"artifact":{"id":"73ec63868795f316","cpes":["cpe:2.3:a:openssl:openssl:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:rpm/redhat/openssl@3.5.8-1.el9_8?arch=x86_64&distro=rhel-9.8&epoch=1&upstream=openssl-3.5.8-1.el9_8.src.rpm","type":"rpm","version":"1:3.5.8-1.el9_8","language":"","licenses":["Apache-2.0"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-9232","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"openssl","version":"1:3.5.8-1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-9232","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-9232","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-9232","date":"2026-10-10","epss":0.02001,"percentile":0.80167}],"risk":0.610305,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-9232","description":"A flaw was found in the OpenSSL HTTP client API no_proxy handling. This vulnerability allows an application level denial of service (application crash) via an attacker-controlled IPv6 URL when the no_proxy environment variable is set."},"relatedVulnerabilities":[{"id":"CVE-2025-9232","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-9232","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-9232","date":"2026-10-10","epss":0.02001,"percentile":0.80167}],"urls":["https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35","https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b","https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3","https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf","https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0","https://openssl-library.org/news/secadv/20250930.txt","http://www.openwall.com/lists/oss-security/2025/09/30/5","https://cert-portal.siemens.com/productcert/html/ssa-032379.html","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-089022.html","https://cert-portal.siemens.com/productcert/html/ssa-253495.html","https://cert-portal.siemens.com/productcert/html/ssa-485750.html","https://cert-portal.siemens.com/productcert/html/ssa-585531.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-9232","description":"Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary."}]},{"artifact":{"id":"753337be7fe19d16","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/redhat/openssl-libs@3.5.8-1.el9_8?arch=x86_64&distro=rhel-9.8&epoch=1&upstream=openssl-3.5.8-1.el9_8.src.rpm","type":"rpm","version":"1:3.5.8-1.el9_8","language":"","licenses":["Apache-2.0"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"3.5.8-1.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-9232","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"openssl","version":"3.5.8-1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-9232","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-9232","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-9232","date":"2026-10-10","epss":0.02001,"percentile":0.80167}],"risk":0.610305,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-9232","description":"A flaw was found in the OpenSSL HTTP client API no_proxy handling. This vulnerability allows an application level denial of service (application crash) via an attacker-controlled IPv6 URL when the no_proxy environment variable is set."},"relatedVulnerabilities":[{"id":"CVE-2025-9232","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-9232","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-9232","date":"2026-10-10","epss":0.02001,"percentile":0.80167}],"urls":["https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35","https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b","https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3","https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf","https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0","https://openssl-library.org/news/secadv/20250930.txt","http://www.openwall.com/lists/oss-security/2025/09/30/5","https://cert-portal.siemens.com/productcert/html/ssa-032379.html","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-089022.html","https://cert-portal.siemens.com/productcert/html/ssa-253495.html","https://cert-portal.siemens.com/productcert/html/ssa-485750.html","https://cert-portal.siemens.com/productcert/html/ssa-585531.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-9232","description":"Issue summary: An application using the OpenSSL HTTP client API functions may\ntrigger an out-of-bounds read if the 'no_proxy' environment variable is set and\nthe host portion of the authority component of the HTTP URL is an IPv6 address.\n\nImpact summary: An out-of-bounds read can trigger a crash which leads to\nDenial of Service for an application.\n\nThe OpenSSL HTTP client API functions can be used directly by applications\nbut they are also used by the OCSP client functions and CMP (Certificate\nManagement Protocol) client implementation in OpenSSL. However the URLs used\nby these implementations are unlikely to be controlled by an attacker.\n\nIn this vulnerable code the out of bounds read can only trigger a crash.\nFurthermore the vulnerability requires an attacker-controlled URL to be\npassed from an application to the OpenSSL function and the user has to have\na 'no_proxy' environment variable set. For the aforementioned reasons the\nissue was assessed as Low severity.\n\nThe vulnerable code was introduced in the following patch releases:\n3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the HTTP client implementation is outside the OpenSSL FIPS module\nboundary."}]},{"artifact":{"id":"9eebaea2eda844dd","cpes":["cpe:2.3:a:curl-minimal:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl-minimal:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl_minimal:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl_minimal:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*"],"name":"curl-minimal","purl":"pkg:rpm/redhat/curl-minimal@7.76.1-40.el9_8.7?arch=x86_64&distro=rhel-9.8&upstream=curl-7.76.1-40.el9_8.7.src.rpm","type":"rpm","version":"7.76.1-40.el9_8.7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.76.1-40.el9_8.7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-11053","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"curl","version":"7.76.1-40.el9_8.7"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2024-11053","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2024-11053","date":"2026-10-10","epss":0.01348,"percentile":0.70679}],"risk":0.5998600000000002,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2024-11053","description":"A flaw was found in curl. A logic error when processing credentials from the .netrc file while performing redirects allows the transfer of credentials from the original host to the followed-to host under certain circumstances, leaking the credentials to the followed-to host."},"relatedVulnerabilities":[{"id":"CVE-2024-11053","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N","metrics":{"baseScore":3.4,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2024-11053","date":"2026-10-10","epss":0.01348,"percentile":0.70679}],"urls":["https://curl.se/docs/CVE-2024-11053.html","https://curl.se/docs/CVE-2024-11053.json","https://hackerone.com/reports/2829063","http://www.openwall.com/lists/oss-security/2024/12/11/1","https://security.netapp.com/advisory/ntap-20250124-0012/","https://security.netapp.com/advisory/ntap-20250131-0003/","https://security.netapp.com/advisory/ntap-20250131-0004/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-11053","description":"When asked to both use a `.netrc` file for credentials and to follow HTTP\nredirects, curl could leak the password used for the first host to the\nfollowed-to host under certain circumstances.\n\nThis flaw only manifests itself if the netrc file has an entry that matches\nthe redirect target hostname but the entry either omits just the password or\nomits both login and password."}]},{"artifact":{"id":"b685606a6baf0f79","cpes":["cpe:2.3:a:libcurl-minimal:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl-minimal:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl_minimal:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl_minimal:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*"],"name":"libcurl-minimal","purl":"pkg:rpm/redhat/libcurl-minimal@7.76.1-40.el9_8.7?arch=x86_64&distro=rhel-9.8&upstream=curl-7.76.1-40.el9_8.7.src.rpm","type":"rpm","version":"7.76.1-40.el9_8.7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.76.1-40.el9_8.7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-11053","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"curl","version":"7.76.1-40.el9_8.7"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2024-11053","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2024-11053","date":"2026-10-10","epss":0.01348,"percentile":0.70679}],"risk":0.5998600000000002,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2024-11053","description":"A flaw was found in curl. A logic error when processing credentials from the .netrc file while performing redirects allows the transfer of credentials from the original host to the followed-to host under certain circumstances, leaking the credentials to the followed-to host."},"relatedVulnerabilities":[{"id":"CVE-2024-11053","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N","metrics":{"baseScore":3.4,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2024-11053","date":"2026-10-10","epss":0.01348,"percentile":0.70679}],"urls":["https://curl.se/docs/CVE-2024-11053.html","https://curl.se/docs/CVE-2024-11053.json","https://hackerone.com/reports/2829063","http://www.openwall.com/lists/oss-security/2024/12/11/1","https://security.netapp.com/advisory/ntap-20250124-0012/","https://security.netapp.com/advisory/ntap-20250131-0003/","https://security.netapp.com/advisory/ntap-20250131-0004/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-11053","description":"When asked to both use a `.netrc` file for credentials and to follow HTTP\nredirects, curl could leak the password used for the first host to the\nfollowed-to host under certain circumstances.\n\nThis flaw only manifests itself if the netrc file has an entry that matches\nthe redirect target hostname but the entry either omits just the password or\nomits both login and password."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-0213","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-0213","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","metrics":{"baseScore":6.6,"impactScore":4.8,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-0213","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-0213","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-0213","date":"2026-10-10","epss":0.01242,"percentile":0.68362}],"risk":0.59616,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-0213","description":"A flaw was found in vim.  The vulnerability occurs due to not checking the length for the NameBuff function, which can lead to a heap buffer overflow. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution."},"relatedVulnerabilities":[{"id":"CVE-2022-0213","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","metrics":{"baseScore":6.6,"impactScore":4.8,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":6.8,"impactScore":4.3,"exploitabilityScore":2.6},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-0213","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-0213","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-0213","date":"2026-10-10","epss":0.01242,"percentile":0.68362}],"urls":["http://www.openwall.com/lists/oss-security/2022/01/15/1","https://github.com/vim/vim/commit/de05bb25733c3319e18dca44e9b59c6ee389eb26","https://huntr.dev/bounties/f3afe1a5-e6f8-4579-b68a-6e5c7e39afed","https://lists.debian.org/debian-lts-announce/2022/03/msg00018.html","https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html","https://security.gentoo.org/glsa/202208-32"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-0213","description":"vim is vulnerable to Heap-based Buffer Overflow"}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-42307","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-42307","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.4,"impactScore":2.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42307","cwe":"CWE-78","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-42307","date":"2026-10-10","epss":0.01172,"percentile":0.66545}],"risk":0.55084,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-42307","description":"A flaw was found in Vim’s netrw plugin. Improper sanitization of specially crafted filenames or URLs could allow shell metacharacters to be included in temporary filenames passed to external commands. A local attacker could exploit this issue to trigger unintended shell command execution when a user opens malicious content using affected netrw functionality."},"relatedVulnerabilities":[{"id":"CVE-2026-42307","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.4,"impactScore":2.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42307","cwe":"CWE-78","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-42307","date":"2026-10-10","epss":0.01172,"percentile":0.66545}],"urls":["https://github.com/vim/vim/commit/405e2fb6d54d5653523809e2853d99d1c000a5fc","https://github.com/vim/vim/releases/tag/v9.2.0383","https://github.com/vim/vim/security/advisories/GHSA-85ch-p2qr-m5gx"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-42307","description":"Vim is an open source, command line text editor. Prior to version 9.2.0383, an OS command injection vulnerability exists in the netrw standard plugin bundled with Vim. By inducing a user to open a crafted URL (e.g., using the sftp:// or file:// protocol handlers), an attacker can execute arbitrary shell commands with the privileges of the Vim process. This issue has been patched in version 9.2.0383."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-5344","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2023-5344","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.3,"impactScore":3.4,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-5344","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2023-5344","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-5344","date":"2026-10-10","epss":0.01274,"percentile":0.69096}],"risk":0.52871,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-5344","description":"A heap-based buffer overflow vulnerability was found in Vim's trunc_string() function of the src/message.c file. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap-based buffer overflow that causes an application to crash, leading to a denial of service."},"relatedVulnerabilities":[{"id":"CVE-2023-5344","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":4,"impactScore":1.5,"exploitabilityScore":2.6},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-5344","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2023-5344","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-5344","date":"2026-10-10","epss":0.01274,"percentile":0.69096}],"urls":["http://seclists.org/fulldisclosure/2023/Dec/10","http://seclists.org/fulldisclosure/2023/Dec/11","http://seclists.org/fulldisclosure/2023/Dec/9","https://github.com/vim/vim/commit/3bd7fa12e146c6051490d048a4acbfba974eeb04","https://huntr.dev/bounties/530cb762-899e-48d7-b50e-dad09eb775bf","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4W665GQBN6S6ZDMYWVF4X7KMFI7AQKJL/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XPT7NMYJRLBPIALGSE24UWTY6F774GZW/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZOXBUJLJ5VSPN3YXWN7XZA4JDYKNE7GZ/","https://support.apple.com/kb/HT214036","https://support.apple.com/kb/HT214037","https://support.apple.com/kb/HT214038","https://lists.debian.org/debian-lts-announce/2025/03/msg00023.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-5344","description":"Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969."}]},{"artifact":{"id":"8cf05c8343d9a4a8","cpes":["cpe:2.3:a:libxml2:libxml2:2.9.13-14.el9_8.5:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libxml2:2.9.13-14.el9_8.5:*:*:*:*:*:*:*"],"name":"libxml2","purl":"pkg:rpm/redhat/libxml2@2.9.13-14.el9_8.5?arch=x86_64&distro=rhel-9.8&upstream=libxml2-2.9.13-14.el9_8.5.src.rpm","type":"rpm","version":"2.9.13-14.el9_8.5","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-0990","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"libxml2","version":"0:2.9.13-14.el9_8.5"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-0990","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-0990","cwe":"CWE-674","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-0990","date":"2026-10-10","epss":0.00969,"percentile":0.60771}],"risk":0.528105,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-0990","description":"A flaw was found in libxml2, an XML parsing library. This uncontrolled recursion vulnerability occurs in the xmlCatalogXMLResolveURI function when an XML catalog contains a delegate URI entry that references itself. A remote attacker could exploit this configuration-dependent issue by providing a specially crafted XML catalog, leading to infinite recursion and call stack exhaustion. This ultimately results in a segmentation fault, causing a Denial of Service (DoS) by crashing affected applications."},"relatedVulnerabilities":[{"id":"CVE-2026-0990","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-0990","cwe":"CWE-674","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-0990","date":"2026-10-10","epss":0.00969,"percentile":0.60771}],"urls":["https://access.redhat.com/errata/RHSA-2026:7519","https://access.redhat.com/security/cve/CVE-2026-0990","https://bugzilla.redhat.com/show_bug.cgi?id=2429959","https://gitlab.gnome.org/GNOME/libxml2/-/issues/1018"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-0990","description":"A flaw was found in libxml2, an XML parsing library. This uncontrolled recursion vulnerability occurs in the xmlCatalogXMLResolveURI function when an XML catalog contains a delegate URI entry that references itself. A remote attacker could exploit this configuration-dependent issue by providing a specially crafted XML catalog, leading to infinite recursion and call stack exhaustion. This ultimately results in a segmentation fault, causing a Denial of Service (DoS) by crashing affected applications."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-2982","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-2982","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2982","cwe":"CWE-416","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2022-2982","date":"2026-10-10","epss":0.00977,"percentile":0.61061}],"risk":0.5275799999999999,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-2982","description":"A heap use-after-free vulnerability was found in vim's qf_fill_buffer() function of the src/quickfix.c file. The issue occurs because vim uses freed memory when recursively using 'quickfixtextfunc.' This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap use-after-free that causes an application to crash, possibly executing code and corrupting memory."},"relatedVulnerabilities":[{"id":"CVE-2022-2982","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L","metrics":{"baseScore":7.6,"impactScore":4.8,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2982","cwe":"CWE-416","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2022-2982","date":"2026-10-10","epss":0.00977,"percentile":0.61061}],"urls":["https://github.com/vim/vim/commit/d6c67629ed05aae436164eec474832daf8ba7420","https://huntr.dev/bounties/53f53d9a-ba8a-4985-b7ba-23efbe6833be","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWOJOA7PZZAMBI5GFTL6PWHXMWSDLUXL/","https://security.gentoo.org/glsa/202305-16"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-2982","description":"Use After Free in GitHub repository vim/vim prior to 9.0.0260."}]},{"artifact":{"id":"751040f2dddec633","cpes":["cpe:2.3:a:golang:go:1.26.7:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.26.7","type":"go-module","version":"go1.26.7","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.26.7"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.26.9"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6612","versionConstraint":"<1.26.9 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.26.7"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6612","fix":{"state":"fixed","versions":["1.26.9"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78663","cwe":"CWE-675","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78663","date":"2026-10-10","epss":0.00574,"percentile":0.45743}],"risk":0.51947,"urls":["https://go.dev/cl/847310","https://go.dev/issue/81743","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"],"severity":"Critical","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847187","description":"The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configured connection-level flow control limit (MaxReceiveBufferPerConnection). Total buffered data is still limited by the concurrent stream limit and stream-level flow control."},"relatedVulnerabilities":[{"id":"CVE-2026-78663","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78663","cwe":"CWE-675","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78663","date":"2026-10-10","epss":0.00574,"percentile":0.45743}],"urls":["https://go.dev/cl/847187","https://go.dev/cl/847310","https://go.dev/issue/81743","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6612"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78663","description":"The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configured connection-level flow control limit (MaxReceiveBufferPerConnection). Total buffered data is still limited by the concurrent stream limit and stream-level flow control."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-2862","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-2862","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2862","cwe":"CWE-416","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-2862","cwe":"CWE-416","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-2862","date":"2026-10-10","epss":0.00902,"percentile":0.58582}],"risk":0.48708000000000007,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-2862","description":"Use After Free in GitHub repository vim/vim prior to 9.0.0221."},"relatedVulnerabilities":[{"id":"CVE-2022-2862","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","metrics":{"baseScore":7.6,"impactScore":4.8,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2862","cwe":"CWE-416","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-2862","cwe":"CWE-416","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-2862","date":"2026-10-10","epss":0.00902,"percentile":0.58582}],"urls":["https://github.com/vim/vim/commit/1889f499a4f248cd84e0e0bf6d0d820016774494","https://huntr.dev/bounties/71180988-1ab6-4311-bca8-e9a879b06765","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWOJOA7PZZAMBI5GFTL6PWHXMWSDLUXL/","https://security.gentoo.org/glsa/202305-16"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-2862","description":"Use After Free in GitHub repository vim/vim prior to 9.0.0221."}]},{"artifact":{"id":"73ec63868795f316","cpes":["cpe:2.3:a:openssl:openssl:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:rpm/redhat/openssl@3.5.8-1.el9_8?arch=x86_64&distro=rhel-9.8&epoch=1&upstream=openssl-3.5.8-1.el9_8.src.rpm","type":"rpm","version":"1:3.5.8-1.el9_8","language":"","licenses":["Apache-2.0"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-41996","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"openssl","version":"1:3.5.8-1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2024-41996","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-41996","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-41996","date":"2026-10-10","epss":0.01083,"percentile":0.64222}],"risk":0.481935,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2024-41996","description":"A vulnerability was found in the Diffie-Hellman Ephemeral (DHE) Key Agreement Protocol, where a malicious client can exploit the server's public key validation process. By forcing the server to use DHE and validating the order of public keys, the client can trigger expensive server-side modular exponentiation calculations. This issue results in asymmetric resource consumption, potentially leading to a denial of service (DoS) attack by overwhelming the server with computationally intensive operations."},"relatedVulnerabilities":[{"id":"CVE-2024-41996","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-41996","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-41996","date":"2026-10-10","epss":0.01083,"percentile":0.64222}],"urls":["https://dheatattack.gitlab.io/details/","https://dheatattack.gitlab.io/faq/","https://gist.github.com/c0r0n3r/abccc14d4d96c0442f3a77fa5ca255d1","https://cert-portal.siemens.com/productcert/html/ssa-089022.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-485750.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-41996","description":"Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers (from the client side) to trigger unnecessarily expensive server-side DHE modular-exponentiation calculations. The client may cause asymmetric resource consumption. The basic attack scenario is that the client must claim that it can only communicate with DHE, and the server must be configured to allow DHE and validate the order of the public key."}]},{"artifact":{"id":"753337be7fe19d16","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/redhat/openssl-libs@3.5.8-1.el9_8?arch=x86_64&distro=rhel-9.8&epoch=1&upstream=openssl-3.5.8-1.el9_8.src.rpm","type":"rpm","version":"1:3.5.8-1.el9_8","language":"","licenses":["Apache-2.0"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"3.5.8-1.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-41996","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"openssl","version":"3.5.8-1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2024-41996","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-41996","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-41996","date":"2026-10-10","epss":0.01083,"percentile":0.64222}],"risk":0.481935,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2024-41996","description":"A vulnerability was found in the Diffie-Hellman Ephemeral (DHE) Key Agreement Protocol, where a malicious client can exploit the server's public key validation process. By forcing the server to use DHE and validating the order of public keys, the client can trigger expensive server-side modular exponentiation calculations. This issue results in asymmetric resource consumption, potentially leading to a denial of service (DoS) attack by overwhelming the server with computationally intensive operations."},"relatedVulnerabilities":[{"id":"CVE-2024-41996","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-41996","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-41996","date":"2026-10-10","epss":0.01083,"percentile":0.64222}],"urls":["https://dheatattack.gitlab.io/details/","https://dheatattack.gitlab.io/faq/","https://gist.github.com/c0r0n3r/abccc14d4d96c0442f3a77fa5ca255d1","https://cert-portal.siemens.com/productcert/html/ssa-089022.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-485750.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-41996","description":"Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers (from the client side) to trigger unnecessarily expensive server-side DHE modular-exponentiation calculations. The client may cause asymmetric resource consumption. The basic attack scenario is that the client must claim that it can only communicate with DHE, and the server must be configured to allow DHE and validate the order of the public key."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-2183","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-2183","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2183","cwe":"CWE-125","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-2183","cwe":"CWE-125","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-2183","date":"2026-10-10","epss":0.01523,"percentile":0.73901}],"risk":0.4797449999999999,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-2183","description":"AV:L/AC:L/PR:N/UI:R/S:U/\nC:H   ==>   C:N\nI:H   ==>   I:N\nA:H   ==>   A:L"},"relatedVulnerabilities":[{"id":"CVE-2022-2183","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2183","cwe":"CWE-125","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-2183","cwe":"CWE-125","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-2183","date":"2026-10-10","epss":0.01523,"percentile":0.73901}],"urls":["https://github.com/vim/vim/commit/8eba2bd291b347e3008aa9e565652d51ad638cfa","https://huntr.dev/bounties/d74ca3f9-380d-4c0a-b61c-11113cc98975","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U743FMJGFQ35GBPCQ6OWMVZEJPDFVEWM/","https://security.gentoo.org/glsa/202208-32","https://security.gentoo.org/glsa/202305-16"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-2183","description":"Out-of-bounds Read in GitHub repository vim/vim prior to 8.2."}]},{"artifact":{"id":"d4d165231b963ffc","cpes":["cpe:2.3:a:redhat:pcre2:10.40-6.el9:*:*:*:*:*:*:*","cpe:2.3:a:pcre2:pcre2:10.40-6.el9:*:*:*:*:*:*:*"],"name":"pcre2","purl":"pkg:rpm/redhat/pcre2@10.40-6.el9?arch=x86_64&distro=rhel-9.8&upstream=pcre2-10.40-6.el9.src.rpm","type":"rpm","version":"10.40-6.el9","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-41409","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"pcre2","version":"0:10.40-6.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-41409","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-41409","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-41409","date":"2026-10-10","epss":0.01121,"percentile":0.65236}],"risk":0.465215,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-41409","description":"A flaw was found in PCRE2, where it is susceptible to an integer overflow vulnerability triggered by a negative repeat value in the pcre2test subject line that causes infinite looping. This flaw allows a remote attacker to pass specially crafted data to the application, initiating an integer overflow and executing a denial of service (DoS) attack."},"relatedVulnerabilities":[{"id":"CVE-2022-41409","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-41409","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-41409","date":"2026-10-10","epss":0.01121,"percentile":0.65236}],"urls":["https://github.com/PCRE2Project/pcre2/commit/94e1c001761373b7d9450768aa15d04c25547a35","https://github.com/PCRE2Project/pcre2/issues/141"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-41409","description":"Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative input."}]},{"artifact":{"id":"5717d3536e0a895a","cpes":["cpe:2.3:a:pcre2-syntax:pcre2-syntax:10.40-6.el9:*:*:*:*:*:*:*","cpe:2.3:a:pcre2-syntax:pcre2_syntax:10.40-6.el9:*:*:*:*:*:*:*","cpe:2.3:a:pcre2_syntax:pcre2-syntax:10.40-6.el9:*:*:*:*:*:*:*","cpe:2.3:a:pcre2_syntax:pcre2_syntax:10.40-6.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:pcre2-syntax:10.40-6.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:pcre2_syntax:10.40-6.el9:*:*:*:*:*:*:*","cpe:2.3:a:pcre2:pcre2-syntax:10.40-6.el9:*:*:*:*:*:*:*","cpe:2.3:a:pcre2:pcre2_syntax:10.40-6.el9:*:*:*:*:*:*:*"],"name":"pcre2-syntax","purl":"pkg:rpm/redhat/pcre2-syntax@10.40-6.el9?arch=noarch&distro=rhel-9.8&upstream=pcre2-10.40-6.el9.src.rpm","type":"rpm","version":"10.40-6.el9","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"pcre2","version":"10.40-6.el9"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-41409","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"pcre2","version":"10.40-6.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-41409","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-41409","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-41409","date":"2026-10-10","epss":0.01121,"percentile":0.65236}],"risk":0.465215,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-41409","description":"A flaw was found in PCRE2, where it is susceptible to an integer overflow vulnerability triggered by a negative repeat value in the pcre2test subject line that causes infinite looping. This flaw allows a remote attacker to pass specially crafted data to the application, initiating an integer overflow and executing a denial of service (DoS) attack."},"relatedVulnerabilities":[{"id":"CVE-2022-41409","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-41409","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-41409","date":"2026-10-10","epss":0.01121,"percentile":0.65236}],"urls":["https://github.com/PCRE2Project/pcre2/commit/94e1c001761373b7d9450768aa15d04c25547a35","https://github.com/PCRE2Project/pcre2/issues/141"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-41409","description":"Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative input."}]},{"artifact":{"id":"751040f2dddec633","cpes":["cpe:2.3:a:golang:go:1.26.7:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.26.7","type":"go-module","version":"go1.26.7","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.26.7"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.26.9"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6604","versionConstraint":"<1.26.9||>=1.27.0-0,<1.27.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.26.7"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6604","fix":{"state":"fixed","versions":["1.26.9","1.27.2"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"},{"date":"2026-10-08","kind":"release","version":"1.27.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56857","cwe":"CWE-1386","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-56857","date":"2026-10-10","epss":0.00493,"percentile":0.40501}],"risk":0.46342000000000005,"urls":["https://go.dev/issue/81739","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"],"severity":"Critical","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847305","description":"On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that target is located outside the root. This only applies to operations where the last path component is a junction (path/to/junction, but not path/junction/target)."},"relatedVulnerabilities":[{"id":"CVE-2026-56857","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56857","cwe":"CWE-1386","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-56857","date":"2026-10-10","epss":0.00493,"percentile":0.40501}],"urls":["https://go.dev/cl/847305","https://go.dev/issue/81739","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6604"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56857","description":"On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that target is located outside the root. This only applies to operations where the last path component is a junction (path/to/junction, but not path/junction/target)."}]},{"artifact":{"id":"82914302c9e41863","cpes":["cpe:2.3:a:ncurses:ncurses:6.2-12.20210508.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:ncurses:6.2-12.20210508.el9:*:*:*:*:*:*:*"],"name":"ncurses","purl":"pkg:rpm/redhat/ncurses@6.2-12.20210508.el9?arch=x86_64&distro=rhel-9.8&upstream=ncurses-6.2-12.20210508.el9.src.rpm","type":"rpm","version":"6.2-12.20210508.el9","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-50495","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"ncurses","version":"0:6.2-12.20210508.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2023-50495","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-50495","date":"2026-10-10","epss":0.00954,"percentile":0.6025}],"risk":0.45315,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-50495","description":"A vulnerability was found in the NCurses package, where a segmentation fault may be triggered through _nc_wrap_entry()."},"relatedVulnerabilities":[{"id":"CVE-2023-50495","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-50495","date":"2026-10-10","epss":0.00954,"percentile":0.6025}],"urls":["https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/","https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00020.html","https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00029.html","https://security.netapp.com/advisory/ntap-20240119-0008/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-50495","description":"NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry()."}]},{"artifact":{"id":"ecae56e691f56928","cpes":["cpe:2.3:a:ncurses-base:ncurses-base:6.2-12.20210508.el9:*:*:*:*:*:*:*","cpe:2.3:a:ncurses-base:ncurses_base:6.2-12.20210508.el9:*:*:*:*:*:*:*","cpe:2.3:a:ncurses_base:ncurses-base:6.2-12.20210508.el9:*:*:*:*:*:*:*","cpe:2.3:a:ncurses_base:ncurses_base:6.2-12.20210508.el9:*:*:*:*:*:*:*","cpe:2.3:a:ncurses:ncurses-base:6.2-12.20210508.el9:*:*:*:*:*:*:*","cpe:2.3:a:ncurses:ncurses_base:6.2-12.20210508.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:ncurses-base:6.2-12.20210508.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:ncurses_base:6.2-12.20210508.el9:*:*:*:*:*:*:*"],"name":"ncurses-base","purl":"pkg:rpm/redhat/ncurses-base@6.2-12.20210508.el9?arch=noarch&distro=rhel-9.8&upstream=ncurses-6.2-12.20210508.el9.src.rpm","type":"rpm","version":"6.2-12.20210508.el9","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ncurses","version":"6.2-12.20210508.el9"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-50495","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"ncurses","version":"6.2-12.20210508.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2023-50495","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-50495","date":"2026-10-10","epss":0.00954,"percentile":0.6025}],"risk":0.45315,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-50495","description":"A vulnerability was found in the NCurses package, where a segmentation fault may be triggered through _nc_wrap_entry()."},"relatedVulnerabilities":[{"id":"CVE-2023-50495","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-50495","date":"2026-10-10","epss":0.00954,"percentile":0.6025}],"urls":["https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/","https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00020.html","https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00029.html","https://security.netapp.com/advisory/ntap-20240119-0008/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-50495","description":"NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry()."}]},{"artifact":{"id":"b0fd3764b473721b","cpes":["cpe:2.3:a:ncurses-libs:ncurses-libs:6.2-12.20210508.el9:*:*:*:*:*:*:*","cpe:2.3:a:ncurses-libs:ncurses_libs:6.2-12.20210508.el9:*:*:*:*:*:*:*","cpe:2.3:a:ncurses_libs:ncurses-libs:6.2-12.20210508.el9:*:*:*:*:*:*:*","cpe:2.3:a:ncurses_libs:ncurses_libs:6.2-12.20210508.el9:*:*:*:*:*:*:*","cpe:2.3:a:ncurses:ncurses-libs:6.2-12.20210508.el9:*:*:*:*:*:*:*","cpe:2.3:a:ncurses:ncurses_libs:6.2-12.20210508.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:ncurses-libs:6.2-12.20210508.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:ncurses_libs:6.2-12.20210508.el9:*:*:*:*:*:*:*"],"name":"ncurses-libs","purl":"pkg:rpm/redhat/ncurses-libs@6.2-12.20210508.el9?arch=x86_64&distro=rhel-9.8&upstream=ncurses-6.2-12.20210508.el9.src.rpm","type":"rpm","version":"6.2-12.20210508.el9","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ncurses","version":"6.2-12.20210508.el9"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-50495","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"ncurses","version":"6.2-12.20210508.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2023-50495","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-50495","date":"2026-10-10","epss":0.00954,"percentile":0.6025}],"risk":0.45315,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-50495","description":"A vulnerability was found in the NCurses package, where a segmentation fault may be triggered through _nc_wrap_entry()."},"relatedVulnerabilities":[{"id":"CVE-2023-50495","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-50495","date":"2026-10-10","epss":0.00954,"percentile":0.6025}],"urls":["https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/","https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00020.html","https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00029.html","https://security.netapp.com/advisory/ntap-20240119-0008/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-50495","description":"NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry()."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-3278","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-3278","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-3278","cwe":"CWE-476","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-3278","cwe":"CWE-476","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-3278","date":"2026-10-10","epss":0.01057,"percentile":0.63469}],"risk":0.44922500000000004,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-3278","description":"A NULL pointer dereference vulnerability was found in Vim's eval_next_non_blank() function of the src/eval.c file. The flaw occurs when using NUL in buffer uses :source. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a NULL pointer dereference that causes a denial of service."},"relatedVulnerabilities":[{"id":"CVE-2022-3278","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L","metrics":{"baseScore":6.8,"impactScore":4.8,"exploitabilityScore":2.1},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-3278","cwe":"CWE-476","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-3278","cwe":"CWE-476","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-3278","date":"2026-10-10","epss":0.01057,"percentile":0.63469}],"urls":["https://github.com/vim/vim/commit/69082916c8b5d321545d60b9f5facad0a2dd5a4e","https://huntr.dev/bounties/a9fad77e-f245-4ce9-ba15-c7d4c86c4612","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4QI7AETXBHPC7SGA77Q7O5IEGULWYET7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTBVD4J2SKVSWK4VBN5JP5OEVK6GDS3N/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LSSEWQLK55MCNT4Z2IIJEJYEI5HLCODI/","https://security.gentoo.org/glsa/202305-16"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-3278","description":"NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0552."}]},{"artifact":{"id":"ea0f2a7e0eb5d962","cpes":["cpe:2.3:a:python3:python3:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3:3.9.25-7.el9_8.3:*:*:*:*:*:*:*"],"name":"python3","purl":"pkg:rpm/redhat/python3@3.9.25-7.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=python3.9-3.9.25-7.el9_8.3.src.rpm","type":"rpm","version":"3.9.25-7.el9_8.3","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python3.9","version":"3.9.25-7.el9_8.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-7774","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"python3.9","version":"3.9.25-7.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-7774","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-7774","cwe":"CWE-22","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-7774","date":"2026-10-10","epss":0.00781,"percentile":0.54658}],"risk":0.449075,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-7774","description":"A flaw was found in the `tarfile.data_filter` function within the Python `tarfile` module. A remote attacker could exploit this vulnerability by providing a specially crafted tar archive containing malicious link entries, such as symlinks with empty or directory-like names. This bypass allows the attacker to redirect subsequent archive members outside the intended extraction directory, leading to arbitrary file writes on the system where the archive is extracted. The impact of this flaw is limited by the permissions of the extracting process."},"relatedVulnerabilities":[{"id":"CVE-2026-7774","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-7774","cwe":"CWE-22","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-7774","date":"2026-10-10","epss":0.00781,"percentile":0.54658}],"urls":["https://github.com/python/cpython/commit/0478bd83d82b255e0f29f613367a59d261e7eaa2","https://github.com/python/cpython/commit/0d28f5e46e151718972dfabd91205444d0037b6d","https://github.com/python/cpython/commit/10a13bee3c24f9c62b602e696334ff2272a40efc","https://github.com/python/cpython/commit/578411982c16f753f4893532510099ef665117da","https://github.com/python/cpython/commit/5cf47a248c35c375d610b87b2f72fd1ed454b558","https://github.com/python/cpython/commit/74cca9a92fb7d653e404843a56b8bdc7b0afdbbf","https://github.com/python/cpython/commit/c063191cb7f9170f9565e305f8aa2b79ab2bf609","https://github.com/python/cpython/issues/149486","https://github.com/python/cpython/pull/149487","https://mail.python.org/archives/list/security-announce@python.org/thread/4FU62L2M6RMMHT2QPGQNPEHHUND7CEX5/","http://www.openwall.com/lists/oss-security/2026/06/04/9"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-7774","description":"tarfile.data_filter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction directory. This allowed a malicious tar archive to cause tarfile.extractall() to write files outside the destination directory, subject to the permissions of the extracting process."}]},{"artifact":{"id":"0ed3c72bb9ee9391","cpes":["cpe:2.3:a:python3-libs:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3-libs:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3_libs:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3_libs:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*"],"name":"python3-libs","purl":"pkg:rpm/redhat/python3-libs@3.9.25-7.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=python3.9-3.9.25-7.el9_8.3.src.rpm","type":"rpm","version":"3.9.25-7.el9_8.3","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python3.9","version":"3.9.25-7.el9_8.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-7774","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"python3.9","version":"3.9.25-7.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-7774","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-7774","cwe":"CWE-22","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-7774","date":"2026-10-10","epss":0.00781,"percentile":0.54658}],"risk":0.449075,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-7774","description":"A flaw was found in the `tarfile.data_filter` function within the Python `tarfile` module. A remote attacker could exploit this vulnerability by providing a specially crafted tar archive containing malicious link entries, such as symlinks with empty or directory-like names. This bypass allows the attacker to redirect subsequent archive members outside the intended extraction directory, leading to arbitrary file writes on the system where the archive is extracted. The impact of this flaw is limited by the permissions of the extracting process."},"relatedVulnerabilities":[{"id":"CVE-2026-7774","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-7774","cwe":"CWE-22","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-7774","date":"2026-10-10","epss":0.00781,"percentile":0.54658}],"urls":["https://github.com/python/cpython/commit/0478bd83d82b255e0f29f613367a59d261e7eaa2","https://github.com/python/cpython/commit/0d28f5e46e151718972dfabd91205444d0037b6d","https://github.com/python/cpython/commit/10a13bee3c24f9c62b602e696334ff2272a40efc","https://github.com/python/cpython/commit/578411982c16f753f4893532510099ef665117da","https://github.com/python/cpython/commit/5cf47a248c35c375d610b87b2f72fd1ed454b558","https://github.com/python/cpython/commit/74cca9a92fb7d653e404843a56b8bdc7b0afdbbf","https://github.com/python/cpython/commit/c063191cb7f9170f9565e305f8aa2b79ab2bf609","https://github.com/python/cpython/issues/149486","https://github.com/python/cpython/pull/149487","https://mail.python.org/archives/list/security-announce@python.org/thread/4FU62L2M6RMMHT2QPGQNPEHHUND7CEX5/","http://www.openwall.com/lists/oss-security/2026/06/04/9"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-7774","description":"tarfile.data_filter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction directory. This allowed a malicious tar archive to cause tarfile.extractall() to write files outside the destination directory, subject to the permissions of the extracting process."}]},{"artifact":{"id":"f5eb0651fec88df5","cpes":["cpe:2.3:a:com.fasterxml.jackson.core:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.20.1:*:*:*:*:*:*:*"],"name":"jackson-databind","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1","type":"java-archive","version":"2.20.1","language":"java","licenses":["The Apache Software License, Version 2.0"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/opt/jenkins-plugin-manager.jar:com.fasterxml.jackson.core:jackson-databind","manifestName":"","pomArtifactID":"jackson-databind","archiveDigests":null},"locations":[{"path":"/opt/jenkins-plugin-manager.jar","layerID":"sha256:1303dd889187d7e25ac68bf0fb8d636f5a922b6753d092bcae3924d569cb869a","accessPath":"/opt/jenkins-plugin-manager.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.21.6"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-q4xh-88c3-wmh7","versionConstraint":">=2.19.0,<2.21.6 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-databind","version":"2.20.1"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-q4xh-88c3-wmh7","fix":{"state":"fixed","versions":["2.21.6"],"available":[{"date":"2026-09-29","kind":"first-observed","version":"2.21.6"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-68497","cwe":"CWE-400","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"},{"cve":"CVE-2026-68497","cwe":"CWE-1333","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-68497","date":"2026-10-10","epss":0.00581,"percentile":0.46126}],"risk":0.43575,"urls":["https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7","https://nvd.nist.gov/vuln/detail/CVE-2026-68497","https://github.com/FasterXML/jackson-databind/pull/6127","https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.10","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.6","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.2","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.6","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.2"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-q4xh-88c3-wmh7","description":"jackson-databind: Duration XMLGregorianCalendar Unbounded Number Parse DoS"},"relatedVulnerabilities":[{"id":"CVE-2026-68497","cvss":[{"type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-68497","cwe":"CWE-400","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"},{"cve":"CVE-2026-68497","cwe":"CWE-1333","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-68497","date":"2026-10-10","epss":0.00581,"percentile":0.46126}],"urls":["https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd","https://github.com/FasterXML/jackson-databind/pull/6127","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-68497","description":"jackson-databind binds a JSON string to a javax.xml.datatype.Duration or javax.xml.datatype.XMLGregorianCalendar field by passing the raw string verbatim to DatatypeFactory.newDuration(value) or newXMLGregorianCalendar(value) in CoreXMLDeserializers.Std._deserialize. These deserializers are registered by default with no opt-in, so a plain ObjectMapper or JsonMapper with no polymorphic typing and no special configuration reaches this path. The XML Schema lexical grammar permits numeric components of arbitrary length, which the JDK materializes through the native BigInteger(String) and BigDecimal(String) constructors, both quadratic in digit count. Because the digits sit inside a JSON string token rather than a JSON number token, jackson-core's StreamReadConstraints.maxNumberLength guard never applies; jackson's own NumberDeserializers call validateIntegerLength or validateFPLength before parsing a stringified number, but the XML datatype deserializer omits that pre-check. An unauthenticated attacker can therefore submit a single request of a few megabytes, such as a Duration value consisting of the letter P followed by several million digits and the letter Y, and force tens of seconds to several minutes of single-threaded CPU work; a handful of concurrent requests can saturate a server's worker threads. This affects com.fasterxml.jackson.core:jackson-databind from 2.0.0 before 2.18.10, from 2.19.0 before 2.21.6, and from 2.22.0 before 2.22.2, and tools.jackson.core:jackson-databind from 3.0.0 before 3.1.6 and from 3.2.0 before 3.2.2. Users should upgrade to 2.18.10, 2.21.6, 2.22.2, 3.1.6, or 3.2.2."}]},{"artifact":{"id":"b900134ce800c270","cpes":["cpe:2.3:a:redhat:expat:2.5.0-6.el9_8.5:*:*:*:*:*:*:*","cpe:2.3:a:expat:expat:2.5.0-6.el9_8.5:*:*:*:*:*:*:*"],"name":"expat","purl":"pkg:rpm/redhat/expat@2.5.0-6.el9_8.5?arch=x86_64&distro=rhel-9.8&upstream=expat-2.5.0-6.el9_8.5.src.rpm","type":"rpm","version":"2.5.0-6.el9_8.5","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-77214","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"expat","version":"0:2.5.0-6.el9_8.5"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-77214","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-77214","cwe":"CWE-125","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-77214","date":"2026-10-10","epss":0.00549,"percentile":0.44295}],"risk":0.430965,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-77214","description":"A flaw was found in expat. A remote attacker can exploit this vulnerability through repeated parse buffer operations with unvalidated buffer lengths, causing a heap buffer over-read. This issue primarily leads to information disclosure by leaking adjacent heap memory contents, which could assist in bypassing security mitigations such as Address Space Layout Randomization (ASLR), or result in a Denial of Service (DoS) by crashing the application."},"relatedVulnerabilities":[{"id":"CVE-2026-77214","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-77214","cwe":"CWE-125","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-77214","date":"2026-10-10","epss":0.00549,"percentile":0.44295}],"urls":["https://github.com/libexpat/libexpat/commit/13c5f63a7f1c52c2feee3b16a1134d4fb68e9ea0","https://github.com/libexpat/libexpat/pull/1393","https://www.vulncheck.com/advisories/libexpat-heap-buffer-over-read-in-xmlparse-c-via-xml-parsebuffer"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-77214","description":"libexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c. XML_ParseBuffer advances the parse buffer end with parser->m_bufferEnd += len using a caller-supplied length that is not validated against the allocated buffer size, so repeated XML_ParseBuffer calls move m_bufferEnd past the end of the heap allocation and subsequent parsing reads out of bounds. Reaching this path requires a parse buffer to already be present; otherwise XML_ParseBuffer returns XML_ERROR_NO_BUFFER. A buffer is present after a prior call to XML_GetBuffer, either directly (the common case) or indirectly through a prior XML_Parse call that allocates the buffer internally. The over-read discloses adjacent heap memory to the calling application, recovering heap pointers, libc function pointers, and code pointers sufficient to defeat ASLR and build further exploitation primitives."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-2208","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-2208","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2208","cwe":"CWE-476","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2022-2208","date":"2026-10-10","epss":0.01367,"percentile":0.71065}],"risk":0.43060499999999996,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-2208","description":"NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.5163."},"relatedVulnerabilities":[{"id":"CVE-2022-2208","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2208","cwe":"CWE-476","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2022-2208","date":"2026-10-10","epss":0.01367,"percentile":0.71065}],"urls":["https://github.com/vim/vim/commit/cd38bb4d83c942c4bad596835c6766cbf32e5195","https://huntr.dev/bounties/7bfe3d5b-568f-4c34-908f-a39909638cc1","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U743FMJGFQ35GBPCQ6OWMVZEJPDFVEWM/","https://security.gentoo.org/glsa/202208-32","https://security.gentoo.org/glsa/202305-16"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-2208","description":"NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.5163."}]},{"artifact":{"id":"9eebaea2eda844dd","cpes":["cpe:2.3:a:curl-minimal:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl-minimal:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl_minimal:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl_minimal:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*"],"name":"curl-minimal","purl":"pkg:rpm/redhat/curl-minimal@7.76.1-40.el9_8.7?arch=x86_64&distro=rhel-9.8&upstream=curl-7.76.1-40.el9_8.7.src.rpm","type":"rpm","version":"7.76.1-40.el9_8.7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.76.1-40.el9_8.7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19931","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"curl","version":"7.76.1-40.el9_8.7"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-19931","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19931","cwe":"CWE-488","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-19931","cwe":"CWE-488","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-19931","date":"2026-10-10","epss":0.00747,"percentile":0.53523}],"risk":0.42952499999999993,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-19931","description":"A flaw was found in libcurl. This vulnerability allows an attacker to reuse an HTTP connection set up for a given hostname using Negotiate authentication. When an initial request is made with empty credentials, a subsequent user's request can be sent over a previously authenticated connection belonging to another user. This could lead to information disclosure or unauthorized access to sensitive data."},"relatedVulnerabilities":[{"id":"CVE-2026-19931","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19931","cwe":"CWE-488","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-19931","cwe":"CWE-488","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-19931","date":"2026-10-10","epss":0.00747,"percentile":0.53523}],"urls":["https://curl.se/docs/CVE-2026-19931.html","https://curl.se/docs/CVE-2026-19931.json","https://hackerone.com/reports/3923520"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19931","description":"A flaw in libcurl makes it wrongly reuse an HTTP connection setup for a given\nhostname using Negotiate authentication, when the initial request is done\nusing empty credentials. This can make user B's request get sent over user A's\npreviously authenticated connection."}]},{"artifact":{"id":"b685606a6baf0f79","cpes":["cpe:2.3:a:libcurl-minimal:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl-minimal:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl_minimal:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl_minimal:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*"],"name":"libcurl-minimal","purl":"pkg:rpm/redhat/libcurl-minimal@7.76.1-40.el9_8.7?arch=x86_64&distro=rhel-9.8&upstream=curl-7.76.1-40.el9_8.7.src.rpm","type":"rpm","version":"7.76.1-40.el9_8.7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.76.1-40.el9_8.7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19931","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"curl","version":"7.76.1-40.el9_8.7"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-19931","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19931","cwe":"CWE-488","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-19931","cwe":"CWE-488","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-19931","date":"2026-10-10","epss":0.00747,"percentile":0.53523}],"risk":0.42952499999999993,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-19931","description":"A flaw was found in libcurl. This vulnerability allows an attacker to reuse an HTTP connection set up for a given hostname using Negotiate authentication. When an initial request is made with empty credentials, a subsequent user's request can be sent over a previously authenticated connection belonging to another user. This could lead to information disclosure or unauthorized access to sensitive data."},"relatedVulnerabilities":[{"id":"CVE-2026-19931","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19931","cwe":"CWE-488","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-19931","cwe":"CWE-488","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-19931","date":"2026-10-10","epss":0.00747,"percentile":0.53523}],"urls":["https://curl.se/docs/CVE-2026-19931.html","https://curl.se/docs/CVE-2026-19931.json","https://hackerone.com/reports/3923520"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19931","description":"A flaw in libcurl makes it wrongly reuse an HTTP connection setup for a given\nhostname using Negotiate authentication, when the initial request is done\nusing empty credentials. This can make user B's request get sent over user A's\npreviously authenticated connection."}]},{"artifact":{"id":"8cf05c8343d9a4a8","cpes":["cpe:2.3:a:libxml2:libxml2:2.9.13-14.el9_8.5:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libxml2:2.9.13-14.el9_8.5:*:*:*:*:*:*:*"],"name":"libxml2","purl":"pkg:rpm/redhat/libxml2@2.9.13-14.el9_8.5?arch=x86_64&distro=rhel-9.8&upstream=libxml2-2.9.13-14.el9_8.5.src.rpm","type":"rpm","version":"2.9.13-14.el9_8.5","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-45322","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"libxml2","version":"0:2.9.13-14.el9_8.5"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2023-45322","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-45322","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-45322","date":"2026-10-10","epss":0.00965,"percentile":0.60593}],"risk":0.4294250000000001,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-45322","description":"A flaw was found in libxml2. In an out-of-memory condition or when limiting the memory allocation, processing a XML document using the HTML parser may result in a use-after-free vulnerability."},"relatedVulnerabilities":[{"id":"CVE-2023-45322","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-45322","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-45322","date":"2026-10-10","epss":0.00965,"percentile":0.60593}],"urls":["http://www.openwall.com/lists/oss-security/2023/10/06/5","https://gitlab.gnome.org/GNOME/libxml2/-/issues/344","https://gitlab.gnome.org/GNOME/libxml2/-/issues/583","https://lists.debian.org/debian-lts-announce/2025/02/msg00028.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-45322","description":"libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor's position is \"I don't think these issues are critical enough to warrant a CVE ID ... because an attacker typically can't control when memory allocations fail.\""}]},{"artifact":{"id":"751040f2dddec633","cpes":["cpe:2.3:a:golang:go:1.26.7:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.26.7","type":"go-module","version":"go1.26.7","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.26.7"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.26.9"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6603","versionConstraint":"<1.26.9 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.26.7"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6603","fix":{"state":"fixed","versions":["1.26.9"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78659","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78659","date":"2026-10-10","epss":0.0057,"percentile":0.45555}],"risk":0.4275,"urls":["https://go.dev/cl/847314","https://go.dev/issue/81857","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847185","description":"When \"Trailer\" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending a \"Trailer\" header that declares a large number of fields, causing the server to allocate a disproportionate amount of memory while bypassing Server.MaxHeaderValueCount and Server.MaxHeaderBytes limits. This exploit is not applicable for HTTP/1 servers, which do not support multiplexing a large number of requests over one TCP connection, and whose Server.MaxHeaderBytes are calculated differently."},"relatedVulnerabilities":[{"id":"CVE-2026-78659","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78659","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78659","date":"2026-10-10","epss":0.0057,"percentile":0.45555}],"urls":["https://go.dev/cl/847185","https://go.dev/cl/847314","https://go.dev/issue/81857","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6603"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78659","description":"When \"Trailer\" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending a \"Trailer\" header that declares a large number of fields, causing the server to allocate a disproportionate amount of memory while bypassing Server.MaxHeaderValueCount and Server.MaxHeaderBytes limits. This exploit is not applicable for HTTP/1 servers, which do not support multiplexing a large number of requests over one TCP connection, and whose Server.MaxHeaderBytes are calculated differently."}]},{"artifact":{"id":"406b3abfffe1d292","cpes":["cpe:2.3:a:git-lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git-lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*"],"name":"git-lfs","purl":"pkg:rpm/redhat/git-lfs@3.7.1-4.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=git-lfs-3.7.1-4.el9_8.3.src.rpm","type":"rpm","version":"3.7.1-4.el9_8.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-56859","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"git-lfs","version":"0:3.7.1-4.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-56859","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56859","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-56859","date":"2026-10-10","epss":0.00568,"percentile":0.4541}],"risk":0.426,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-56859","description":"A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application."},"relatedVulnerabilities":[{"id":"CVE-2026-56859","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56859","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-56859","date":"2026-10-10","epss":0.00568,"percentile":0.4541}],"urls":["https://go.dev/cl/803320","https://go.dev/issue/80481","https://groups.google.com/g/golang-announce/c/94pEornpRlI","https://pkg.go.dev/vuln/GO-2026-6088"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56859","description":"Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion."}]},{"artifact":{"id":"406b3abfffe1d292","cpes":["cpe:2.3:a:git-lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git-lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*"],"name":"git-lfs","purl":"pkg:rpm/redhat/git-lfs@3.7.1-4.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=git-lfs-3.7.1-4.el9_8.3.src.rpm","type":"rpm","version":"3.7.1-4.el9_8.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-78669","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"git-lfs","version":"0:3.7.1-4.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-78669","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78669","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78669","date":"2026-10-10","epss":0.00568,"percentile":0.45405}],"risk":0.426,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-78669","description":"A flaw was found in the Go net/http package. This flaw allows a remote attacker to cause a Denial of Service (DoS) by triggering excessive CPU consumption on an affected client or server. By opening a large number of HTTP/2 streams and repeatedly sending small configuration (SETTINGS) frames that modify window sizes, an attacker forces the system into intensive state processing. This resource exhaustion degrades performance and can render the service unresponsive."},"relatedVulnerabilities":[{"id":"CVE-2026-78669","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78669","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78669","date":"2026-10-10","epss":0.00568,"percentile":0.45405}],"urls":["https://go.dev/cl/847186","https://go.dev/cl/847308","https://go.dev/issue/81742","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6611"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78669","description":"A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values."}]},{"artifact":{"id":"751040f2dddec633","cpes":["cpe:2.3:a:golang:go:1.26.7:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.26.7","type":"go-module","version":"go1.26.7","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.26.7"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.26.9"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6611","versionConstraint":"<1.26.9 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.26.7"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6611","fix":{"state":"fixed","versions":["1.26.9"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78669","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78669","date":"2026-10-10","epss":0.00568,"percentile":0.45405}],"risk":0.426,"urls":["https://go.dev/cl/847308","https://go.dev/issue/81742","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847186","description":"A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values."},"relatedVulnerabilities":[{"id":"CVE-2026-78669","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78669","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78669","date":"2026-10-10","epss":0.00568,"percentile":0.45405}],"urls":["https://go.dev/cl/847186","https://go.dev/cl/847308","https://go.dev/issue/81742","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6611"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78669","description":"A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-44656","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-44656","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.3,"impactScore":3.4,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-44656","cwe":"CWE-78","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-44656","date":"2026-10-10","epss":0.00808,"percentile":0.55634}],"risk":0.41612000000000005,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-44656","description":"A flaw was found in Vim, an open-source command-line text editor. An attacker who controls the contents of a file can exploit an OS command injection vulnerability in Vim's `:find` command-line completion. This occurs when the `path` option, which can be set from a modeline, contains backtick-enclosed shell commands. These commands are then executed when a user opens the malicious file and triggers `:find` completion, leading to arbitrary command execution."},"relatedVulnerabilities":[{"id":"CVE-2026-44656","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.3,"impactScore":3.4,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-44656","cwe":"CWE-78","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-44656","date":"2026-10-10","epss":0.00808,"percentile":0.55634}],"urls":["https://github.com/vim/vim/commit/190cb3c2b9c769a3972bcfd991a7b5b6cb771ef0","https://github.com/vim/vim/releases/tag/v9.2.0435","https://github.com/vim/vim/security/advisories/GHSA-hwg5-3cxw-wvvg"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-44656","description":"Vim is an open source, command line text editor. Prior to version 9.2.0435, an OS command injection vulnerability exists in Vim's :find command-line completion. When the path option contains backtick-enclosed shell commands, those commands are executed during file name completion. Because the path option lacks the P_SECURE flag, it can be set from a modeline, allowing an attacker who controls the contents of a file to execute arbitrary shell commands when the user opens that file in Vim and triggers :find completion. This issue has been patched in version 9.2.0435."}]},{"artifact":{"id":"2ac7f6262c1f6abe","cpes":["cpe:2.3:a:gdb-gdbserver:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb-gdbserver:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb_gdbserver:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb_gdbserver:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*"],"name":"gdb-gdbserver","purl":"pkg:rpm/redhat/gdb-gdbserver@16.3-3.1.el9_8?arch=x86_64&distro=rhel-9.8&upstream=gdb-16.3-3.1.el9_8.src.rpm","type":"rpm","version":"16.3-3.1.el9_8","language":"","licenses":["GPL-3.0-or-later AND BSD-3-Clause AND FSFAP AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain AND GFDL-1.3-or-later AND LGPL-2.0-or-later WITH GCC-exception-2.0 AND GPL-3.0-or-later WITH GCC-exception-3.1 AND GPL-2.0-or-later WITH GNU-compiler-exception AND MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"gdb","version":"16.3-3.1.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1153","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"gdb","version":"16.3-3.1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-1153","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1153","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1153","date":"2026-10-10","epss":0.01357,"percentile":0.70883}],"risk":0.41388500000000006,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-1153","description":"A flaw was found in GNU Binutils. A specially-crafted payload may be able to trigger a memory leak, which can lead to an application crash or other undefined behavior."},"relatedVulnerabilities":[{"id":"CVE-2025-1153","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","metrics":{"baseScore":2.6,"impactScore":2.9,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1153","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1153","date":"2026-10-10","epss":0.01357,"percentile":0.70883}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=32603","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=8d97c1a53f3dc9fd8e1ccdb039b8a33d50133150","https://vuldb.com/?ctiid.295057","https://vuldb.com/?id.295057","https://vuldb.com/?submit.489991","https://www.gnu.org/","https://security.netapp.com/advisory/ntap-20250404-0005/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1153","description":"A vulnerability classified as problematic was found in GNU Binutils 2.43/2.44. Affected by this vulnerability is the function bfd_set_format of the file format.c. The manipulation leads to memory corruption. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. Upgrading to version 2.45 is able to address this issue. The identifier of the patch is 8d97c1a53f3dc9fd8e1ccdb039b8a33d50133150. It is recommended to upgrade the affected component."}]},{"artifact":{"id":"ea0f2a7e0eb5d962","cpes":["cpe:2.3:a:python3:python3:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3:3.9.25-7.el9_8.3:*:*:*:*:*:*:*"],"name":"python3","purl":"pkg:rpm/redhat/python3@3.9.25-7.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=python3.9-3.9.25-7.el9_8.3.src.rpm","type":"rpm","version":"3.9.25-7.el9_8.3","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python3.9","version":"3.9.25-7.el9_8.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-11972","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"python3.9","version":"3.9.25-7.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-11972","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-11972","cwe":"CWE-252","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11972","cwe":"CWE-606","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11972","cwe":"CWE-770","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-11972","date":"2026-10-10","epss":0.00715,"percentile":0.5238}],"risk":0.41112499999999996,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-11972","description":"A flaw was found in the Python `tarfile` module. When processing a specially crafted tar archive opened in 'streaming mode' (mode='r|'), the module does not properly handle the end-of-file (EOF) condition. This can cause the `tarfile` module to enter an infinite loop, leading to a Denial of Service (DoS) for applications processing such archives."},"relatedVulnerabilities":[{"id":"CVE-2026-11972","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-11972","cwe":"CWE-252","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11972","cwe":"CWE-606","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11972","cwe":"CWE-770","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-11972","date":"2026-10-10","epss":0.00715,"percentile":0.5238}],"urls":["https://github.com/python/cpython/commit/3f031d431f80668e14f3bc066bbf4369cd9281b9","https://github.com/python/cpython/commit/4ce6bf7c8aa7725828a38981c306f214c1f29365","https://github.com/python/cpython/commit/7f0dc59c9a70f8f3b4da33d7c4a2ba552a7acc21","https://github.com/python/cpython/commit/e86666c9dd256d52d0fbef6feb1ea4a51768fdec","https://github.com/python/cpython/commit/eb63c0f94dfcbea7fda8eab6213818e134d67192","https://github.com/python/cpython/commit/f50bf13566189c8d0ce5a814f33eff3d89951896","https://github.com/python/cpython/commit/f5e2776ff0383a902c12acf2b703e7e951fc8438","https://github.com/python/cpython/issues/151981","https://github.com/python/cpython/pull/151982","https://mail.python.org/archives/list/security-announce@python.org/thread/AXPSKKTSRKXTTJULW3XSIC74WZNAAPPB/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-11972","description":"When using the \"tarfile\" module with a file opened in \"streaming mode\" (mode=\"r|\") the tarfile module did not properly handle EOF, making archive parsing take exponentially longer."}]},{"artifact":{"id":"0ed3c72bb9ee9391","cpes":["cpe:2.3:a:python3-libs:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3-libs:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3_libs:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3_libs:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*"],"name":"python3-libs","purl":"pkg:rpm/redhat/python3-libs@3.9.25-7.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=python3.9-3.9.25-7.el9_8.3.src.rpm","type":"rpm","version":"3.9.25-7.el9_8.3","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python3.9","version":"3.9.25-7.el9_8.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-11972","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"python3.9","version":"3.9.25-7.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-11972","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-11972","cwe":"CWE-252","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11972","cwe":"CWE-606","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11972","cwe":"CWE-770","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-11972","date":"2026-10-10","epss":0.00715,"percentile":0.5238}],"risk":0.41112499999999996,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-11972","description":"A flaw was found in the Python `tarfile` module. When processing a specially crafted tar archive opened in 'streaming mode' (mode='r|'), the module does not properly handle the end-of-file (EOF) condition. This can cause the `tarfile` module to enter an infinite loop, leading to a Denial of Service (DoS) for applications processing such archives."},"relatedVulnerabilities":[{"id":"CVE-2026-11972","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-11972","cwe":"CWE-252","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11972","cwe":"CWE-606","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-11972","cwe":"CWE-770","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-11972","date":"2026-10-10","epss":0.00715,"percentile":0.5238}],"urls":["https://github.com/python/cpython/commit/3f031d431f80668e14f3bc066bbf4369cd9281b9","https://github.com/python/cpython/commit/4ce6bf7c8aa7725828a38981c306f214c1f29365","https://github.com/python/cpython/commit/7f0dc59c9a70f8f3b4da33d7c4a2ba552a7acc21","https://github.com/python/cpython/commit/e86666c9dd256d52d0fbef6feb1ea4a51768fdec","https://github.com/python/cpython/commit/eb63c0f94dfcbea7fda8eab6213818e134d67192","https://github.com/python/cpython/commit/f50bf13566189c8d0ce5a814f33eff3d89951896","https://github.com/python/cpython/commit/f5e2776ff0383a902c12acf2b703e7e951fc8438","https://github.com/python/cpython/issues/151981","https://github.com/python/cpython/pull/151982","https://mail.python.org/archives/list/security-announce@python.org/thread/AXPSKKTSRKXTTJULW3XSIC74WZNAAPPB/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-11972","description":"When using the \"tarfile\" module with a file opened in \"streaming mode\" (mode=\"r|\") the tarfile module did not properly handle EOF, making archive parsing take exponentially longer."}]},{"artifact":{"id":"3c9ac883761ed4dd","cpes":["cpe:2.3:a:com.fasterxml.jackson.core:jackson-core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson-core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson_core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:jackson-core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:jackson_core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:jackson-core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:jackson_core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:core:2.20.1:*:*:*:*:*:*:*"],"name":"jackson-core","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1","type":"java-archive","version":"2.20.1","language":"java","licenses":["The Apache Software License, Version 2.0"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/opt/jenkins-plugin-manager.jar:com.fasterxml.jackson.core:jackson-core","manifestName":"","pomArtifactID":"jackson-core","archiveDigests":null},"locations":[{"path":"/opt/jenkins-plugin-manager.jar","layerID":"sha256:1303dd889187d7e25ac68bf0fb8d636f5a922b6753d092bcae3924d569cb869a","accessPath":"/opt/jenkins-plugin-manager.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.21.7"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-p6pp-m3f8-5c89","versionConstraint":">=2.19.0,<=2.21.6 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-core","version":"2.20.1"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-p6pp-m3f8-5c89","fix":{"state":"fixed","versions":["2.21.7"],"available":[{"date":"2026-10-01","kind":"first-observed","version":"2.21.7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-89407","cwe":"CWE-400","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"},{"cve":"CVE-2026-89407","cwe":"CWE-1333","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-89407","date":"2026-10-10","epss":0.00546,"percentile":0.44118}],"risk":0.4095,"urls":["https://github.com/FasterXML/jackson-core/security/advisories/GHSA-p6pp-m3f8-5c89","https://nvd.nist.gov/vuln/detail/CVE-2026-89407","https://github.com/FasterXML/jackson-core/issues/1649","https://github.com/FasterXML/jackson-core/pull/1650","https://github.com/FasterXML/jackson-core/pull/1701","https://github.com/FasterXML/jackson-core/commit/731e794f62623aa0d86ced52490166be903fbb1d","https://github.com/FasterXML/jackson-core/commit/e7acd64cc99bd346704423dc2bfea1ab0a08ddff"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-p6pp-m3f8-5c89","description":"jackson-core: ReDoS: quadratic backtracking in NumberInput.PATTERN_FLOAT via looksLikeValidNumber()"},"relatedVulnerabilities":[{"id":"CVE-2026-89407","cvss":[{"type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-89407","cwe":"CWE-400","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"},{"cve":"CVE-2026-89407","cwe":"CWE-1333","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-89407","date":"2026-10-10","epss":0.00546,"percentile":0.44118}],"urls":["https://github.com/FasterXML/jackson-core/issues/1649","https://github.com/FasterXML/jackson-core/pull/1650","https://github.com/FasterXML/jackson-core/pull/1701","https://github.com/FasterXML/jackson-core/security/advisories/GHSA-p6pp-m3f8-5c89"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-89407","description":"NumberInput.looksLikeValidNumber() in FasterXML jackson-core pre-validates \"stringified numbers\" with two regular expressions: PATTERN_FLOAT ([+-]?[0-9]*[\\.]?[0-9]+([eE][+-]?[0-9]+)?), present since 2.17.0, and PATTERN_FLOAT_TRAILING_DOT, added in 2.17.2. PATTERN_FLOAT places adjacent quantifiers over the same character class -- an optional [0-9]* run, an optional dot, then a required [0-9]+ run -- so input that ultimately fails to match forces Java's backtracking engine to retry every possible split point of the digit run. \n\n\n\nMatching cost therefore grows with the square of the input length. \n\n\n\nAn attacker who can supply JSON that an application deserializes into a numeric target type reaches this method through jackson-databind's default String-to-number coercion (StdDeserializer and NumberDeserializers for BigDecimal, BigInteger, Double and Float). \n\n\n\nBecause StreamReadConstraints.maxStringLength defaults to 20,000,000 characters, no constraint bounds the input before it reaches the regex. \n\n\n\nTesting by the reporter confirmed O(n^2) growth across five consecutive input-size doublings, with a single 160,000-character string consuming roughly 74 seconds in one call; a small number of concurrent requests of ordinary body size can therefore exhaust a server's request-handling thread pool. \n\n\n\nThe affected method does not exist before 2.17.0, so 2.16.x and earlier releases are not affected. \n\n\n\nThe fix replaces both regular expressions with a hand-rolled single-pass scan."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-3974","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2021-3974","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.9,"impactScore":1.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-3974","cwe":"CWE-416","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2021-3974","cwe":"CWE-416","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-3974","date":"2026-10-10","epss":0.01363,"percentile":0.70993}],"risk":0.4020849999999999,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-3974","description":"A flaw was found in vim. A possible use-after-free vulnerability could allow an attacker to input a specially crafted file leading to a crash or code execution. The highest threat from this vulnerability is to system availability."},"relatedVulnerabilities":[{"id":"CVE-2021-3974","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.3,"impactScore":5.5,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-3974","cwe":"CWE-416","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2021-3974","cwe":"CWE-416","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-3974","date":"2026-10-10","epss":0.01363,"percentile":0.70993}],"urls":["http://www.openwall.com/lists/oss-security/2022/01/15/1","https://github.com/vim/vim/commit/64066b9acd9f8cffdf4840f797748f938a13f2d6","https://huntr.dev/bounties/e402cb2c-8ec4-4828-a692-c95f8e0de6d4","https://lists.debian.org/debian-lts-announce/2022/03/msg00018.html","https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNXY7T5OORA7UJIMGSJBGHFMU6UZWS6P/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IH2LS2DXBTYOCWGAKFMBF3HTWWXPBEFL/","https://security.gentoo.org/glsa/202208-32"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-3974","description":"vim is vulnerable to Use After Free"}]},{"artifact":{"id":"e6ca76ba6eb2c11d","cpes":["cpe:2.3:a:openssh:openssh:9.9p1-12.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssh:9.9p1-12.el9_8:*:*:*:*:*:*:*"],"name":"openssh","purl":"pkg:rpm/redhat/openssh@9.9p1-12.el9_8?arch=x86_64&distro=rhel-9.8&upstream=openssh-9.9p1-12.el9_8.src.rpm","type":"rpm","version":"9.9p1-12.el9_8","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-51767","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"openssh","version":"0:9.9p1-12.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2023-51767","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-51767","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-51767","date":"2026-10-10","epss":0.00661,"percentile":0.50165}],"risk":0.3966,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-51767","description":"An authentication bypass vulnerability was found in a modified version of OpenSSH. When common types of DRAM memory are used, it might allow row hammer attacks because the integer value of authenticated authpassword does not resist flips of a single bit. Exploiting a Rowhammer-style attack to flip bits in memory, forces successful authentication by setting the return code to 0."},"relatedVulnerabilities":[{"id":"CVE-2023-51767","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-51767","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-51767","date":"2026-10-10","epss":0.00661,"percentile":0.50165}],"urls":["https://access.redhat.com/security/cve/CVE-2023-51767","https://arxiv.org/abs/2309.02545","https://bugzilla.redhat.com/show_bug.cgi?id=2255850","https://github.com/openssh/openssh-portable/blob/8241b9c0529228b4b86d88b1a6076fb9f97e4a99/auth-passwd.c#L77","https://github.com/openssh/openssh-portable/blob/8241b9c0529228b4b86d88b1a6076fb9f97e4a99/monitor.c#L878","https://security.netapp.com/advisory/ntap-20240125-0006/","https://ubuntu.com/security/CVE-2023-51767","https://www.openwall.com/lists/oss-security/2025/09/22/1","http://www.openwall.com/lists/oss-security/2025/09/22/1","http://www.openwall.com/lists/oss-security/2025/09/22/2","http://www.openwall.com/lists/oss-security/2025/09/23/1","http://www.openwall.com/lists/oss-security/2025/09/23/3","http://www.openwall.com/lists/oss-security/2025/09/23/4","http://www.openwall.com/lists/oss-security/2025/09/23/5","http://www.openwall.com/lists/oss-security/2025/09/24/4","http://www.openwall.com/lists/oss-security/2025/09/24/7","http://www.openwall.com/lists/oss-security/2025/09/25/2","http://www.openwall.com/lists/oss-security/2025/09/25/6","http://www.openwall.com/lists/oss-security/2025/09/26/2","http://www.openwall.com/lists/oss-security/2025/09/26/4","http://www.openwall.com/lists/oss-security/2025/09/27/1","http://www.openwall.com/lists/oss-security/2025/09/27/2","http://www.openwall.com/lists/oss-security/2025/09/27/3","http://www.openwall.com/lists/oss-security/2025/09/27/4","http://www.openwall.com/lists/oss-security/2025/09/27/5","http://www.openwall.com/lists/oss-security/2025/09/27/6","http://www.openwall.com/lists/oss-security/2025/09/27/7","http://www.openwall.com/lists/oss-security/2025/09/28/7","http://www.openwall.com/lists/oss-security/2025/09/29/1","http://www.openwall.com/lists/oss-security/2025/09/29/4","http://www.openwall.com/lists/oss-security/2025/09/29/5","http://www.openwall.com/lists/oss-security/2025/09/29/6","http://www.openwall.com/lists/oss-security/2025/10/01/1","http://www.openwall.com/lists/oss-security/2025/10/01/2"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-51767","description":"OpenSSH through 10.0, when common types of DRAM are used, might allow row hammer attacks (for authentication bypass) because the integer value of authenticated in mm_answer_authpassword does not resist flips of a single bit. NOTE: this is applicable to a certain threat model of attacker-victim co-location in which the attacker has user privileges. NOTE: this is disputed by the Supplier, who states \"we do not consider it to be the application's responsibility to defend against platform architectural weaknesses.\""}]},{"artifact":{"id":"264e5db8acd44cda","cpes":["cpe:2.3:a:openssh-clients:openssh-clients:9.9p1-12.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssh-clients:openssh_clients:9.9p1-12.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssh_clients:openssh-clients:9.9p1-12.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssh_clients:openssh_clients:9.9p1-12.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh-clients:9.9p1-12.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh_clients:9.9p1-12.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssh-clients:9.9p1-12.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssh_clients:9.9p1-12.el9_8:*:*:*:*:*:*:*"],"name":"openssh-clients","purl":"pkg:rpm/redhat/openssh-clients@9.9p1-12.el9_8?arch=x86_64&distro=rhel-9.8&upstream=openssh-9.9p1-12.el9_8.src.rpm","type":"rpm","version":"9.9p1-12.el9_8","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssh","version":"9.9p1-12.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-51767","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"openssh","version":"9.9p1-12.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2023-51767","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-51767","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-51767","date":"2026-10-10","epss":0.00661,"percentile":0.50165}],"risk":0.3966,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-51767","description":"An authentication bypass vulnerability was found in a modified version of OpenSSH. When common types of DRAM memory are used, it might allow row hammer attacks because the integer value of authenticated authpassword does not resist flips of a single bit. Exploiting a Rowhammer-style attack to flip bits in memory, forces successful authentication by setting the return code to 0."},"relatedVulnerabilities":[{"id":"CVE-2023-51767","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-51767","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-51767","date":"2026-10-10","epss":0.00661,"percentile":0.50165}],"urls":["https://access.redhat.com/security/cve/CVE-2023-51767","https://arxiv.org/abs/2309.02545","https://bugzilla.redhat.com/show_bug.cgi?id=2255850","https://github.com/openssh/openssh-portable/blob/8241b9c0529228b4b86d88b1a6076fb9f97e4a99/auth-passwd.c#L77","https://github.com/openssh/openssh-portable/blob/8241b9c0529228b4b86d88b1a6076fb9f97e4a99/monitor.c#L878","https://security.netapp.com/advisory/ntap-20240125-0006/","https://ubuntu.com/security/CVE-2023-51767","https://www.openwall.com/lists/oss-security/2025/09/22/1","http://www.openwall.com/lists/oss-security/2025/09/22/1","http://www.openwall.com/lists/oss-security/2025/09/22/2","http://www.openwall.com/lists/oss-security/2025/09/23/1","http://www.openwall.com/lists/oss-security/2025/09/23/3","http://www.openwall.com/lists/oss-security/2025/09/23/4","http://www.openwall.com/lists/oss-security/2025/09/23/5","http://www.openwall.com/lists/oss-security/2025/09/24/4","http://www.openwall.com/lists/oss-security/2025/09/24/7","http://www.openwall.com/lists/oss-security/2025/09/25/2","http://www.openwall.com/lists/oss-security/2025/09/25/6","http://www.openwall.com/lists/oss-security/2025/09/26/2","http://www.openwall.com/lists/oss-security/2025/09/26/4","http://www.openwall.com/lists/oss-security/2025/09/27/1","http://www.openwall.com/lists/oss-security/2025/09/27/2","http://www.openwall.com/lists/oss-security/2025/09/27/3","http://www.openwall.com/lists/oss-security/2025/09/27/4","http://www.openwall.com/lists/oss-security/2025/09/27/5","http://www.openwall.com/lists/oss-security/2025/09/27/6","http://www.openwall.com/lists/oss-security/2025/09/27/7","http://www.openwall.com/lists/oss-security/2025/09/28/7","http://www.openwall.com/lists/oss-security/2025/09/29/1","http://www.openwall.com/lists/oss-security/2025/09/29/4","http://www.openwall.com/lists/oss-security/2025/09/29/5","http://www.openwall.com/lists/oss-security/2025/09/29/6","http://www.openwall.com/lists/oss-security/2025/10/01/1","http://www.openwall.com/lists/oss-security/2025/10/01/2"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-51767","description":"OpenSSH through 10.0, when common types of DRAM are used, might allow row hammer attacks (for authentication bypass) because the integer value of authenticated in mm_answer_authpassword does not resist flips of a single bit. NOTE: this is applicable to a certain threat model of attacker-victim co-location in which the attacker has user privileges. NOTE: this is disputed by the Supplier, who states \"we do not consider it to be the application's responsibility to defend against platform architectural weaknesses.\""}]},{"artifact":{"id":"9eebaea2eda844dd","cpes":["cpe:2.3:a:curl-minimal:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl-minimal:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl_minimal:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl_minimal:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*"],"name":"curl-minimal","purl":"pkg:rpm/redhat/curl-minimal@7.76.1-40.el9_8.7?arch=x86_64&distro=rhel-9.8&upstream=curl-7.76.1-40.el9_8.7.src.rpm","type":"rpm","version":"7.76.1-40.el9_8.7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.76.1-40.el9_8.7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-11856","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"curl","version":"7.76.1-40.el9_8.7"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-11856","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-11856","cwe":"CWE-294","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-11856","cwe":"CWE-294","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-11856","date":"2026-10-10","epss":0.00688,"percentile":0.51312}],"risk":0.39559999999999995,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-11856","description":"A flaw was found in curl. When `libcurl` performs a transfer to an HTTP origin using Digest authentication and then reuses the same connection handle for a subsequent transfer to a different origin, it may incorrectly send the authentication header intended for the first origin to the second. This could lead to unintended information disclosure, potentially allowing an attacker to gain unauthorized access to sensitive data."},"relatedVulnerabilities":[{"id":"CVE-2026-11856","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-11856","cwe":"CWE-294","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-11856","cwe":"CWE-294","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-11856","date":"2026-10-10","epss":0.00688,"percentile":0.51312}],"urls":["https://curl.se/docs/CVE-2026-11856.html","https://curl.se/docs/CVE-2026-11856.json","https://hackerone.com/reports/3793260"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-11856","description":"Successfully using libcurl to do a transfer to a specific HTTP origin\n(`hostA`) with **Digest** authentication and then changing the origin to a\ndifferent one (`hostB`) for a second transfer, reusing the same handle, makes\nlibcurl wrongly pass on the `Authorization:` header field meant for `hostA`,\nto `hostB`."}]},{"artifact":{"id":"b685606a6baf0f79","cpes":["cpe:2.3:a:libcurl-minimal:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl-minimal:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl_minimal:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl_minimal:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*"],"name":"libcurl-minimal","purl":"pkg:rpm/redhat/libcurl-minimal@7.76.1-40.el9_8.7?arch=x86_64&distro=rhel-9.8&upstream=curl-7.76.1-40.el9_8.7.src.rpm","type":"rpm","version":"7.76.1-40.el9_8.7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.76.1-40.el9_8.7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-11856","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"curl","version":"7.76.1-40.el9_8.7"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-11856","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-11856","cwe":"CWE-294","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-11856","cwe":"CWE-294","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-11856","date":"2026-10-10","epss":0.00688,"percentile":0.51312}],"risk":0.39559999999999995,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-11856","description":"A flaw was found in curl. When `libcurl` performs a transfer to an HTTP origin using Digest authentication and then reuses the same connection handle for a subsequent transfer to a different origin, it may incorrectly send the authentication header intended for the first origin to the second. This could lead to unintended information disclosure, potentially allowing an attacker to gain unauthorized access to sensitive data."},"relatedVulnerabilities":[{"id":"CVE-2026-11856","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-11856","cwe":"CWE-294","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-11856","cwe":"CWE-294","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-11856","date":"2026-10-10","epss":0.00688,"percentile":0.51312}],"urls":["https://curl.se/docs/CVE-2026-11856.html","https://curl.se/docs/CVE-2026-11856.json","https://hackerone.com/reports/3793260"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-11856","description":"Successfully using libcurl to do a transfer to a specific HTTP origin\n(`hostA`) with **Digest** authentication and then changing the origin to a\ndifferent one (`hostB`) for a second transfer, reusing the same handle, makes\nlibcurl wrongly pass on the `Authorization:` header field meant for `hostA`,\nto `hostB`."}]},{"artifact":{"id":"73ec63868795f316","cpes":["cpe:2.3:a:openssl:openssl:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:rpm/redhat/openssl@3.5.8-1.el9_8?arch=x86_64&distro=rhel-9.8&epoch=1&upstream=openssl-3.5.8-1.el9_8.src.rpm","type":"rpm","version":"1:3.5.8-1.el9_8","language":"","licenses":["Apache-2.0"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-28388","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"openssl","version":"1:3.5.8-1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-28388","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-28388","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28388","date":"2026-10-10","epss":0.00885,"percentile":0.58055}],"risk":0.3938250000000001,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-28388","description":"A flaw was found in OpenSSL. When processing a malformed delta Certificate Revocation List (CRL) that lacks a required CRL Number extension, a NULL pointer dereference can occur. This vulnerability can be exploited by a remote attacker who provides a specially crafted delta CRL to an application that has delta CRL processing enabled, leading to a Denial of Service (DoS) for the application."},"relatedVulnerabilities":[{"id":"CVE-2026-28388","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-28388","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28388","date":"2026-10-10","epss":0.00885,"percentile":0.58055}],"urls":["https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e","https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139","https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3","https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8","https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726","https://openssl-library.org/news/secadv/20260407.txt","https://cert-portal.siemens.com/productcert/html/ssa-032379.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-28388","description":"Issue summary: When a delta CRL that contains a Delta CRL Indicator extension\nis processed a NULL pointer dereference might happen if the required CRL\nNumber extension is missing.\n\nImpact summary: A NULL pointer dereference can trigger a crash which\nleads to a Denial of Service for an application.\n\nWhen CRL processing and delta CRL processing is enabled during X.509\ncertificate verification, the delta CRL processing does not check\nwhether the CRL Number extension is NULL before dereferencing it.\nWhen a malformed delta CRL file is being processed, this parameter\ncan be NULL, causing a NULL pointer dereference.\n\nExploiting this issue requires the X509_V_FLAG_USE_DELTAS flag to be enabled in\nthe verification context, the certificate being verified to contain a\nfreshestCRL extension or the base CRL to have the EXFLAG_FRESHEST flag set, and\nan attacker to provide a malformed CRL to an application that processes it.\n\nThe vulnerability is limited to Denial of Service and cannot be escalated to\nachieve code execution or memory disclosure. For that reason the issue was\nassessed as Low severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"753337be7fe19d16","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/redhat/openssl-libs@3.5.8-1.el9_8?arch=x86_64&distro=rhel-9.8&epoch=1&upstream=openssl-3.5.8-1.el9_8.src.rpm","type":"rpm","version":"1:3.5.8-1.el9_8","language":"","licenses":["Apache-2.0"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"3.5.8-1.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-28388","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"openssl","version":"3.5.8-1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-28388","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-28388","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28388","date":"2026-10-10","epss":0.00885,"percentile":0.58055}],"risk":0.3938250000000001,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-28388","description":"A flaw was found in OpenSSL. When processing a malformed delta Certificate Revocation List (CRL) that lacks a required CRL Number extension, a NULL pointer dereference can occur. This vulnerability can be exploited by a remote attacker who provides a specially crafted delta CRL to an application that has delta CRL processing enabled, leading to a Denial of Service (DoS) for the application."},"relatedVulnerabilities":[{"id":"CVE-2026-28388","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-28388","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28388","date":"2026-10-10","epss":0.00885,"percentile":0.58055}],"urls":["https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e","https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139","https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3","https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8","https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726","https://openssl-library.org/news/secadv/20260407.txt","https://cert-portal.siemens.com/productcert/html/ssa-032379.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-28388","description":"Issue summary: When a delta CRL that contains a Delta CRL Indicator extension\nis processed a NULL pointer dereference might happen if the required CRL\nNumber extension is missing.\n\nImpact summary: A NULL pointer dereference can trigger a crash which\nleads to a Denial of Service for an application.\n\nWhen CRL processing and delta CRL processing is enabled during X.509\ncertificate verification, the delta CRL processing does not check\nwhether the CRL Number extension is NULL before dereferencing it.\nWhen a malformed delta CRL file is being processed, this parameter\ncan be NULL, causing a NULL pointer dereference.\n\nExploiting this issue requires the X509_V_FLAG_USE_DELTAS flag to be enabled in\nthe verification context, the certificate being verified to contain a\nfreshestCRL extension or the base CRL to have the EXFLAG_FRESHEST flag set, and\nan attacker to provide a malformed CRL to an application that processes it.\n\nThe vulnerability is limited to Denial of Service and cannot be escalated to\nachieve code execution or memory disclosure. For that reason the issue was\nassessed as Low severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"406b3abfffe1d292","cpes":["cpe:2.3:a:git-lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git-lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*"],"name":"git-lfs","purl":"pkg:rpm/redhat/git-lfs@3.7.1-4.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=git-lfs-3.7.1-4.el9_8.3.src.rpm","type":"rpm","version":"3.7.1-4.el9_8.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-4673","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"git-lfs","version":"0:3.7.1-4.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-4673","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","metrics":{"baseScore":6.8,"impactScore":4,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2025-4673","date":"2026-10-10","epss":0.00666,"percentile":0.50368}],"risk":0.39293999999999996,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-4673","description":"A flaw was found in net/http. Handling Proxy-Authorization and Proxy-Authenticate headers during cross-origin redirects allows these headers to be inadvertently forwarded, potentially exposing sensitive authentication credentials. This flaw allows a network-based attacker to manipulate redirect responses, unintentionally exposing authentication details to unauthorized parties."},"relatedVulnerabilities":[{"id":"CVE-2025-4673","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","metrics":{"baseScore":6.8,"impactScore":4,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2025-4673","date":"2026-10-10","epss":0.00666,"percentile":0.50368}],"urls":["https://go.dev/cl/679257","https://go.dev/issue/73816","https://groups.google.com/g/golang-announce/c/ufZ8WpEsA3A","https://pkg.go.dev/vuln/GO-2025-3751"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-4673","description":"Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information."}]},{"artifact":{"id":"9eebaea2eda844dd","cpes":["cpe:2.3:a:curl-minimal:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl-minimal:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl_minimal:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl_minimal:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*"],"name":"curl-minimal","purl":"pkg:rpm/redhat/curl-minimal@7.76.1-40.el9_8.7?arch=x86_64&distro=rhel-9.8&upstream=curl-7.76.1-40.el9_8.7.src.rpm","type":"rpm","version":"7.76.1-40.el9_8.7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.76.1-40.el9_8.7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6253","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"curl","version":"7.76.1-40.el9_8.7"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-6253","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6253","cwe":"CWE-522","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-6253","cwe":"CWE-522","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-6253","date":"2026-10-10","epss":0.0075,"percentile":0.53632}],"risk":0.38625,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-6253","description":"A flaw was found in curl. When curl is configured to use distinct proxies for different URL schemes, a redirect from a URL using an authenticated proxy to one using an unauthenticated proxy can inadvertently expose the initial proxy's credentials. This improper credential management (CWE-522) may allow an attacker to gain unauthorized access or information by intercepting these disclosed credentials."},"relatedVulnerabilities":[{"id":"CVE-2026-6253","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6253","cwe":"CWE-522","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-6253","cwe":"CWE-522","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-6253","date":"2026-10-10","epss":0.0075,"percentile":0.53632}],"urls":["https://curl.se/docs/CVE-2026-6253.html","https://curl.se/docs/CVE-2026-6253.json","https://hackerone.com/reports/3669637","http://www.openwall.com/lists/oss-security/2026/04/29/11"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6253","description":"curl might erroneously pass on credentials for a first proxy to a second\nproxy.\n\nThis can happen when the following conditions are true:\n\n1. curl is setup to use specific different proxies for different URL schemes\n2. the first proxy needs credentials\n3. the second proxy uses no credentials\n4. while using the first proxy (using say `http://`), curl is asked to follow\n   a redirect to a URL using another scheme (say `https://`), accessed using a\n   second, different, proxy"}]},{"artifact":{"id":"b685606a6baf0f79","cpes":["cpe:2.3:a:libcurl-minimal:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl-minimal:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl_minimal:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl_minimal:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*"],"name":"libcurl-minimal","purl":"pkg:rpm/redhat/libcurl-minimal@7.76.1-40.el9_8.7?arch=x86_64&distro=rhel-9.8&upstream=curl-7.76.1-40.el9_8.7.src.rpm","type":"rpm","version":"7.76.1-40.el9_8.7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.76.1-40.el9_8.7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6253","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"curl","version":"7.76.1-40.el9_8.7"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-6253","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6253","cwe":"CWE-522","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-6253","cwe":"CWE-522","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-6253","date":"2026-10-10","epss":0.0075,"percentile":0.53632}],"risk":0.38625,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-6253","description":"A flaw was found in curl. When curl is configured to use distinct proxies for different URL schemes, a redirect from a URL using an authenticated proxy to one using an unauthenticated proxy can inadvertently expose the initial proxy's credentials. This improper credential management (CWE-522) may allow an attacker to gain unauthorized access or information by intercepting these disclosed credentials."},"relatedVulnerabilities":[{"id":"CVE-2026-6253","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6253","cwe":"CWE-522","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-6253","cwe":"CWE-522","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-6253","date":"2026-10-10","epss":0.0075,"percentile":0.53632}],"urls":["https://curl.se/docs/CVE-2026-6253.html","https://curl.se/docs/CVE-2026-6253.json","https://hackerone.com/reports/3669637","http://www.openwall.com/lists/oss-security/2026/04/29/11"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6253","description":"curl might erroneously pass on credentials for a first proxy to a second\nproxy.\n\nThis can happen when the following conditions are true:\n\n1. curl is setup to use specific different proxies for different URL schemes\n2. the first proxy needs credentials\n3. the second proxy uses no credentials\n4. while using the first proxy (using say `http://`), curl is asked to follow\n   a redirect to a URL using another scheme (say `https://`), accessed using a\n   second, different, proxy"}]},{"artifact":{"id":"23e3d9feac1cb13c","cpes":["cpe:2.3:a:libgcc:libgcc:11.5.0-14.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libgcc:11.5.0-14.el9:*:*:*:*:*:*:*"],"name":"libgcc","purl":"pkg:rpm/redhat/libgcc@11.5.0-14.el9?arch=x86_64&distro=rhel-9.8&upstream=gcc-11.5.0-14.el9.src.rpm","type":"rpm","version":"11.5.0-14.el9","language":"","licenses":["GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"gcc","version":"11.5.0-14.el9"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-27943","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"gcc","version":"11.5.0-14.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-27943","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-27943","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-27943","cwe":"CWE-674","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-27943","date":"2026-10-10","epss":0.00906,"percentile":0.58706}],"risk":0.38505000000000006,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-27943","description":"A flaw was found in binutils, where GNU GCC is vulnerable to a denial of service caused by a stack consumption in the demangle_const() function in libiberty/rust-demangle.c. The vulnerability exists due to the application not properly controlling the consumption of internal resources. By persuading a victim to open a specially-crafted file, an attacker could cause a denial of service."},"relatedVulnerabilities":[{"id":"CVE-2022-27943","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-27943","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-27943","cwe":"CWE-674","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-27943","date":"2026-10-10","epss":0.00906,"percentile":0.58706}],"urls":["https://gcc.gnu.org/bugzilla/show_bug.cgi?id=105039","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H424YXGW7OKXS2NCAP35OP6Y4P4AW6VG/","https://sourceware.org/bugzilla/show_bug.cgi?id=28995"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-27943","description":"libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new."}]},{"artifact":{"id":"c43da072cb8484d1","cpes":["cpe:2.3:a:libgomp:libgomp:11.5.0-14.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libgomp:11.5.0-14.el9:*:*:*:*:*:*:*"],"name":"libgomp","purl":"pkg:rpm/redhat/libgomp@11.5.0-14.el9?arch=x86_64&distro=rhel-9.8&upstream=gcc-11.5.0-14.el9.src.rpm","type":"rpm","version":"11.5.0-14.el9","language":"","licenses":["GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"gcc","version":"11.5.0-14.el9"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-27943","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"gcc","version":"11.5.0-14.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-27943","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-27943","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-27943","cwe":"CWE-674","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-27943","date":"2026-10-10","epss":0.00906,"percentile":0.58706}],"risk":0.38505000000000006,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-27943","description":"A flaw was found in binutils, where GNU GCC is vulnerable to a denial of service caused by a stack consumption in the demangle_const() function in libiberty/rust-demangle.c. The vulnerability exists due to the application not properly controlling the consumption of internal resources. By persuading a victim to open a specially-crafted file, an attacker could cause a denial of service."},"relatedVulnerabilities":[{"id":"CVE-2022-27943","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-27943","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-27943","cwe":"CWE-674","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-27943","date":"2026-10-10","epss":0.00906,"percentile":0.58706}],"urls":["https://gcc.gnu.org/bugzilla/show_bug.cgi?id=105039","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H424YXGW7OKXS2NCAP35OP6Y4P4AW6VG/","https://sourceware.org/bugzilla/show_bug.cgi?id=28995"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-27943","description":"libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new."}]},{"artifact":{"id":"62a2970ccab3dd86","cpes":["cpe:2.3:a:libstdc\\+\\+:libstdc\\+\\+:11.5.0-14.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libstdc\\+\\+:11.5.0-14.el9:*:*:*:*:*:*:*"],"name":"libstdc++","purl":"pkg:rpm/redhat/libstdc%2B%2B@11.5.0-14.el9?arch=x86_64&distro=rhel-9.8&upstream=gcc-11.5.0-14.el9.src.rpm","type":"rpm","version":"11.5.0-14.el9","language":"","licenses":["GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"gcc","version":"11.5.0-14.el9"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-27943","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"gcc","version":"11.5.0-14.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-27943","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-27943","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-27943","cwe":"CWE-674","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-27943","date":"2026-10-10","epss":0.00906,"percentile":0.58706}],"risk":0.38505000000000006,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-27943","description":"A flaw was found in binutils, where GNU GCC is vulnerable to a denial of service caused by a stack consumption in the demangle_const() function in libiberty/rust-demangle.c. The vulnerability exists due to the application not properly controlling the consumption of internal resources. By persuading a victim to open a specially-crafted file, an attacker could cause a denial of service."},"relatedVulnerabilities":[{"id":"CVE-2022-27943","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-27943","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-27943","cwe":"CWE-674","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-27943","date":"2026-10-10","epss":0.00906,"percentile":0.58706}],"urls":["https://gcc.gnu.org/bugzilla/show_bug.cgi?id=105039","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H424YXGW7OKXS2NCAP35OP6Y4P4AW6VG/","https://sourceware.org/bugzilla/show_bug.cgi?id=28995"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-27943","description":"libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-39881","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-39881","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:N","metrics":{"baseScore":5,"impactScore":4.3,"exploitabilityScore":0.8},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-39881","cwe":"CWE-94","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-39881","date":"2026-10-10","epss":0.00761,"percentile":0.54}],"risk":0.3805,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-39881","description":"A flaw was found in Vim. A command injection vulnerability in Vim's NetBeans interface allows a malicious NetBeans server to execute arbitrary Ex commands when Vim connects to it. This occurs due to unsanitized strings in the defineAnnoType and specialKeys protocol messages, leading to arbitrary code execution."},"relatedVulnerabilities":[{"id":"CVE-2026-39881","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:N","metrics":{"baseScore":5,"impactScore":4.3,"exploitabilityScore":0.8},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-39881","cwe":"CWE-94","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-39881","date":"2026-10-10","epss":0.00761,"percentile":0.54}],"urls":["https://github.com/vim/vim/commit/7ab76a86048ed492374ac6b19","https://github.com/vim/vim/releases/tag/v9.2.0316","https://github.com/vim/vim/security/advisories/GHSA-mr87-rhgv-7pw6"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-39881","description":"Vim is an open source, command line text editor. Prior to 9.2.0316, a command injection vulnerability in Vim's netbeans interface allows a malicious netbeans server to execute arbitrary Ex commands when Vim connects to it, via unsanitized strings in the defineAnnoType and specialKeys protocol messages. This vulnerability is fixed in 9.2.0316."}]},{"artifact":{"id":"9eebaea2eda844dd","cpes":["cpe:2.3:a:curl-minimal:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl-minimal:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl_minimal:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl_minimal:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*"],"name":"curl-minimal","purl":"pkg:rpm/redhat/curl-minimal@7.76.1-40.el9_8.7?arch=x86_64&distro=rhel-9.8&upstream=curl-7.76.1-40.el9_8.7.src.rpm","type":"rpm","version":"7.76.1-40.el9_8.7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.76.1-40.el9_8.7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-8924","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"curl","version":"7.76.1-40.el9_8.7"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-8924","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-8924","cwe":"CWE-201","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"}],"epss":[{"cve":"CVE-2026-8924","date":"2026-10-10","epss":0.00661,"percentile":0.50154}],"risk":0.380075,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-8924","description":"A flaw was found in curl's cookie parsing logic. A malicious HTTP server can exploit this by setting 'super cookies' that bypass the Public Suffix List check. This allows an attacker-controlled origin to inject cookies that curl then transmits to unrelated third-party domains, leading to compromising request integrity."},"relatedVulnerabilities":[{"id":"CVE-2026-8924","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-8924","cwe":"CWE-201","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"}],"epss":[{"cve":"CVE-2026-8924","date":"2026-10-10","epss":0.00661,"percentile":0.50154}],"urls":["https://curl.se/docs/CVE-2026-8924.html","https://curl.se/docs/CVE-2026-8924.json","https://hackerone.com/reports/3733905"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-8924","description":"A flaw in curl’s cookie parsing logic allows a malicious HTTP server to set\n\"super cookies\" that bypass the Public Suffix List check. This enables an\nattacker-controlled origin to inject cookies that curl subsequently scopes and\ntransmits to unrelated third-party domains."}]},{"artifact":{"id":"b685606a6baf0f79","cpes":["cpe:2.3:a:libcurl-minimal:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl-minimal:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl_minimal:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl_minimal:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*"],"name":"libcurl-minimal","purl":"pkg:rpm/redhat/libcurl-minimal@7.76.1-40.el9_8.7?arch=x86_64&distro=rhel-9.8&upstream=curl-7.76.1-40.el9_8.7.src.rpm","type":"rpm","version":"7.76.1-40.el9_8.7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.76.1-40.el9_8.7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-8924","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"curl","version":"7.76.1-40.el9_8.7"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-8924","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-8924","cwe":"CWE-201","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"}],"epss":[{"cve":"CVE-2026-8924","date":"2026-10-10","epss":0.00661,"percentile":0.50154}],"risk":0.380075,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-8924","description":"A flaw was found in curl's cookie parsing logic. A malicious HTTP server can exploit this by setting 'super cookies' that bypass the Public Suffix List check. This allows an attacker-controlled origin to inject cookies that curl then transmits to unrelated third-party domains, leading to compromising request integrity."},"relatedVulnerabilities":[{"id":"CVE-2026-8924","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-8924","cwe":"CWE-201","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"}],"epss":[{"cve":"CVE-2026-8924","date":"2026-10-10","epss":0.00661,"percentile":0.50154}],"urls":["https://curl.se/docs/CVE-2026-8924.html","https://curl.se/docs/CVE-2026-8924.json","https://hackerone.com/reports/3733905"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-8924","description":"A flaw in curl’s cookie parsing logic allows a malicious HTTP server to set\n\"super cookies\" that bypass the Public Suffix List check. This enables an\nattacker-controlled origin to inject cookies that curl subsequently scopes and\ntransmits to unrelated third-party domains."}]},{"artifact":{"id":"f5eb0651fec88df5","cpes":["cpe:2.3:a:com.fasterxml.jackson.core:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.20.1:*:*:*:*:*:*:*"],"name":"jackson-databind","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1","type":"java-archive","version":"2.20.1","language":"java","licenses":["The Apache Software License, Version 2.0"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/opt/jenkins-plugin-manager.jar:com.fasterxml.jackson.core:jackson-databind","manifestName":"","pomArtifactID":"jackson-databind","archiveDigests":null},"locations":[{"path":"/opt/jenkins-plugin-manager.jar","layerID":"sha256:1303dd889187d7e25ac68bf0fb8d636f5a922b6753d092bcae3924d569cb869a","accessPath":"/opt/jenkins-plugin-manager.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.21.6"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-gx83-3vf8-gh7j","versionConstraint":">=2.19.0,<2.21.6 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-databind","version":"2.20.1"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-gx83-3vf8-gh7j","fix":{"state":"fixed","versions":["2.21.6"],"available":[{"date":"2026-09-29","kind":"first-observed","version":"2.21.6"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.6,"impactScore":3.4,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83557","cwe":"CWE-502","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"},{"cve":"CVE-2026-83557","cwe":"CWE-915","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-83557","date":"2026-10-10","epss":0.00717,"percentile":0.52458}],"risk":0.38001,"urls":["https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j","https://nvd.nist.gov/vuln/detail/CVE-2026-83557","https://github.com/FasterXML/jackson-databind/issues/6156","https://github.com/FasterXML/jackson-databind/pull/6155","https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.10","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.6","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.2","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.6","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.2"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-gx83-3vf8-gh7j","description":"jackson-databind: Comparable missing from DefaultBaseTypeLimitingValidator's unsafe base types (incomplete PolymorphicTypeValidator denylist)"},"relatedVulnerabilities":[{"id":"CVE-2026-83557","cvss":[{"type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.6,"impactScore":3.4,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83557","cwe":"CWE-502","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"},{"cve":"CVE-2026-83557","cwe":"CWE-915","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-83557","date":"2026-10-10","epss":0.00717,"percentile":0.52458}],"urls":["https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f","https://github.com/FasterXML/jackson-databind/issues/6156","https://github.com/FasterXML/jackson-databind/pull/6155","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83557","description":"DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used without an explicitly configured custom validator. It denies polymorphic resolution only for a fixed set of \"unsafe base types\", and its isSafeSubType method returns true unconditionally for every base type outside that set. java.lang.Comparable was absent from the list despite being implemented by a very large fraction of JDK and application classes, comparable in breadth to java.io.Serializable, which is on the list for that reason. An application declaring an @JsonTypeInfo-annotated property or class with Comparable as its base type, and no custom PolymorphicTypeValidator, will accept a type identifier for essentially any class implementing Comparable. This yields an attacker-controlled object instantiation primitive; a demonstrated case constructs a java.io.File for an arbitrary attacker-chosen path, which becomes path-traversal-adjacent if the application subsequently calls path-sensitive methods on the value. No class implementing Comparable has been identified that yields code execution through deserialization alone. Global Default Typing via activateDefaultTyping is not affected, because that method structurally requires an explicit PolymorphicTypeValidator argument. This affects com.fasterxml.jackson.core:jackson-databind from 2.11.0 before 2.18.10, from 2.19.0 before 2.21.6, and from 2.22.0 before 2.22.2, and tools.jackson.core:jackson-databind from 3.0.0 before 3.1.6 and from 3.2.0 before 3.2.2. Users should upgrade to 2.18.10, 2.21.6, 2.22.2, 3.1.6, or 3.2.2."}]},{"artifact":{"id":"1c27b1fc065b3d30","cpes":["cpe:2.3:a:python3-pip-wheel:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip-wheel:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip_wheel:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip_wheel:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*"],"name":"python3-pip-wheel","purl":"pkg:rpm/redhat/python3-pip-wheel@21.3.1-2.el9_8?arch=noarch&distro=rhel-9.8&upstream=python-pip-21.3.1-2.el9_8.src.rpm","type":"rpm","version":"21.3.1-2.el9_8","language":"","licenses":["MIT and Python and ASL 2.0 and BSD and ISC and LGPLv2 and MPLv2.0 and (ASL 2.0 or BSD)"],"metadata":{"epoch":null,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python-pip","version":"21.3.1-2.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-32284","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"python-pip","version":"21.3.1-2.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-32284","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-32284","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-32284","date":"2026-10-10","epss":0.00695,"percentile":0.51582}],"risk":0.378775,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-32284","description":"A flaw was found in the msgpack decoder. A remote attacker could send specially crafted, truncated fixext data to an application using the msgpack library. This improper input validation can lead to an out-of-bounds read and a runtime panic, resulting in a denial of service (DoS) attack against the application."},"relatedVulnerabilities":[{"id":"CVE-2026-32284","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-32284","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-32284","date":"2026-10-10","epss":0.00695,"percentile":0.51582}],"urls":["https://github.com/golang/vulndb/issues/4513","https://github.com/shamaton/msgpack/issues/59","https://pkg.go.dev/vuln/GO-2026-4513","https://securityinfinity.com/research/shamaton-msgpack-oob-panic-fixext-dos-2026"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-32284","description":"The msgpack decoder fails to properly validate the input buffer length when processing truncated fixext data (format codes 0xd4-0xd8). This can lead to an out-of-bounds read and a runtime panic, allowing a denial of service attack."}]},{"artifact":{"id":"9eebaea2eda844dd","cpes":["cpe:2.3:a:curl-minimal:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl-minimal:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl_minimal:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl_minimal:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*"],"name":"curl-minimal","purl":"pkg:rpm/redhat/curl-minimal@7.76.1-40.el9_8.7?arch=x86_64&distro=rhel-9.8&upstream=curl-7.76.1-40.el9_8.7.src.rpm","type":"rpm","version":"7.76.1-40.el9_8.7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.76.1-40.el9_8.7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-5773","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"curl","version":"7.76.1-40.el9_8.7"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-5773","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-5773","cwe":"CWE-488","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-5773","cwe":"CWE-918","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-5773","date":"2026-10-10","epss":0.00657,"percentile":0.49983}],"risk":0.37777499999999997,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-5773","description":"A flaw was found in libcurl. Due to a logical error in the connection reuse mechanism for SMB (Server Message Block) transfers, libcurl might reuse an existing SMB connection with a different share than intended. This vulnerability, categorized as CWE-488 (Exposure of Data Element to Wrong Session), could lead to the download of an incorrect file or the upload of a file to an unintended location when an application uses libcurl for SMB transfers."},"relatedVulnerabilities":[{"id":"CVE-2026-5773","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-5773","cwe":"CWE-488","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-5773","cwe":"CWE-918","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-5773","date":"2026-10-10","epss":0.00657,"percentile":0.49983}],"urls":["https://curl.se/docs/CVE-2026-5773.html","https://curl.se/docs/CVE-2026-5773.json","https://hackerone.com/reports/3650689","http://www.openwall.com/lists/oss-security/2026/04/29/9"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-5773","description":"libcurl might in some circumstances reuse the wrong connection for SMB(S)\ntransfers.\n\nlibcurl features a pool of recent connections so that subsequent requests can\nreuse an existing connection to avoid overhead.\n\nWhen reusing a connection a range of criteria must be met. Due to a logical\nerror in the code, a network transfer operation that was requested by an\napplication could wrongfully reuse an existing SMB connection to the same\nserver that was using a different \"share\" than the new subsequent transfer\nshould.\n\nThis could in unlucky situations lead to the download of the wrong file or the\nupload of a file to the wrong place. When this happens, the same credentials\nare used and the server name is the same."}]},{"artifact":{"id":"b685606a6baf0f79","cpes":["cpe:2.3:a:libcurl-minimal:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl-minimal:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl_minimal:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl_minimal:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*"],"name":"libcurl-minimal","purl":"pkg:rpm/redhat/libcurl-minimal@7.76.1-40.el9_8.7?arch=x86_64&distro=rhel-9.8&upstream=curl-7.76.1-40.el9_8.7.src.rpm","type":"rpm","version":"7.76.1-40.el9_8.7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.76.1-40.el9_8.7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-5773","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"curl","version":"7.76.1-40.el9_8.7"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-5773","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-5773","cwe":"CWE-488","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-5773","cwe":"CWE-918","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-5773","date":"2026-10-10","epss":0.00657,"percentile":0.49983}],"risk":0.37777499999999997,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-5773","description":"A flaw was found in libcurl. Due to a logical error in the connection reuse mechanism for SMB (Server Message Block) transfers, libcurl might reuse an existing SMB connection with a different share than intended. This vulnerability, categorized as CWE-488 (Exposure of Data Element to Wrong Session), could lead to the download of an incorrect file or the upload of a file to an unintended location when an application uses libcurl for SMB transfers."},"relatedVulnerabilities":[{"id":"CVE-2026-5773","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-5773","cwe":"CWE-488","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-5773","cwe":"CWE-918","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-5773","date":"2026-10-10","epss":0.00657,"percentile":0.49983}],"urls":["https://curl.se/docs/CVE-2026-5773.html","https://curl.se/docs/CVE-2026-5773.json","https://hackerone.com/reports/3650689","http://www.openwall.com/lists/oss-security/2026/04/29/9"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-5773","description":"libcurl might in some circumstances reuse the wrong connection for SMB(S)\ntransfers.\n\nlibcurl features a pool of recent connections so that subsequent requests can\nreuse an existing connection to avoid overhead.\n\nWhen reusing a connection a range of criteria must be met. Due to a logical\nerror in the code, a network transfer operation that was requested by an\napplication could wrongfully reuse an existing SMB connection to the same\nserver that was using a different \"share\" than the new subsequent transfer\nshould.\n\nThis could in unlucky situations lead to the download of the wrong file or the\nupload of a file to the wrong place. When this happens, the same credentials\nare used and the server name is the same."}]},{"artifact":{"id":"ea0f2a7e0eb5d962","cpes":["cpe:2.3:a:python3:python3:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3:3.9.25-7.el9_8.3:*:*:*:*:*:*:*"],"name":"python3","purl":"pkg:rpm/redhat/python3@3.9.25-7.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=python3.9-3.9.25-7.el9_8.3.src.rpm","type":"rpm","version":"3.9.25-7.el9_8.3","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python3.9","version":"3.9.25-7.el9_8.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-4224","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"python3.9","version":"3.9.25-7.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-4224","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4224","cwe":"CWE-674","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-4224","date":"2026-10-10","epss":0.0069,"percentile":0.51382}],"risk":0.37605000000000005,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-4224","description":"A stack overflow flaw has been discovered in the python pyexpat module. When an Expat parser with a registered ElementDeclHandler parses an inline document type definition containing a deeply nested content model a C stack overflow occurs. This will result in a program crash."},"relatedVulnerabilities":[{"id":"CVE-2026-4224","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4224","cwe":"CWE-674","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-4224","date":"2026-10-10","epss":0.0069,"percentile":0.51382}],"urls":["https://github.com/python/cpython/commit/196edfb06a7458377d4d0f4b3cd41724c1f3bd4a","https://github.com/python/cpython/commit/24ce88b285f56ee11626cf5e472af3cd8cc7c621","https://github.com/python/cpython/commit/642865ddf4b232da1f3b1f7abcfa3254c4bfe785","https://github.com/python/cpython/commit/af856a7177326ac25d9f66cc6dd28b554d914fee","https://github.com/python/cpython/commit/e0a8a6da90597a924b300debe045cdb4628ee1f3","https://github.com/python/cpython/commit/eb0e8be3a7e11b87d198a2c3af1ed0eccf532768","https://github.com/python/cpython/issues/145986","https://github.com/python/cpython/pull/145987","https://mail.python.org/archives/list/security-announce@python.org/thread/5M7CGUW3XBRY7II4DK43KF7NQQ3TPZ6R/","http://www.openwall.com/lists/oss-security/2026/03/16/4"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-4224","description":"When an Expat parser with a registered ElementDeclHandler parses an inline\ndocument type definition containing a deeply nested content model a C stack\noverflow occurs."}]},{"artifact":{"id":"0ed3c72bb9ee9391","cpes":["cpe:2.3:a:python3-libs:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3-libs:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3_libs:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3_libs:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*"],"name":"python3-libs","purl":"pkg:rpm/redhat/python3-libs@3.9.25-7.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=python3.9-3.9.25-7.el9_8.3.src.rpm","type":"rpm","version":"3.9.25-7.el9_8.3","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python3.9","version":"3.9.25-7.el9_8.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-4224","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"python3.9","version":"3.9.25-7.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-4224","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4224","cwe":"CWE-674","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-4224","date":"2026-10-10","epss":0.0069,"percentile":0.51382}],"risk":0.37605000000000005,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-4224","description":"A stack overflow flaw has been discovered in the python pyexpat module. When an Expat parser with a registered ElementDeclHandler parses an inline document type definition containing a deeply nested content model a C stack overflow occurs. This will result in a program crash."},"relatedVulnerabilities":[{"id":"CVE-2026-4224","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4224","cwe":"CWE-674","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-4224","date":"2026-10-10","epss":0.0069,"percentile":0.51382}],"urls":["https://github.com/python/cpython/commit/196edfb06a7458377d4d0f4b3cd41724c1f3bd4a","https://github.com/python/cpython/commit/24ce88b285f56ee11626cf5e472af3cd8cc7c621","https://github.com/python/cpython/commit/642865ddf4b232da1f3b1f7abcfa3254c4bfe785","https://github.com/python/cpython/commit/af856a7177326ac25d9f66cc6dd28b554d914fee","https://github.com/python/cpython/commit/e0a8a6da90597a924b300debe045cdb4628ee1f3","https://github.com/python/cpython/commit/eb0e8be3a7e11b87d198a2c3af1ed0eccf532768","https://github.com/python/cpython/issues/145986","https://github.com/python/cpython/pull/145987","https://mail.python.org/archives/list/security-announce@python.org/thread/5M7CGUW3XBRY7II4DK43KF7NQQ3TPZ6R/","http://www.openwall.com/lists/oss-security/2026/03/16/4"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-4224","description":"When an Expat parser with a registered ElementDeclHandler parses an inline\ndocument type definition containing a deeply nested content model a C stack\noverflow occurs."}]},{"artifact":{"id":"3c9ac883761ed4dd","cpes":["cpe:2.3:a:com.fasterxml.jackson.core:jackson-core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson-core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson_core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:jackson-core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:jackson_core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:jackson-core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:jackson_core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:core:2.20.1:*:*:*:*:*:*:*"],"name":"jackson-core","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1","type":"java-archive","version":"2.20.1","language":"java","licenses":["The Apache Software License, Version 2.0"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/opt/jenkins-plugin-manager.jar:com.fasterxml.jackson.core:jackson-core","manifestName":"","pomArtifactID":"jackson-core","archiveDigests":null},"locations":[{"path":"/opt/jenkins-plugin-manager.jar","layerID":"sha256:1303dd889187d7e25ac68bf0fb8d636f5a922b6753d092bcae3924d569cb869a","accessPath":"/opt/jenkins-plugin-manager.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.21.4"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-r7wm-3cxj-wff9","versionConstraint":">=2.19.0,<2.21.4 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-core","version":"2.20.1"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-r7wm-3cxj-wff9","fix":{"state":"fixed","versions":["2.21.4"],"available":[{"date":"2026-07-22","kind":"first-observed","version":"2.21.4"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-68494","cwe":"CWE-770","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-68494","date":"2026-10-10","epss":0.00463,"percentile":0.3825}],"risk":0.3750299999999999,"urls":["https://github.com/FasterXML/jackson-core/security/advisories/GHSA-r7wm-3cxj-wff9","https://github.com/FasterXML/jackson-core/pull/1611","https://github.com/FasterXML/jackson-core/commit/050b429804dce2a7e08f0be1b0b4c3d040fdb9cd","https://github.com/FasterXML/jackson-core/commit/4cdd529749da396cc7edf6d4a2aad41d47902641","https://github.com/FasterXML/jackson-core/commit/c5941e5aae7fd5aeac55d66933cfb82b9aabeef8","https://nvd.nist.gov/vuln/detail/CVE-2026-68494"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-r7wm-3cxj-wff9","description":"jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)"},"relatedVulnerabilities":[{"id":"CVE-2026-68494","cvss":[{"type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-68494","cwe":"CWE-770","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-68494","date":"2026-10-10","epss":0.00463,"percentile":0.3825}],"urls":["https://github.com/FasterXML/jackson-core/commit/050b429804dce2a7e08f0be1b0b4c3d040fdb9cd","https://github.com/FasterXML/jackson-core/commit/4cdd529749da396cc7edf6d4a2aad41d47902641","https://github.com/FasterXML/jackson-core/commit/c5941e5aae7fd5aeac55d66933cfb82b9aabeef8","https://github.com/FasterXML/jackson-core/pull/1611","https://github.com/FasterXML/jackson-core/security/advisories/GHSA-r7wm-3cxj-wff9","https://github.com/advisories/GHSA-72hv-8253-57qq","https://www.cve.org/CVERecord?id=CVE-2026-18401"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-68494","description":"The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 (GHSA-72hv-8253-57qq, number length constraint bypass in the non-blocking parser) is incomplete. This record covers the remaining bypass.\n\nThe earlier fix wired validateIntegerLength() into a new _setIntLength() helper and invoked it wherever the integer portion of a number is decided: a terminator byte arrives, a '.' or 'e'/'E' is seen, or input ends inside a fully buffered value. It was not invoked on the attacker-relevant path where the parser runs out of input while still inside the MINOR_NUMBER_INTEGER_DIGITS minor state and returns NOT_AVAILABLE to the caller.\n\nAs a result, an attacker who streams JSON to a non-blocking parser in many small chunks, without ever sending a terminator byte, keeps the parser inside MINOR_NUMBER_INTEGER_DIGITS indefinitely. _textBuffer.expandCurrentSegment() grows the accumulator on every chunk while validateIntegerLength() is never called. The accumulator is bounded only by maxStringLength (20 MiB by default) rather than by maxNumberLength (1000 by default), an amplification of roughly 20,000x over the documented limit. Because Java char values occupy two bytes, a single connection can be driven to approximately 40 MiB of heap before the validator finally fires when the value completes.\n\nThe equivalent fraction-path code is correct: _finishFloatFraction() calls _setFractLength() before its NOT_AVAILABLE return. The missing call affects the integer-digit paths in _startPositiveNumber(), _startNegativeNumber() and _finishNumberIntegralPart() in NonBlockingUtf8JsonParserBase.\n\nImpact: reactive frameworks such as Spring WebFlux/Reactor, Quarkus, Helidon and Vert.x feed inbound HTTP or gRPC bytes to the async parser as they arrive, which is precisely the chunked-feed shape required. Operators who set StreamReadConstraints.maxNumberLength expecting it to cap memory per number value do not get that guarantee; memory accumulates per concurrent connection and attacker-controlled concurrency can exhaust the JVM heap. The synchronous parsers (UTF8StreamJsonParser, ReaderBasedJsonParser) and the async parser operating on complete input are not affected.\n\nExploitation requires only the ability to stream data to a parsing endpoint; no privileges or user interaction are needed.\n\nThis issue affects com.fasterxml.jackson.core:jackson-core from version 2.15.0 through 2.18.7, and from 2.19.0 through 2.21.3, and tools.jackson.core:jackson-core from 3.0.0 through 3.1.3. Versions prior to 2.15.0 are not affected, because StreamReadConstraints -- which defines the maxNumberLength setting -- was first introduced in jackson-core 2.15.0, so no such constraint exists to be bypassed in earlier releases. Note that GHSA-r7wm-3cxj-wff9 states the affected 2.x range without a lower bound. The 2.22.x and 3.2.x release lines are not affected: those branches were created after the fix commit landed on 2026-05-21 and therefore contain it from their initial releases (2.22.0, tagged 2026-06-03, and 3.2.0, tagged 2026-06-08)."}]},{"artifact":{"id":"badc115167ed0f1b","cpes":["cpe:2.3:a:python3-rpm:python3-rpm:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:python3-rpm:python3_rpm:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:python3_rpm:python3-rpm:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:python3_rpm:python3_rpm:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3-rpm:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3_rpm:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3-rpm:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3_rpm:4.16.1.3-40.el9:*:*:*:*:*:*:*"],"name":"python3-rpm","purl":"pkg:rpm/redhat/python3-rpm@4.16.1.3-40.el9?arch=x86_64&distro=rhel-9.8&upstream=rpm-4.16.1.3-40.el9.src.rpm","type":"rpm","version":"4.16.1.3-40.el9","language":"","licenses":["GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"rpm","version":"4.16.1.3-40.el9"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-95521","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"rpm","version":"4.16.1.3-40.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-95521","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95521","cwe":"CWE-78","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95521","date":"2026-10-10","epss":0.00581,"percentile":0.46153}],"risk":0.37184,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-95521","description":"A command injection flaw was found in rpm. Installing or rebuilding a source RPM whose source or spec file basenames contain a %() macro construct causes rpm to execute an attacker-controlled shell command via popen() while relocating the source file list. This allows arbitrary command execution as the invoking (typically non-root) user, simply by installing, rebuilding, or otherwise processing an untrusted .src.rpm."},"relatedVulnerabilities":[{"id":"CVE-2026-95521","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95521","cwe":"CWE-78","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95521","date":"2026-10-10","epss":0.00581,"percentile":0.46153}],"urls":["https://access.redhat.com/security/cve/CVE-2026-95521","https://bugzilla.redhat.com/show_bug.cgi?id=2537812"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95521","description":"A command injection flaw was found in rpm. Installing or rebuilding a source RPM whose source or spec file basenames contain a %() macro construct causes rpm to execute an attacker-controlled shell command via popen() while relocating the source file list. This allows arbitrary command execution as the invoking (typically non-root) user, simply by installing, rebuilding, or otherwise processing an untrusted .src.rpm."}]},{"artifact":{"id":"fe0a59036b95950c","cpes":["cpe:2.3:a:redhat:rpm:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm:rpm:4.16.1.3-40.el9:*:*:*:*:*:*:*"],"name":"rpm","purl":"pkg:rpm/redhat/rpm@4.16.1.3-40.el9?arch=x86_64&distro=rhel-9.8&upstream=rpm-4.16.1.3-40.el9.src.rpm","type":"rpm","version":"4.16.1.3-40.el9","language":"","licenses":["GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-95521","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"rpm","version":"0:4.16.1.3-40.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-95521","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95521","cwe":"CWE-78","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95521","date":"2026-10-10","epss":0.00581,"percentile":0.46153}],"risk":0.37184,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-95521","description":"A command injection flaw was found in rpm. Installing or rebuilding a source RPM whose source or spec file basenames contain a %() macro construct causes rpm to execute an attacker-controlled shell command via popen() while relocating the source file list. This allows arbitrary command execution as the invoking (typically non-root) user, simply by installing, rebuilding, or otherwise processing an untrusted .src.rpm."},"relatedVulnerabilities":[{"id":"CVE-2026-95521","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95521","cwe":"CWE-78","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95521","date":"2026-10-10","epss":0.00581,"percentile":0.46153}],"urls":["https://access.redhat.com/security/cve/CVE-2026-95521","https://bugzilla.redhat.com/show_bug.cgi?id=2537812"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95521","description":"A command injection flaw was found in rpm. Installing or rebuilding a source RPM whose source or spec file basenames contain a %() macro construct causes rpm to execute an attacker-controlled shell command via popen() while relocating the source file list. This allows arbitrary command execution as the invoking (typically non-root) user, simply by installing, rebuilding, or otherwise processing an untrusted .src.rpm."}]},{"artifact":{"id":"27707240ebd32452","cpes":["cpe:2.3:a:rpm-build-libs:rpm-build-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm-build-libs:rpm_build_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm_build_libs:rpm-build-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm_build_libs:rpm_build_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm-build:rpm-build-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm-build:rpm_build_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm_build:rpm-build-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm_build:rpm_build_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:rpm-build-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:rpm_build_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm:rpm-build-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm:rpm_build_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*"],"name":"rpm-build-libs","purl":"pkg:rpm/redhat/rpm-build-libs@4.16.1.3-40.el9?arch=x86_64&distro=rhel-9.8&upstream=rpm-4.16.1.3-40.el9.src.rpm","type":"rpm","version":"4.16.1.3-40.el9","language":"","licenses":["GPLv2+ and LGPLv2+ with exceptions"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"rpm","version":"4.16.1.3-40.el9"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-95521","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"rpm","version":"4.16.1.3-40.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-95521","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95521","cwe":"CWE-78","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95521","date":"2026-10-10","epss":0.00581,"percentile":0.46153}],"risk":0.37184,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-95521","description":"A command injection flaw was found in rpm. Installing or rebuilding a source RPM whose source or spec file basenames contain a %() macro construct causes rpm to execute an attacker-controlled shell command via popen() while relocating the source file list. This allows arbitrary command execution as the invoking (typically non-root) user, simply by installing, rebuilding, or otherwise processing an untrusted .src.rpm."},"relatedVulnerabilities":[{"id":"CVE-2026-95521","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95521","cwe":"CWE-78","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95521","date":"2026-10-10","epss":0.00581,"percentile":0.46153}],"urls":["https://access.redhat.com/security/cve/CVE-2026-95521","https://bugzilla.redhat.com/show_bug.cgi?id=2537812"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95521","description":"A command injection flaw was found in rpm. Installing or rebuilding a source RPM whose source or spec file basenames contain a %() macro construct causes rpm to execute an attacker-controlled shell command via popen() while relocating the source file list. This allows arbitrary command execution as the invoking (typically non-root) user, simply by installing, rebuilding, or otherwise processing an untrusted .src.rpm."}]},{"artifact":{"id":"108e4bcd5f0cf305","cpes":["cpe:2.3:a:rpm-libs:rpm-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm-libs:rpm_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm_libs:rpm-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm_libs:rpm_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:rpm-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:rpm_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm:rpm-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm:rpm_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*"],"name":"rpm-libs","purl":"pkg:rpm/redhat/rpm-libs@4.16.1.3-40.el9?arch=x86_64&distro=rhel-9.8&upstream=rpm-4.16.1.3-40.el9.src.rpm","type":"rpm","version":"4.16.1.3-40.el9","language":"","licenses":["GPLv2+ and LGPLv2+ with exceptions"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"rpm","version":"4.16.1.3-40.el9"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-95521","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"rpm","version":"4.16.1.3-40.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-95521","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95521","cwe":"CWE-78","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95521","date":"2026-10-10","epss":0.00581,"percentile":0.46153}],"risk":0.37184,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-95521","description":"A command injection flaw was found in rpm. Installing or rebuilding a source RPM whose source or spec file basenames contain a %() macro construct causes rpm to execute an attacker-controlled shell command via popen() while relocating the source file list. This allows arbitrary command execution as the invoking (typically non-root) user, simply by installing, rebuilding, or otherwise processing an untrusted .src.rpm."},"relatedVulnerabilities":[{"id":"CVE-2026-95521","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95521","cwe":"CWE-78","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95521","date":"2026-10-10","epss":0.00581,"percentile":0.46153}],"urls":["https://access.redhat.com/security/cve/CVE-2026-95521","https://bugzilla.redhat.com/show_bug.cgi?id=2537812"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95521","description":"A command injection flaw was found in rpm. Installing or rebuilding a source RPM whose source or spec file basenames contain a %() macro construct causes rpm to execute an attacker-controlled shell command via popen() while relocating the source file list. This allows arbitrary command execution as the invoking (typically non-root) user, simply by installing, rebuilding, or otherwise processing an untrusted .src.rpm."}]},{"artifact":{"id":"fd3a4056ba2de6c5","cpes":["cpe:2.3:a:rpm-sign-libs:rpm-sign-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm-sign-libs:rpm_sign_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm_sign_libs:rpm-sign-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm_sign_libs:rpm_sign_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm-sign:rpm-sign-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm-sign:rpm_sign_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm_sign:rpm-sign-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm_sign:rpm_sign_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:rpm-sign-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:rpm_sign_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm:rpm-sign-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm:rpm_sign_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*"],"name":"rpm-sign-libs","purl":"pkg:rpm/redhat/rpm-sign-libs@4.16.1.3-40.el9?arch=x86_64&distro=rhel-9.8&upstream=rpm-4.16.1.3-40.el9.src.rpm","type":"rpm","version":"4.16.1.3-40.el9","language":"","licenses":["GPLv2+ and LGPLv2+ with exceptions"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"rpm","version":"4.16.1.3-40.el9"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-95521","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"rpm","version":"4.16.1.3-40.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-95521","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95521","cwe":"CWE-78","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95521","date":"2026-10-10","epss":0.00581,"percentile":0.46153}],"risk":0.37184,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-95521","description":"A command injection flaw was found in rpm. Installing or rebuilding a source RPM whose source or spec file basenames contain a %() macro construct causes rpm to execute an attacker-controlled shell command via popen() while relocating the source file list. This allows arbitrary command execution as the invoking (typically non-root) user, simply by installing, rebuilding, or otherwise processing an untrusted .src.rpm."},"relatedVulnerabilities":[{"id":"CVE-2026-95521","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95521","cwe":"CWE-78","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95521","date":"2026-10-10","epss":0.00581,"percentile":0.46153}],"urls":["https://access.redhat.com/security/cve/CVE-2026-95521","https://bugzilla.redhat.com/show_bug.cgi?id=2537812"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95521","description":"A command injection flaw was found in rpm. Installing or rebuilding a source RPM whose source or spec file basenames contain a %() macro construct causes rpm to execute an attacker-controlled shell command via popen() while relocating the source file list. This allows arbitrary command execution as the invoking (typically non-root) user, simply by installing, rebuilding, or otherwise processing an untrusted .src.rpm."}]},{"artifact":{"id":"3c9ac883761ed4dd","cpes":["cpe:2.3:a:com.fasterxml.jackson.core:jackson-core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson-core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson_core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:jackson-core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:jackson_core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:jackson-core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:jackson_core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:core:2.20.1:*:*:*:*:*:*:*"],"name":"jackson-core","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1","type":"java-archive","version":"2.20.1","language":"java","licenses":["The Apache Software License, Version 2.0"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/opt/jenkins-plugin-manager.jar:com.fasterxml.jackson.core:jackson-core","manifestName":"","pomArtifactID":"jackson-core","archiveDigests":null},"locations":[{"path":"/opt/jenkins-plugin-manager.jar","layerID":"sha256:1303dd889187d7e25ac68bf0fb8d636f5a922b6753d092bcae3924d569cb869a","accessPath":"/opt/jenkins-plugin-manager.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.21.7"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-7hhh-6rmp-j9qf","versionConstraint":">=2.19.0,<=2.21.6 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-core","version":"2.20.1"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-7hhh-6rmp-j9qf","fix":{"state":"fixed","versions":["2.21.7"],"available":[{"date":"2026-10-01","kind":"first-observed","version":"2.21.7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-89425","cwe":"CWE-400","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"},{"cve":"CVE-2026-89425","cwe":"CWE-770","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-89425","date":"2026-10-10","epss":0.00492,"percentile":0.40427}],"risk":0.369,"urls":["https://github.com/FasterXML/jackson-core/security/advisories/GHSA-7hhh-6rmp-j9qf","https://nvd.nist.gov/vuln/detail/CVE-2026-89425","https://github.com/FasterXML/jackson-core/pull/1698","https://github.com/FasterXML/jackson-core/commit/211cf2c5d91abbec38067f37efc1363cd4e88ee3","https://github.com/FasterXML/jackson-core/releases/tag/jackson-core-2.18.11","https://github.com/FasterXML/jackson-core/releases/tag/jackson-core-3.2.3"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-7hhh-6rmp-j9qf","description":"jackson-core: UTF8DataInputJsonParser._reportInvalidToken() missing maxErrorTokenLength limit -> unbounded StringBuilder growth (DoS)"},"relatedVulnerabilities":[{"id":"CVE-2026-89425","cvss":[{"type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-89425","cwe":"CWE-400","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"},{"cve":"CVE-2026-89425","cwe":"CWE-770","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-89425","date":"2026-10-10","epss":0.00492,"percentile":0.40427}],"urls":["https://github.com/FasterXML/jackson-core/pull/1698","https://github.com/FasterXML/jackson-core/security/advisories/GHSA-7hhh-6rmp-j9qf"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-89425","description":"UTF8DataInputJsonParser._reportInvalidToken() in FasterXML jackson-core builds the offending-token text for its error message by appending Java identifier characters to a StringBuilder in a loop that has no upper bound. Unlike the three sibling parser implementations, including UTF8StreamJsonParser, it never consults ErrorReportConfiguration.getMaxErrorTokenLength() (default 256). A malformed token supplied to a parser created through JsonFactory.createParser(DataInput) is therefore accumulated in full. No StreamReadConstraints setting mitigates this: maxDocumentLength cannot be applied to DataInput sources at all, and maxStringLength does not cover this path because the accumulation bypasses ReadConstrainedTextBuffer. The reporter measured a 20,000,109-character exception message from a 20-million-character malformed token on the DataInput path, against 367 characters for identical input on the InputStream path. Scaling the payload drives the StringBuilder, which also incurs byte-to-char expansion and internal array doubling, to many times the raw payload size and can trigger OutOfMemoryError for the whole JVM. UTF8DataInputJsonParser was introduced in 2.8.0 together with createParser(DataInput); releases before 2.8.0 do not contain the affected class."}]},{"artifact":{"id":"1c27b1fc065b3d30","cpes":["cpe:2.3:a:python3-pip-wheel:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip-wheel:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip_wheel:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip_wheel:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*"],"name":"python3-pip-wheel","purl":"pkg:rpm/redhat/python3-pip-wheel@21.3.1-2.el9_8?arch=noarch&distro=rhel-9.8&upstream=python-pip-21.3.1-2.el9_8.src.rpm","type":"rpm","version":"21.3.1-2.el9_8","language":"","licenses":["MIT and Python and ASL 2.0 and BSD and ISC and LGPLv2 and MPLv2.0 and (ASL 2.0 or BSD)"],"metadata":{"epoch":null,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python-pip","version":"21.3.1-2.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-57585","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"python-pip","version":"21.3.1-2.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-57585","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-57585","cwe":"CWE-416","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-57585","date":"2026-10-10","epss":0.00488,"percentile":0.40138}],"risk":0.366,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-57585","description":"A flaw was found in MessagePack for Python, a serializer implementation. This vulnerability, categorized as a Use-After-Free (CWE-416), occurs when the Unpacker component is reused after an error. A remote attacker could exploit this by repeatedly providing untrusted input, leading to an out-of-bounds read and a system crash. This can result in a Denial of Service (DoS) attack."},"relatedVulnerabilities":[{"id":"CVE-2026-57585","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-57585","cwe":"CWE-416","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-57585","date":"2026-10-10","epss":0.00488,"percentile":0.40138}],"urls":["https://github.com/msgpack/msgpack-python/commit/2c56ddb5d0025ed481d962c0f5d62d19dec7476d","https://github.com/msgpack/msgpack-python/security/advisories/GHSA-6v7p-g79w-8964"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-57585","description":"MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.1, there is an Out-of-bounds read/crash on Unpacker reuse after a caught error, potentially leading to a DoS attack.  If the Unpacker is used repeatedly after an error occurs, the process may crash with a SEGV. This issue has been fixed in version 1.2.1."}]},{"artifact":{"id":"406b3abfffe1d292","cpes":["cpe:2.3:a:git-lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git-lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*"],"name":"git-lfs","purl":"pkg:rpm/redhat/git-lfs@3.7.1-4.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=git-lfs-3.7.1-4.el9_8.3.src.rpm","type":"rpm","version":"3.7.1-4.el9_8.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-45336","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"git-lfs","version":"0:3.7.1-4.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2024-45336","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2024-45336","date":"2026-10-10","epss":0.00671,"percentile":0.50583}],"risk":0.365695,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2024-45336","description":"A flaw was found in the net/http package of the Golang standard library. The HTTP client drops sensitive headers after following a cross-domain redirect. For example, a request to `a.com/` containing an Authorization header redirected to `b.com/` will not send that header to `b.com`. However, the sensitive headers would be restored if the client received a subsequent same-domain redirect. For example, a chain of redirects from `a.com/`, to `b.com/1`, and finally to `b.com/2` would incorrectly send the Authorization header to `b.com/2`."},"relatedVulnerabilities":[{"id":"CVE-2024-45336","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2024-45336","date":"2026-10-10","epss":0.00671,"percentile":0.50583}],"urls":["https://go.dev/cl/643100","https://go.dev/issue/70530","https://groups.google.com/g/golang-dev/c/CAWXhan3Jww/m/bk9LAa-lCgAJ","https://groups.google.com/g/golang-dev/c/bG8cv1muIBM/m/G461hA6lCgAJ","https://pkg.go.dev/vuln/GO-2025-3420","https://security.netapp.com/advisory/ntap-20250221-0003/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-45336","description":"The HTTP client drops sensitive headers after following a cross-domain redirect. For example, a request to a.com/ containing an Authorization header which is redirected to b.com/ will not send that header to b.com. In the event that the client received a subsequent same-domain redirect, however, the sensitive headers would be restored. For example, a chain of redirects from a.com/, to b.com/1, and finally to b.com/2 would incorrectly send the Authorization header to b.com/2."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-2980","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-2980","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2980","cwe":"CWE-476","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-2980","cwe":"CWE-476","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-2980","date":"2026-10-10","epss":0.00859,"percentile":0.57282}],"risk":0.36507500000000004,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-2980","description":"A NULL pointer dereference vulnerability was found in vim's do_mouse() function of the src/mouse.c file. The issue occurs with a mouse click when it is not initialized. This flaw allows an attacker to trick a user into opening a specially crafted input file, triggering the vulnerability that could cause an application to crash."},"relatedVulnerabilities":[{"id":"CVE-2022-2980","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":6.3,"impactScore":3.4,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2980","cwe":"CWE-476","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-2980","cwe":"CWE-476","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-2980","date":"2026-10-10","epss":0.00859,"percentile":0.57282}],"urls":["https://github.com/vim/vim/commit/80525751c5ce9ed82c41d83faf9ef38667bf61b1","https://huntr.dev/bounties/6e7b12a5-242c-453d-b39e-9625d563b0ea","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWOJOA7PZZAMBI5GFTL6PWHXMWSDLUXL/","https://security.gentoo.org/glsa/202305-16"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-2980","description":"NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0259."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-4292","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-4292","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-4292","cwe":"CWE-416","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-4292","cwe":"CWE-416","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-4292","date":"2026-10-10","epss":0.00674,"percentile":0.50739}],"risk":0.36396,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-4292","description":"A heap use-after-free flaw was found in Vim's did_set_spelllang() function of the spell.c file. This issue occurs because vim uses freed memory after SpellFileMissing autocmd uses bwipe. This could allows an attacker to trick a user into opening a specially crafted file, triggering a heap use-after-free issue that causes an application to crash, possibly executing code and corrupting memory."},"relatedVulnerabilities":[{"id":"CVE-2022-4292","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-4292","cwe":"CWE-416","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-4292","cwe":"CWE-416","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-4292","date":"2026-10-10","epss":0.00674,"percentile":0.50739}],"urls":["https://github.com/vim/vim/commit/c3d27ada14acd02db357f2d16347acc22cb17e93","https://huntr.dev/bounties/da3d4c47-e57a-451e-993d-9df0ed31f57b","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WYC22GGZ6QA66HLNLHCTAJU265TT3O33/","https://security.gentoo.org/glsa/202305-16","https://security.netapp.com/advisory/ntap-20230113-0005/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-4292","description":"Use After Free in GitHub repository vim/vim prior to 9.0.0882."}]},{"artifact":{"id":"73ec63868795f316","cpes":["cpe:2.3:a:openssl:openssl:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:rpm/redhat/openssl@3.5.8-1.el9_8?arch=x86_64&distro=rhel-9.8&epoch=1&upstream=openssl-3.5.8-1.el9_8.src.rpm","type":"rpm","version":"1:3.5.8-1.el9_8","language":"","licenses":["Apache-2.0"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-28389","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"openssl","version":"1:3.5.8-1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-28389","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-28389","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28389","date":"2026-10-10","epss":0.00805,"percentile":0.55502}],"risk":0.358225,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-28389","description":"A flaw was found in OpenSSL. A remote attacker could exploit this by sending a specially crafted Cryptographic Message Syntax (CMS) EnvelopedData message with KeyAgreeRecipientInfo. This vulnerability arises because the software attempts to process an optional field without verifying its existence, leading to a NULL pointer dereference. This can result in a Denial of Service (DoS) for applications that handle untrusted CMS data."},"relatedVulnerabilities":[{"id":"CVE-2026-28389","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-28389","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28389","date":"2026-10-10","epss":0.00805,"percentile":0.55502}],"urls":["https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5","https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616","https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f","https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a","https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686","https://openssl-library.org/news/secadv/20260407.txt","https://cert-portal.siemens.com/productcert/html/ssa-032379.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-28389","description":"Issue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyAgreeRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyAgreeRecipientInfo is\nprocessed, the optional parameters field of KeyEncryptionAlgorithmIdentifier\nis examined without checking for its presence. This results in a NULL\npointer dereference if the field is missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"753337be7fe19d16","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/redhat/openssl-libs@3.5.8-1.el9_8?arch=x86_64&distro=rhel-9.8&epoch=1&upstream=openssl-3.5.8-1.el9_8.src.rpm","type":"rpm","version":"1:3.5.8-1.el9_8","language":"","licenses":["Apache-2.0"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"3.5.8-1.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-28389","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"openssl","version":"3.5.8-1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-28389","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-28389","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28389","date":"2026-10-10","epss":0.00805,"percentile":0.55502}],"risk":0.358225,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-28389","description":"A flaw was found in OpenSSL. A remote attacker could exploit this by sending a specially crafted Cryptographic Message Syntax (CMS) EnvelopedData message with KeyAgreeRecipientInfo. This vulnerability arises because the software attempts to process an optional field without verifying its existence, leading to a NULL pointer dereference. This can result in a Denial of Service (DoS) for applications that handle untrusted CMS data."},"relatedVulnerabilities":[{"id":"CVE-2026-28389","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-28389","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28389","date":"2026-10-10","epss":0.00805,"percentile":0.55502}],"urls":["https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5","https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616","https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f","https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a","https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686","https://openssl-library.org/news/secadv/20260407.txt","https://cert-portal.siemens.com/productcert/html/ssa-032379.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-28389","description":"Issue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyAgreeRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyAgreeRecipientInfo is\nprocessed, the optional parameters field of KeyEncryptionAlgorithmIdentifier\nis examined without checking for its presence. This results in a NULL\npointer dereference if the field is missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"cfb83fcea89d51fa","cpes":["cpe:2.3:a:redhat:glib2:2.68.4-19.el9_8.10:*:*:*:*:*:*:*","cpe:2.3:a:glib2:glib2:2.68.4-19.el9_8.10:*:*:*:*:*:*:*"],"name":"glib2","purl":"pkg:rpm/redhat/glib2@2.68.4-19.el9_8.10?arch=x86_64&distro=rhel-9.8&upstream=glib2-2.68.4-19.el9_8.10.src.rpm","type":"rpm","version":"2.68.4-19.el9_8.10","language":"","licenses":["LGPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-32636","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"glib2","version":"0:2.68.4-19.el9_8.10"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2023-32636","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.2,"impactScore":3.6,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-32636","cwe":"CWE-400","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-32636","cwe":"CWE-502","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-32636","date":"2026-10-10","epss":0.00774,"percentile":0.54437}],"risk":0.35604,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-32636","description":"A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499. The offset table validation may be very slow. This bug does not affect any released version of glib but does affect glib distributors who followed the guidance of glib developers to backport the initial fix for CVE-2023-29499."},"relatedVulnerabilities":[{"id":"CVE-2023-32636","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-32636","cwe":"CWE-400","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-32636","cwe":"CWE-502","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-32636","date":"2026-10-10","epss":0.00774,"percentile":0.54437}],"urls":["https://gitlab.gnome.org/GNOME/glib/-/issues/2841","https://https://discourse.gnome.org/t/multiple-fixes-for-gvariant-normalisation-issues-in-glib/12835","https://security.netapp.com/advisory/ntap-20231110-0002/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-32636","description":"A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499. The offset table validation may be very slow. This bug does not affect any released version of glib but does affect glib distributors who followed the guidance of glib developers to backport the initial fix for CVE-2023-29499."}]},{"artifact":{"id":"406b3abfffe1d292","cpes":["cpe:2.3:a:git-lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git-lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*"],"name":"git-lfs","purl":"pkg:rpm/redhat/git-lfs@3.7.1-4.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=git-lfs-3.7.1-4.el9_8.3.src.rpm","type":"rpm","version":"3.7.1-4.el9_8.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-61723","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"git-lfs","version":"0:3.7.1-4.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-61723","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-61723","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-61723","date":"2026-10-10","epss":0.00661,"percentile":0.50187}],"risk":0.340415,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-61723","description":"A potential denial of service flaw has been discovered in the golang encoding/pem module. Due to the design of the PEM parsing function, the processing time for some\ninputs scales non-linearly with respect to the size of the input. This affects programs which parse untrusted PEM inputs and may result in an unresponsive program should an attacker exploit it."},"relatedVulnerabilities":[{"id":"CVE-2025-61723","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-61723","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-61723","date":"2026-10-10","epss":0.00661,"percentile":0.50187}],"urls":["https://go.dev/cl/709858","https://go.dev/issue/75676","https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI","https://pkg.go.dev/vuln/GO-2025-4009","http://www.openwall.com/lists/oss-security/2025/10/08/1"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-61723","description":"The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input. This affects programs which parse untrusted PEM inputs."}]},{"artifact":{"id":"f5eb0651fec88df5","cpes":["cpe:2.3:a:com.fasterxml.jackson.core:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.20.1:*:*:*:*:*:*:*"],"name":"jackson-databind","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1","type":"java-archive","version":"2.20.1","language":"java","licenses":["The Apache Software License, Version 2.0"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/opt/jenkins-plugin-manager.jar:com.fasterxml.jackson.core:jackson-databind","manifestName":"","pomArtifactID":"jackson-databind","archiveDigests":null},"locations":[{"path":"/opt/jenkins-plugin-manager.jar","layerID":"sha256:1303dd889187d7e25ac68bf0fb8d636f5a922b6753d092bcae3924d569cb869a","accessPath":"/opt/jenkins-plugin-manager.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.21.7"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-cxp5-3px4-pw24","versionConstraint":">=2.19.0,<=2.21.6 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-databind","version":"2.20.1"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-cxp5-3px4-pw24","fix":{"state":"fixed","versions":["2.21.7"],"available":[{"date":"2026-09-30","kind":"first-observed","version":"2.21.7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91777","cwe":"CWE-400","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-91777","date":"2026-10-10","epss":0.0045,"percentile":0.37215}],"risk":0.33749999999999997,"urls":["https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24","https://nvd.nist.gov/vuln/detail/CVE-2026-91777","https://github.com/FasterXML/jackson-databind/issues/6204","https://github.com/FasterXML/jackson-databind/pull/6204","https://github.com/FasterXML/jackson-databind/commit/37ad9b81712cbb9fb62c2d2c1813593252a24b67","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.11","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.7","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.3","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.7","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.3"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-cxp5-3px4-pw24","description":"jackson-databind quadratic forward-reference completion"},"relatedVulnerabilities":[{"id":"CVE-2026-91777","cvss":[{"type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91777","cwe":"CWE-400","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-91777","date":"2026-10-10","epss":0.0045,"percentile":0.37215}],"urls":["https://github.com/FasterXML/jackson-databind/issues/6204","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91777","description":"Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID. The affected paths are CollectionDeserializer.CollectionReferringAccumulator.resolveForwardReference() and the equivalent implementation in MapDeserializer. When a document first creates N unresolved object-ID references in an identity-enabled collection or map and then defines those same IDs in reverse order, completion performs on the order of N * (N + 1) / 2 identity comparisons, so a shallow document whose size grows linearly causes quadratic CPU work during deserialization. The reporter instrumented equals() calls on the ID class and measured exactly 2,003,000 comparisons at N = 2,000, against zero comparisons in the pending-reference lookup path for an equally sized control in which every reference was already resolved. The input requires no deep nesting and no syntactically unusual JSON. Exploitation requires an application that deserializes attacker-influenced JSON into an identity-enabled collection or map. The fix replaces the repeated linear lookup with a keyed pending-reference structure."}]},{"artifact":{"id":"f5eb0651fec88df5","cpes":["cpe:2.3:a:com.fasterxml.jackson.core:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.20.1:*:*:*:*:*:*:*"],"name":"jackson-databind","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1","type":"java-archive","version":"2.20.1","language":"java","licenses":["The Apache Software License, Version 2.0"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/opt/jenkins-plugin-manager.jar:com.fasterxml.jackson.core:jackson-databind","manifestName":"","pomArtifactID":"jackson-databind","archiveDigests":null},"locations":[{"path":"/opt/jenkins-plugin-manager.jar","layerID":"sha256:1303dd889187d7e25ac68bf0fb8d636f5a922b6753d092bcae3924d569cb869a","accessPath":"/opt/jenkins-plugin-manager.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.21.7"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-wv8q-qhhj-9h54","versionConstraint":">=2.19.0,<=2.21.6 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-databind","version":"2.20.1"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-wv8q-qhhj-9h54","fix":{"state":"fixed","versions":["2.21.7"],"available":[{"date":"2026-09-30","kind":"first-observed","version":"2.21.7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91776","cwe":"CWE-400","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-91776","date":"2026-10-10","epss":0.0045,"percentile":0.37214}],"risk":0.33749999999999997,"urls":["https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54","https://nvd.nist.gov/vuln/detail/CVE-2026-91776","https://github.com/FasterXML/jackson-databind/issues/6203","https://github.com/FasterXML/jackson-databind/commit/2870d1d6dc1b7e1c07ee11dd5b04ab71cddbb577","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.11","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.7","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.3","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.7","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.3"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-wv8q-qhhj-9h54","description":"jackson-databind retains every unknown raw type ID"},"relatedVulnerabilities":[{"id":"CVE-2026-91776","cvss":[{"type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91776","cwe":"CWE-400","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-91776","date":"2026-10-10","epss":0.0045,"percentile":0.37214}],"urls":["https://github.com/FasterXML/jackson-databind/issues/6203","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91776","description":"TypeDeserializerBase._findDeserializer() in FasterXML jackson-databind caches the resolved deserializer under the raw, attacker-supplied type ID. When name-based polymorphism is configured with a fallback, for example @JsonTypeInfo(use = Id.NAME, defaultImpl = ...), every distinct unrecognized type ID resolves to the same fallback deserializer but is retained as its own key in the _deserializers map. That map has no configurable bound and lives for the lifetime of the type deserializer, so an attacker who can repeatedly supply fresh unknown type IDs causes monotonic memory retention across requests. The reporter observed 10,000 retained entries from 10,000 distinct unknown IDs, against a single entry for a control that repeated one unknown ID the same number of times, isolating attacker-controlled key cardinality from request volume. Exploitation requires an application that enables name-based polymorphism with a defaultImpl or equivalent fallback, accepts attacker-influenced type IDs, and reuses a long-lived ObjectMapper across requests. The fix stops caching fallback resolutions for unrecognized IDs and bounds both the number of cached entries and the length of a cacheable type ID."}]},{"artifact":{"id":"e6ca76ba6eb2c11d","cpes":["cpe:2.3:a:openssh:openssh:9.9p1-12.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssh:9.9p1-12.el9_8:*:*:*:*:*:*:*"],"name":"openssh","purl":"pkg:rpm/redhat/openssh@9.9p1-12.el9_8?arch=x86_64&distro=rhel-9.8&upstream=openssh-9.9p1-12.el9_8.src.rpm","type":"rpm","version":"9.9p1-12.el9_8","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-60000","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"openssh","version":"0:9.9p1-12.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-60000","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-60000","cwe":"CWE-770","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-60000","date":"2026-10-10","epss":0.00618,"percentile":0.48082}],"risk":0.33681,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-60000","description":"A flaw was found in OpenSSH's Secure Shell Daemon (sshd). This vulnerability allows a remote attacker to cause a denial of service by initiating an excessive number of authentication attempts. The issue arises from the mishandling of the MaxAuthTries setting specifically when using GSSAPIAuthentication, leading to resource exhaustion."},"relatedVulnerabilities":[{"id":"CVE-2026-60000","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-60000","cwe":"CWE-770","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-60000","date":"2026-10-10","epss":0.00618,"percentile":0.48082}],"urls":["https://marc.info/?l=openssh-unix-dev&m=178333966933090&w=2","https://www.openssh.org/releasenotes.html#10.4p1","https://www.openwall.com/lists/oss-security/2026/07/06/5"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-60000","description":"sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries was mishandled for GSSAPIAuthentication."}]},{"artifact":{"id":"264e5db8acd44cda","cpes":["cpe:2.3:a:openssh-clients:openssh-clients:9.9p1-12.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssh-clients:openssh_clients:9.9p1-12.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssh_clients:openssh-clients:9.9p1-12.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssh_clients:openssh_clients:9.9p1-12.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh-clients:9.9p1-12.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh_clients:9.9p1-12.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssh-clients:9.9p1-12.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssh_clients:9.9p1-12.el9_8:*:*:*:*:*:*:*"],"name":"openssh-clients","purl":"pkg:rpm/redhat/openssh-clients@9.9p1-12.el9_8?arch=x86_64&distro=rhel-9.8&upstream=openssh-9.9p1-12.el9_8.src.rpm","type":"rpm","version":"9.9p1-12.el9_8","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssh","version":"9.9p1-12.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-60000","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"openssh","version":"9.9p1-12.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-60000","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-60000","cwe":"CWE-770","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-60000","date":"2026-10-10","epss":0.00618,"percentile":0.48082}],"risk":0.33681,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-60000","description":"A flaw was found in OpenSSH's Secure Shell Daemon (sshd). This vulnerability allows a remote attacker to cause a denial of service by initiating an excessive number of authentication attempts. The issue arises from the mishandling of the MaxAuthTries setting specifically when using GSSAPIAuthentication, leading to resource exhaustion."},"relatedVulnerabilities":[{"id":"CVE-2026-60000","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-60000","cwe":"CWE-770","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-60000","date":"2026-10-10","epss":0.00618,"percentile":0.48082}],"urls":["https://marc.info/?l=openssh-unix-dev&m=178333966933090&w=2","https://www.openssh.org/releasenotes.html#10.4p1","https://www.openwall.com/lists/oss-security/2026/07/06/5"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-60000","description":"sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries was mishandled for GSSAPIAuthentication."}]},{"artifact":{"id":"ea0f2a7e0eb5d962","cpes":["cpe:2.3:a:python3:python3:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3:3.9.25-7.el9_8.3:*:*:*:*:*:*:*"],"name":"python3","purl":"pkg:rpm/redhat/python3@3.9.25-7.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=python3.9-3.9.25-7.el9_8.3.src.rpm","type":"rpm","version":"3.9.25-7.el9_8.3","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python3.9","version":"3.9.25-7.el9_8.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19445","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"python3.9","version":"3.9.25-7.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-19445","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19445","cwe":"CWE-416","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-19445","date":"2026-10-10","epss":0.00429,"percentile":0.3525}],"risk":0.33462000000000003,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-19445","description":"A flaw was found in Python. A remote, unauthenticated TLS client can cause a use-after-free in a server that uses SSLContext.sni_callback to assign a different SSLSocket.context when selecting a certificate per server name, if nothing else keeps the original SSLContext alive. This can crash the server process or result in a call through a freed pointer. Servers that wrap their listening socket with a long-lived SSLContext are not affected. TLS clients are not affected."},"relatedVulnerabilities":[{"id":"CVE-2026-19445","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":9.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19445","cwe":"CWE-416","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-19445","date":"2026-10-10","epss":0.00429,"percentile":0.3525}],"urls":["https://github.com/python/cpython/commit/34a53dce8174da2fceb12fe084a4def02a10053d","https://github.com/python/cpython/commit/46133cd57d309652139ada74014aca7665ac552b","https://github.com/python/cpython/commit/63fab143d94cafae71850831acfb52041ba44af7","https://github.com/python/cpython/commit/b12968cefe69ca1dcb8606c832ff73ee7dbf4ba8","https://github.com/python/cpython/commit/cd7e51e7d4563866fbaa1e2521ae69b45daf3698","https://github.com/python/cpython/commit/d8717ed01717a9641686e6e6f83f0ab8af235e2c","https://github.com/python/cpython/commit/ec44b5a3258cbda947d5e07242ee562ed05ef24b","https://github.com/python/cpython/issues/156293","https://github.com/python/cpython/pull/158504","https://mail.python.org/archives/list/security-announce@python.org/thread/QMQIUQB6WGGC3MI7I3WKQXOYOBDSPPS3/","http://www.openwall.com/lists/oss-security/2026/09/30/17"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19445","description":"A remote, unauthenticated TLS client can make a server crash or call\nthrough a freed pointer if its sni_callback assigns a different context to\nSSLSocket.context (the documented way to select a certificate per server\nname) and nothing else keeps the original ssl.SSLContext alive. Typical\ncases are servers that create an SSLContext per connection or replace it\nwhile connections are open; servers that wrap their listening socket with\nit are not affected.\n\n\nMitigation: keep a reference to every SSLContext that sets sni_callback for\nthe lifetime of the server. TLS clients are not affected."}]},{"artifact":{"id":"0ed3c72bb9ee9391","cpes":["cpe:2.3:a:python3-libs:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3-libs:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3_libs:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3_libs:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*"],"name":"python3-libs","purl":"pkg:rpm/redhat/python3-libs@3.9.25-7.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=python3.9-3.9.25-7.el9_8.3.src.rpm","type":"rpm","version":"3.9.25-7.el9_8.3","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python3.9","version":"3.9.25-7.el9_8.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19445","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"python3.9","version":"3.9.25-7.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-19445","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19445","cwe":"CWE-416","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-19445","date":"2026-10-10","epss":0.00429,"percentile":0.3525}],"risk":0.33462000000000003,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-19445","description":"A flaw was found in Python. A remote, unauthenticated TLS client can cause a use-after-free in a server that uses SSLContext.sni_callback to assign a different SSLSocket.context when selecting a certificate per server name, if nothing else keeps the original SSLContext alive. This can crash the server process or result in a call through a freed pointer. Servers that wrap their listening socket with a long-lived SSLContext are not affected. TLS clients are not affected."},"relatedVulnerabilities":[{"id":"CVE-2026-19445","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":9.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19445","cwe":"CWE-416","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-19445","date":"2026-10-10","epss":0.00429,"percentile":0.3525}],"urls":["https://github.com/python/cpython/commit/34a53dce8174da2fceb12fe084a4def02a10053d","https://github.com/python/cpython/commit/46133cd57d309652139ada74014aca7665ac552b","https://github.com/python/cpython/commit/63fab143d94cafae71850831acfb52041ba44af7","https://github.com/python/cpython/commit/b12968cefe69ca1dcb8606c832ff73ee7dbf4ba8","https://github.com/python/cpython/commit/cd7e51e7d4563866fbaa1e2521ae69b45daf3698","https://github.com/python/cpython/commit/d8717ed01717a9641686e6e6f83f0ab8af235e2c","https://github.com/python/cpython/commit/ec44b5a3258cbda947d5e07242ee562ed05ef24b","https://github.com/python/cpython/issues/156293","https://github.com/python/cpython/pull/158504","https://mail.python.org/archives/list/security-announce@python.org/thread/QMQIUQB6WGGC3MI7I3WKQXOYOBDSPPS3/","http://www.openwall.com/lists/oss-security/2026/09/30/17"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19445","description":"A remote, unauthenticated TLS client can make a server crash or call\nthrough a freed pointer if its sni_callback assigns a different context to\nSSLSocket.context (the documented way to select a certificate per server\nname) and nothing else keeps the original ssl.SSLContext alive. Typical\ncases are servers that create an SSLContext per connection or replace it\nwhile connections are open; servers that wrap their listening socket with\nit are not affected.\n\n\nMitigation: keep a reference to every SSLContext that sets sni_callback for\nthe lifetime of the server. TLS clients are not affected."}]},{"artifact":{"id":"987c8daac6c0f9f4","cpes":["cpe:2.3:a:libsolv:libsolv:0.7.24-6.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libsolv:0.7.24-6.el9_8:*:*:*:*:*:*:*"],"name":"libsolv","purl":"pkg:rpm/redhat/libsolv@0.7.24-6.el9_8?arch=x86_64&distro=rhel-9.8&upstream=libsolv-0.7.24-6.el9_8.src.rpm","type":"rpm","version":"0.7.24-6.el9_8","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-9150","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"libsolv","version":"0:0.7.24-6.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-9150","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-9150","cwe":"CWE-121","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-9150","date":"2026-10-10","epss":0.00581,"percentile":0.4616}],"risk":0.334075,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-9150","description":"A flaw was found in libsolv. This stack-based buffer overflow vulnerability occurs in libsolv's Debian metadata parser when processing specially crafted Debian repository metadata. An attacker could exploit this by providing malicious SHA384 or SHA512 checksum tags, leading to memory corruption and a denial of service (DoS) in the affected system."},"relatedVulnerabilities":[{"id":"CVE-2026-9150","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-9150","cwe":"CWE-121","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-9150","date":"2026-10-10","epss":0.00581,"percentile":0.4616}],"urls":["https://access.redhat.com/errata/RHSA-2026:21333","https://access.redhat.com/errata/RHSA-2026:28236","https://access.redhat.com/errata/RHSA-2026:30649","https://access.redhat.com/errata/RHSA-2026:48818","https://access.redhat.com/security/cve/CVE-2026-9150","https://bugzilla.redhat.com/show_bug.cgi?id=2460379","https://github.com/openSUSE/libsolv/pull/616"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-9150","description":"A flaw was found in libsolv. This stack-based buffer overflow vulnerability occurs in libsolv's Debian metadata parser when processing specially crafted Debian repository metadata. An attacker could exploit this by providing malicious SHA384 or SHA512 checksum tags, leading to memory corruption and a denial of service (DoS) in the affected system."}]},{"artifact":{"id":"c0b424c4c915f6c5","cpes":["cpe:2.3:a:redhat:tar:2\\:1.34-13.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:tar:tar:2\\:1.34-13.el9_8:*:*:*:*:*:*:*"],"name":"tar","purl":"pkg:rpm/redhat/tar@1.34-13.el9_8?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=tar-1.34-13.el9_8.src.rpm","type":"rpm","version":"2:1.34-13.el9_8","language":"","licenses":["GPLv3+"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-59871","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"tar","version":"2:1.34-13.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-59871","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59871","cwe":"CWE-704","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59871","date":"2026-10-10","epss":0.00644,"percentile":0.49355}],"risk":0.33166,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-59871","description":"A flaw was found in node-tar, a library for manipulating tar archives in Node.js. This vulnerability occurs when the library incorrectly converts specific archive path values into numbers, leading to an error during subsequent path processing. An attacker could exploit this to cause the application using node-tar to crash, resulting in a denial of service."},"relatedVulnerabilities":[{"id":"CVE-2026-59871","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59871","cwe":"CWE-704","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59871","date":"2026-10-10","epss":0.00644,"percentile":0.49355}],"urls":["https://github.com/isaacs/node-tar/commit/e02a4e9e013c4be95302e2eb2047a942b883c27b","https://github.com/isaacs/node-tar/releases/tag/v7.5.18","https://github.com/isaacs/node-tar/security/advisories/GHSA-w8wr-v893-vjvp"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-59871","description":"node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, node-tar coerces all-digit PAX path and linkpath values in src/pax.ts to JavaScript numbers, causing downstream path handling such as normalizeWindowsPath(entry.path).split('/') to throw an uncaught TypeError. This issue is fixed in version 7.5.18."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-4781","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2023-4781","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-4781","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2023-4781","date":"2026-10-10","epss":0.00613,"percentile":0.4781}],"risk":0.33102000000000004,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-4781","description":"Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873."},"relatedVulnerabilities":[{"id":"CVE-2023-4781","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-4781","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2023-4781","date":"2026-10-10","epss":0.00613,"percentile":0.4781}],"urls":["http://seclists.org/fulldisclosure/2023/Oct/24","https://github.com/vim/vim/commit/f6d28fe2c95c678cc3202cc5dc825a3fcc709e93","https://huntr.dev/bounties/c867eb0a-aa8b-4946-a621-510350673883","https://lists.debian.org/debian-lts-announce/2023/09/msg00035.html","https://support.apple.com/kb/HT213984","https://lists.debian.org/debian-lts-announce/2025/03/msg00023.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-4781","description":"Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-3928","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2021-3928","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.3,"impactScore":5.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-3928","cwe":"CWE-457","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2021-3928","cwe":"CWE-908","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-3928","date":"2026-10-10","epss":0.00635,"percentile":0.48931}],"risk":0.327025,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-3928","description":"A flaw was found in vim. A possible stack-based buffer overflow could allow an attacker to input a specially crafted file leading to a crash or code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability."},"relatedVulnerabilities":[{"id":"CVE-2021-3928","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":4.6,"impactScore":6.5,"exploitabilityScore":4},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.3,"impactScore":5.5,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-3928","cwe":"CWE-457","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2021-3928","cwe":"CWE-908","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-3928","date":"2026-10-10","epss":0.00635,"percentile":0.48931}],"urls":["http://www.openwall.com/lists/oss-security/2022/01/15/1","https://github.com/vim/vim/commit/15d9890eee53afc61eb0a03b878a19cb5672f732","https://huntr.dev/bounties/29c3ebd2-d601-481c-bf96-76975369d0cd","https://lists.debian.org/debian-lts-announce/2022/03/msg00018.html","https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BCQWPEY2AEYBELCMJYHYWYCD3PZVD2H7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNXY7T5OORA7UJIMGSJBGHFMU6UZWS6P/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PGW56Z6IN4UVM3E5RXXF4G7LGGTRBI5C/","https://security.gentoo.org/glsa/202208-32"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-3928","description":"vim is vulnerable to Use of Uninitialized Variable"}]},{"artifact":{"id":"987c8daac6c0f9f4","cpes":["cpe:2.3:a:libsolv:libsolv:0.7.24-6.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libsolv:0.7.24-6.el9_8:*:*:*:*:*:*:*"],"name":"libsolv","purl":"pkg:rpm/redhat/libsolv@0.7.24-6.el9_8?arch=x86_64&distro=rhel-9.8&upstream=libsolv-0.7.24-6.el9_8.src.rpm","type":"rpm","version":"0.7.24-6.el9_8","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-9149","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"libsolv","version":"0:0.7.24-6.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-9149","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-9149","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-9149","date":"2026-10-10","epss":0.00568,"percentile":0.45433}],"risk":0.3266,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-9149","description":"A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes a specially crafted `.solv` file containing negative size values in the `repo_add_solv` function. This leads to an undersized memory allocation and a subsequent out-of-bounds write. An attacker could exploit this to cause a denial of service (DoS)."},"relatedVulnerabilities":[{"id":"CVE-2026-9149","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-9149","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-9149","date":"2026-10-10","epss":0.00568,"percentile":0.45433}],"urls":["https://access.redhat.com/errata/RHSA-2026:21333","https://access.redhat.com/errata/RHSA-2026:28236","https://access.redhat.com/errata/RHSA-2026:48818","https://access.redhat.com/security/cve/CVE-2026-9149","https://bugzilla.redhat.com/show_bug.cgi?id=2460380","https://github.com/openSUSE/libsolv/pull/617"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-9149","description":"A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes a specially crafted `.solv` file containing negative size values in the `repo_add_solv` function. This leads to an undersized memory allocation and a subsequent out-of-bounds write. An attacker could exploit this to cause a denial of service (DoS)."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-4738","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2023-4738","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-4738","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2023-4738","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4738","date":"2026-10-10","epss":0.00601,"percentile":0.4722}],"risk":0.32454,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-4738","description":"Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848."},"relatedVulnerabilities":[{"id":"CVE-2023-4738","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-4738","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2023-4738","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4738","date":"2026-10-10","epss":0.00601,"percentile":0.4722}],"urls":["http://seclists.org/fulldisclosure/2023/Oct/24","https://github.com/vim/vim/commit/ced2c7394aafdc90fb7845e09b3a3fee23d48cb1","https://huntr.dev/bounties/9fc7dced-a7bb-4479-9718-f956df20f612","https://support.apple.com/kb/HT213984","https://lists.debian.org/debian-lts-announce/2025/03/msg00023.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-4738","description":"Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848."}]},{"artifact":{"id":"9eebaea2eda844dd","cpes":["cpe:2.3:a:curl-minimal:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl-minimal:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl_minimal:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl_minimal:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*"],"name":"curl-minimal","purl":"pkg:rpm/redhat/curl-minimal@7.76.1-40.el9_8.7?arch=x86_64&distro=rhel-9.8&upstream=curl-7.76.1-40.el9_8.7.src.rpm","type":"rpm","version":"7.76.1-40.el9_8.7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.76.1-40.el9_8.7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-14524","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"curl","version":"7.76.1-40.el9_8.7"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-14524","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-14524","cwe":"CWE-522","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2025-14524","cwe":"CWE-601","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-14524","date":"2026-10-10","epss":0.0068,"percentile":0.51012}],"risk":0.32299999999999995,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-14524","description":"A flaw was found in curl. When an OAuth2 (Open Authorization) bearer token is used for an HTTP(S) transfer, and that transfer performs a cross-protocol redirect to a different scheme like IMAP, LDAP, POP3, or SMTP, curl might incorrectly pass the bearer token to the new target host. This could lead to information disclosure, where sensitive authentication tokens are exposed to unintended recipients."},"relatedVulnerabilities":[{"id":"CVE-2025-14524","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-14524","cwe":"CWE-522","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2025-14524","cwe":"CWE-601","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-14524","date":"2026-10-10","epss":0.0068,"percentile":0.51012}],"urls":["https://curl.se/docs/CVE-2025-14524.html","https://curl.se/docs/CVE-2025-14524.json","https://hackerone.com/reports/3459417","http://www.openwall.com/lists/oss-security/2026/01/07/4"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-14524","description":"When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer\nperforms a cross-protocol redirect to a second URL that uses an IMAP, LDAP,\nPOP3 or SMTP scheme, curl might wrongly pass on the bearer token to the new\ntarget host."}]},{"artifact":{"id":"b685606a6baf0f79","cpes":["cpe:2.3:a:libcurl-minimal:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl-minimal:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl_minimal:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl_minimal:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*"],"name":"libcurl-minimal","purl":"pkg:rpm/redhat/libcurl-minimal@7.76.1-40.el9_8.7?arch=x86_64&distro=rhel-9.8&upstream=curl-7.76.1-40.el9_8.7.src.rpm","type":"rpm","version":"7.76.1-40.el9_8.7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.76.1-40.el9_8.7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-14524","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"curl","version":"7.76.1-40.el9_8.7"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-14524","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-14524","cwe":"CWE-522","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2025-14524","cwe":"CWE-601","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-14524","date":"2026-10-10","epss":0.0068,"percentile":0.51012}],"risk":0.32299999999999995,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-14524","description":"A flaw was found in curl. When an OAuth2 (Open Authorization) bearer token is used for an HTTP(S) transfer, and that transfer performs a cross-protocol redirect to a different scheme like IMAP, LDAP, POP3, or SMTP, curl might incorrectly pass the bearer token to the new target host. This could lead to information disclosure, where sensitive authentication tokens are exposed to unintended recipients."},"relatedVulnerabilities":[{"id":"CVE-2025-14524","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-14524","cwe":"CWE-522","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2025-14524","cwe":"CWE-601","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-14524","date":"2026-10-10","epss":0.0068,"percentile":0.51012}],"urls":["https://curl.se/docs/CVE-2025-14524.html","https://curl.se/docs/CVE-2025-14524.json","https://hackerone.com/reports/3459417","http://www.openwall.com/lists/oss-security/2026/01/07/4"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-14524","description":"When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer\nperforms a cross-protocol redirect to a second URL that uses an IMAP, LDAP,\nPOP3 or SMTP scheme, curl might wrongly pass on the bearer token to the new\ntarget host."}]},{"artifact":{"id":"e1b413eca8446714","cpes":["cpe:2.3:a:libarchive:libarchive:3.5.3-11.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libarchive:3.5.3-11.el9_8:*:*:*:*:*:*:*"],"name":"libarchive","purl":"pkg:rpm/redhat/libarchive@3.5.3-11.el9_8?arch=x86_64&distro=rhel-9.8&upstream=libarchive-3.5.3-11.el9_8.src.rpm","type":"rpm","version":"3.5.3-11.el9_8","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-4426","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"libarchive","version":"0:3.5.3-11.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-4426","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4426","cwe":"CWE-1335","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-4426","date":"2026-10-10","epss":0.0056,"percentile":0.44971}],"risk":0.32199999999999995,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-4426","description":"A flaw was found in libarchive. An Undefined Behavior vulnerability exists in the zisofs decompression logic, caused by improper validation of a field (`pz_log2_bs`) read from ISO9660 Rock Ridge extensions. A remote attacker can exploit this by supplying a specially crafted ISO file. This can lead to incorrect memory allocation and potential application crashes, resulting in a denial-of-service (DoS) condition."},"relatedVulnerabilities":[{"id":"CVE-2026-4426","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4426","cwe":"CWE-1335","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-4426","date":"2026-10-10","epss":0.0056,"percentile":0.44971}],"urls":["https://access.redhat.com/errata/RHSA-2026:8944","https://access.redhat.com/security/cve/CVE-2026-4426","https://bugzilla.redhat.com/show_bug.cgi?id=2449010","https://github.com/libarchive/libarchive/pull/2897"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-4426","description":"A flaw was found in libarchive. An Undefined Behavior vulnerability exists in the zisofs decompression logic, caused by improper validation of a field (`pz_log2_bs`) read from ISO9660 Rock Ridge extensions. A remote attacker can exploit this by supplying a specially crafted ISO file. This can lead to incorrect memory allocation and potential application crashes, resulting in a denial-of-service (DoS) condition."}]},{"artifact":{"id":"8cf05c8343d9a4a8","cpes":["cpe:2.3:a:libxml2:libxml2:2.9.13-14.el9_8.5:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libxml2:2.9.13-14.el9_8.5:*:*:*:*:*:*:*"],"name":"libxml2","purl":"pkg:rpm/redhat/libxml2@2.9.13-14.el9_8.5?arch=x86_64&distro=rhel-9.8&upstream=libxml2-2.9.13-14.el9_8.5.src.rpm","type":"rpm","version":"2.9.13-14.el9_8.5","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-27113","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"libxml2","version":"0:2.9.13-14.el9_8.5"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-27113","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-27113","cwe":"CWE-476","type":"Secondary","source":"cve@mitre.org"},{"cve":"CVE-2025-27113","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-27113","date":"2026-10-10","epss":0.01053,"percentile":0.63377}],"risk":0.321165,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-27113","description":"A flaw was found in libxml2. This vulnerability allows a NULL pointer dereference, leading to a potential crash or denial of service via a crafted XML pattern."},"relatedVulnerabilities":[{"id":"CVE-2025-27113","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.9,"impactScore":1.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-27113","cwe":"CWE-476","type":"Secondary","source":"cve@mitre.org"},{"cve":"CVE-2025-27113","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-27113","date":"2026-10-10","epss":0.01053,"percentile":0.63377}],"urls":["https://gitlab.gnome.org/GNOME/libxml2/-/issues/861","http://seclists.org/fulldisclosure/2025/Apr/10","http://seclists.org/fulldisclosure/2025/Apr/11","http://seclists.org/fulldisclosure/2025/Apr/12","http://seclists.org/fulldisclosure/2025/Apr/13","http://seclists.org/fulldisclosure/2025/Apr/4","http://seclists.org/fulldisclosure/2025/Apr/5","http://seclists.org/fulldisclosure/2025/Apr/8","http://seclists.org/fulldisclosure/2025/Apr/9","https://lists.debian.org/debian-lts-announce/2025/02/msg00028.html","https://security.netapp.com/advisory/ntap-20250306-0004/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-27113","description":"libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-22667","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2024-22667","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.4,"impactScore":5.9,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-22667","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-22667","cwe":"CWE-787","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-22667","date":"2026-10-10","epss":0.00563,"percentile":0.45146}],"risk":0.32091000000000003,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2024-22667","description":"A stack-based buffer overflow flaw was found in Vim. The did_set_langmap function in map.c calls sprintf to write to the error buffer that is passed down to the option callback functions. That buffer can be overflown, possibly leading to memory corruption and escalation of privileges."},"relatedVulnerabilities":[{"id":"CVE-2024-22667","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-22667","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-22667","cwe":"CWE-787","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-22667","date":"2026-10-10","epss":0.00563,"percentile":0.45146}],"urls":["https://gist.githubusercontent.com/henices/2467e7f22dcc2aa97a2453e197b55a0c/raw/7b54bccc9a129c604fb139266f4497ab7aaa94c7/gistfile1.txt","https://github.com/vim/vim/commit/b39b240c386a5a29241415541f1c99e2e6b8ce47","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UI44Y4LJLG34D4HNB6NTPLUPZREHAEL7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UIQLVUSYHDN3644K6EFDI7PRZOTIKXM3/","https://security.netapp.com/advisory/ntap-20240223-0008/","https://lists.debian.org/debian-lts-announce/2025/03/msg00023.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UI44Y4LJLG34D4HNB6NTPLUPZREHAEL7/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UIQLVUSYHDN3644K6EFDI7PRZOTIKXM3/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-22667","description":"Vim before 9.0.2142 has a stack-based buffer overflow because did_set_langmap in map.c calls sprintf to write to the error buffer that is passed down to the option callback functions."}]},{"artifact":{"id":"406b3abfffe1d292","cpes":["cpe:2.3:a:git-lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git-lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*"],"name":"git-lfs","purl":"pkg:rpm/redhat/git-lfs@3.7.1-4.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=git-lfs-3.7.1-4.el9_8.3.src.rpm","type":"rpm","version":"3.7.1-4.el9_8.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-47906","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"git-lfs","version":"0:3.7.1-4.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-47906","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-47906","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-47906","date":"2026-10-10","epss":0.0055,"percentile":0.44356}],"risk":0.31625,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-47906","description":"A path handling flaw has been discovered in the os/exec go package. If the PATH environment variable contains paths which are executables (rather than just directories), passing certain strings to LookPath (\"\", \".\", and \"..\"), can result in the binaries listed in the PATH being unexpectedly returned."},"relatedVulnerabilities":[{"id":"CVE-2025-47906","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-47906","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-47906","date":"2026-10-10","epss":0.0055,"percentile":0.44356}],"urls":["https://go.dev/cl/691775","https://go.dev/issue/74466","https://groups.google.com/g/golang-announce/c/x5MKroML2yM","https://pkg.go.dev/vuln/GO-2025-3956","http://www.openwall.com/lists/oss-security/2025/08/06/1"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-47906","description":"If the PATH environment variable contains paths which are executables (rather than just directories), passing certain strings to LookPath (\"\", \".\", and \"..\"), can result in the binaries listed in the PATH being unexpectedly returned."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-2522","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-2522","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2522","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2022-2522","date":"2026-10-10","epss":0.00581,"percentile":0.46111}],"risk":0.31374,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-2522","description":"A heap buffer overflow vulnerability was found in vim's ins_compl_infercase_gettext() function of the src/insexpand.c file. This flaw occurs when vim tries to access uninitialized memory when completing a long line. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap-based buffer overflow that causes an application to crash, possibly executing code and corrupting memory."},"relatedVulnerabilities":[{"id":"CVE-2022-2522","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2522","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2022-2522","date":"2026-10-10","epss":0.00581,"percentile":0.46111}],"urls":["https://github.com/vim/vim/commit/5fa9f23a63651a8abdb074b4fc2ec9b1adc6b089","https://github.com/vim/vim/commit/b9e717367c395490149495cf375911b5d9de889e","https://huntr.dev/bounties/3a2d83af-9542-4d93-8784-98b115135a22","https://huntr.dev/bounties/3a2d83af-9542-4d93-8784-98b115135a22/","https://security.gentoo.org/glsa/202305-16"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-2522","description":"Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0061."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-4734","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2023-4734","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-4734","cwe":"CWE-190","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2023-4734","date":"2026-10-10","epss":0.00579,"percentile":0.46026}],"risk":0.31266000000000005,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-4734","description":"Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846."},"relatedVulnerabilities":[{"id":"CVE-2023-4734","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-4734","cwe":"CWE-190","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2023-4734","date":"2026-10-10","epss":0.00579,"percentile":0.46026}],"urls":["http://seclists.org/fulldisclosure/2023/Oct/24","https://github.com/vim/vim/commit/4c6fe2e2ea62469642ed1d80b16d39e616b25cf5","https://huntr.dev/bounties/688e4382-d2b6-439a-a54e-484780f82217","https://support.apple.com/kb/HT213984"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-4734","description":"Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-2819","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-2819","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2819","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2022-2819","date":"2026-10-10","epss":0.00576,"percentile":0.45842}],"risk":0.31104000000000004,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-2819","description":"A flaw was found in vim. The vulnerability occurs due to illegal memory access and leads to a heap buffer overflow vulnerability. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution."},"relatedVulnerabilities":[{"id":"CVE-2022-2819","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2819","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2022-2819","date":"2026-10-10","epss":0.00576,"percentile":0.45842}],"urls":["https://github.com/vim/vim/commit/d1d8f6bacb489036d0fd479c9dd3c0102c988889","https://huntr.dev/bounties/0a9bd71e-66b8-4eb1-9566-7dfd9b097e59","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHFAR6OY6G77M6GXCJT75A4KITLNR6GO/","https://security.gentoo.org/glsa/202305-16"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-2819","description":"Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0211."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-4735","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2023-4735","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.3,"impactScore":5.9,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-4735","cwe":"CWE-787","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2023-4735","date":"2026-10-10","epss":0.00601,"percentile":0.47208}],"risk":0.309515,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-4735","description":"Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847."},"relatedVulnerabilities":[{"id":"CVE-2023-4735","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":4.8,"impactScore":3.4,"exploitabilityScore":1.4},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-4735","cwe":"CWE-787","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2023-4735","date":"2026-10-10","epss":0.00601,"percentile":0.47208}],"urls":["http://seclists.org/fulldisclosure/2023/Oct/24","https://github.com/vim/vim/commit/889f6af37164775192e33b233a90e86fd3df0f57","https://huntr.dev/bounties/fc83bde3-f621-42bd-aecb-8c1ae44cba51","https://support.apple.com/kb/HT213984"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-4735","description":"Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847."}]},{"artifact":{"id":"d4d165231b963ffc","cpes":["cpe:2.3:a:redhat:pcre2:10.40-6.el9:*:*:*:*:*:*:*","cpe:2.3:a:pcre2:pcre2:10.40-6.el9:*:*:*:*:*:*:*"],"name":"pcre2","purl":"pkg:rpm/redhat/pcre2@10.40-6.el9?arch=x86_64&distro=rhel-9.8&upstream=pcre2-10.40-6.el9.src.rpm","type":"rpm","version":"10.40-6.el9","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-86145","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"pcre2","version":"0:10.40-6.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-86145","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86145","cwe":"CWE-424","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-86145","date":"2026-10-10","epss":0.00394,"percentile":0.31513}],"risk":0.30928999999999995,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-86145","description":"A flaw was found in PCRE2. An out-of-bounds write vulnerability exists in the `pcre2_dfa_match` function due to improper size checking when reusing cached workspace blocks. A remote attacker could exploit this by providing a specially crafted regular expression or a recursive pattern in conjunction with a small heap limit. This could lead to data corruption or potentially arbitrary code execution, compromising the integrity and availability of the system."},"relatedVulnerabilities":[{"id":"CVE-2026-86145","cvss":[{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86145","cwe":"CWE-424","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-86145","date":"2026-10-10","epss":0.00394,"percentile":0.31513}],"urls":["https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48","https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-3r4p-g7gg-ppmf","http://www.openwall.com/lists/oss-security/2026/09/05/3"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-86145","description":"PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check (even though a newly allocated block, for the same purpose, does have a size check). This outcome requires an attacker-controlled regular expression, or a recursive pattern in conjunction with a small heap limit (this can be set through the API)."}]},{"artifact":{"id":"5717d3536e0a895a","cpes":["cpe:2.3:a:pcre2-syntax:pcre2-syntax:10.40-6.el9:*:*:*:*:*:*:*","cpe:2.3:a:pcre2-syntax:pcre2_syntax:10.40-6.el9:*:*:*:*:*:*:*","cpe:2.3:a:pcre2_syntax:pcre2-syntax:10.40-6.el9:*:*:*:*:*:*:*","cpe:2.3:a:pcre2_syntax:pcre2_syntax:10.40-6.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:pcre2-syntax:10.40-6.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:pcre2_syntax:10.40-6.el9:*:*:*:*:*:*:*","cpe:2.3:a:pcre2:pcre2-syntax:10.40-6.el9:*:*:*:*:*:*:*","cpe:2.3:a:pcre2:pcre2_syntax:10.40-6.el9:*:*:*:*:*:*:*"],"name":"pcre2-syntax","purl":"pkg:rpm/redhat/pcre2-syntax@10.40-6.el9?arch=noarch&distro=rhel-9.8&upstream=pcre2-10.40-6.el9.src.rpm","type":"rpm","version":"10.40-6.el9","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"pcre2","version":"10.40-6.el9"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-86145","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"pcre2","version":"10.40-6.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-86145","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86145","cwe":"CWE-424","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-86145","date":"2026-10-10","epss":0.00394,"percentile":0.31513}],"risk":0.30928999999999995,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-86145","description":"A flaw was found in PCRE2. An out-of-bounds write vulnerability exists in the `pcre2_dfa_match` function due to improper size checking when reusing cached workspace blocks. A remote attacker could exploit this by providing a specially crafted regular expression or a recursive pattern in conjunction with a small heap limit. This could lead to data corruption or potentially arbitrary code execution, compromising the integrity and availability of the system."},"relatedVulnerabilities":[{"id":"CVE-2026-86145","cvss":[{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86145","cwe":"CWE-424","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-86145","date":"2026-10-10","epss":0.00394,"percentile":0.31513}],"urls":["https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48","https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-3r4p-g7gg-ppmf","http://www.openwall.com/lists/oss-security/2026/09/05/3"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-86145","description":"PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check (even though a newly allocated block, for the same purpose, does have a size check). This outcome requires an attacker-controlled regular expression, or a recursive pattern in conjunction with a small heap limit (this can be set through the API)."}]},{"artifact":{"id":"9eebaea2eda844dd","cpes":["cpe:2.3:a:curl-minimal:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl-minimal:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl_minimal:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl_minimal:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*"],"name":"curl-minimal","purl":"pkg:rpm/redhat/curl-minimal@7.76.1-40.el9_8.7?arch=x86_64&distro=rhel-9.8&upstream=curl-7.76.1-40.el9_8.7.src.rpm","type":"rpm","version":"7.76.1-40.el9_8.7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.76.1-40.el9_8.7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-15079","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"curl","version":"7.76.1-40.el9_8.7"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-15079","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-15079","cwe":"CWE-297","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2025-15079","cwe":"CWE-297","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-15079","date":"2026-10-10","epss":0.0055,"percentile":0.44345}],"risk":0.30524999999999997,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-15079","description":"A flaw was found in curl. When performing SSH-based transfers using SCP or SFTP, libcurl could mistakenly connect to hosts not listed in the user-specified knownhosts file. This occurs if the host is present in the libssh global knownhosts file, effectively bypassing the intended host verification. This could allow a remote attacker to connect to an untrusted host, potentially leading to information disclosure or man-in-the-middle attacks."},"relatedVulnerabilities":[{"id":"CVE-2025-15079","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-15079","cwe":"CWE-297","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2025-15079","cwe":"CWE-297","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-15079","date":"2026-10-10","epss":0.0055,"percentile":0.44345}],"urls":["https://curl.se/docs/CVE-2025-15079.html","https://curl.se/docs/CVE-2025-15079.json","https://hackerone.com/reports/3477116","http://www.openwall.com/lists/oss-security/2026/01/07/6"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-15079","description":"When doing SSH-based transfers using either SCP or SFTP, and setting the\nknown_hosts file, libcurl could still mistakenly accept connecting to hosts\n*not present* in the specified file if they were added as recognized in the\nlibssh *global* known_hosts file."}]},{"artifact":{"id":"b685606a6baf0f79","cpes":["cpe:2.3:a:libcurl-minimal:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl-minimal:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl_minimal:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl_minimal:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*"],"name":"libcurl-minimal","purl":"pkg:rpm/redhat/libcurl-minimal@7.76.1-40.el9_8.7?arch=x86_64&distro=rhel-9.8&upstream=curl-7.76.1-40.el9_8.7.src.rpm","type":"rpm","version":"7.76.1-40.el9_8.7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.76.1-40.el9_8.7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-15079","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"curl","version":"7.76.1-40.el9_8.7"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-15079","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-15079","cwe":"CWE-297","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2025-15079","cwe":"CWE-297","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-15079","date":"2026-10-10","epss":0.0055,"percentile":0.44345}],"risk":0.30524999999999997,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-15079","description":"A flaw was found in curl. When performing SSH-based transfers using SCP or SFTP, libcurl could mistakenly connect to hosts not listed in the user-specified knownhosts file. This occurs if the host is present in the libssh global knownhosts file, effectively bypassing the intended host verification. This could allow a remote attacker to connect to an untrusted host, potentially leading to information disclosure or man-in-the-middle attacks."},"relatedVulnerabilities":[{"id":"CVE-2025-15079","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-15079","cwe":"CWE-297","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2025-15079","cwe":"CWE-297","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-15079","date":"2026-10-10","epss":0.0055,"percentile":0.44345}],"urls":["https://curl.se/docs/CVE-2025-15079.html","https://curl.se/docs/CVE-2025-15079.json","https://hackerone.com/reports/3477116","http://www.openwall.com/lists/oss-security/2026/01/07/6"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-15079","description":"When doing SSH-based transfers using either SCP or SFTP, and setting the\nknown_hosts file, libcurl could still mistakenly accept connecting to hosts\n*not present* in the specified file if they were added as recognized in the\nlibssh *global* known_hosts file."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-4751","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2023-4751","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-4751","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2023-4751","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4751","date":"2026-10-10","epss":0.00564,"percentile":0.45239}],"risk":0.30456000000000005,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-4751","description":"Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331."},"relatedVulnerabilities":[{"id":"CVE-2023-4751","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-4751","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2023-4751","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4751","date":"2026-10-10","epss":0.00564,"percentile":0.45239}],"urls":["http://seclists.org/fulldisclosure/2023/Oct/24","https://github.com/vim/vim/commit/e1121b139480f53d1b06f84f3e4574048108fa0b","https://huntr.dev/bounties/db7be8d6-6cb7-4ae5-9c4e-805423afa378","https://support.apple.com/kb/HT213984"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-4751","description":"Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331."}]},{"artifact":{"id":"9eebaea2eda844dd","cpes":["cpe:2.3:a:curl-minimal:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl-minimal:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl_minimal:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl_minimal:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*"],"name":"curl-minimal","purl":"pkg:rpm/redhat/curl-minimal@7.76.1-40.el9_8.7?arch=x86_64&distro=rhel-9.8&upstream=curl-7.76.1-40.el9_8.7.src.rpm","type":"rpm","version":"7.76.1-40.el9_8.7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.76.1-40.el9_8.7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-7168","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"curl","version":"7.76.1-40.el9_8.7"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-7168","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-7168","cwe":"CWE-294","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-7168","cwe":"CWE-294","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-7168","date":"2026-10-10","epss":0.00591,"percentile":0.46685}],"risk":0.304365,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-7168","description":"A flaw was found in libcurl. When a user performs a transfer over an HTTP proxy using Digest authentication and then reuses the same handle for a second transfer with a different proxy host, libcurl incorrectly sends the `Proxy-Authorization` header intended for the first proxy to the second proxy. This could lead to the disclosure of sensitive authentication information to an unintended proxy, potentially allowing an attacker to gain unauthorized access or impersonate the user."},"relatedVulnerabilities":[{"id":"CVE-2026-7168","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-7168","cwe":"CWE-294","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-7168","cwe":"CWE-294","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-7168","date":"2026-10-10","epss":0.00591,"percentile":0.46685}],"urls":["https://curl.se/docs/CVE-2026-7168.html","https://curl.se/docs/CVE-2026-7168.json","https://hackerone.com/reports/3697719","http://www.openwall.com/lists/oss-security/2026/04/29/14"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-7168","description":"Successfully using libcurl to do a transfer over a specific HTTP proxy\n(`proxyA`) with **Digest** authentication and then changing the proxy host to\na second one (`proxyB`) for a second transfer, reusing the same handle, makes\nlibcurl wrongly pass on the `Proxy-Authorization:` header field meant for\n`proxyA`, to `proxyB`."}]},{"artifact":{"id":"b685606a6baf0f79","cpes":["cpe:2.3:a:libcurl-minimal:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl-minimal:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl_minimal:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl_minimal:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*"],"name":"libcurl-minimal","purl":"pkg:rpm/redhat/libcurl-minimal@7.76.1-40.el9_8.7?arch=x86_64&distro=rhel-9.8&upstream=curl-7.76.1-40.el9_8.7.src.rpm","type":"rpm","version":"7.76.1-40.el9_8.7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.76.1-40.el9_8.7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-7168","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"curl","version":"7.76.1-40.el9_8.7"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-7168","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-7168","cwe":"CWE-294","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-7168","cwe":"CWE-294","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-7168","date":"2026-10-10","epss":0.00591,"percentile":0.46685}],"risk":0.304365,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-7168","description":"A flaw was found in libcurl. When a user performs a transfer over an HTTP proxy using Digest authentication and then reuses the same handle for a second transfer with a different proxy host, libcurl incorrectly sends the `Proxy-Authorization` header intended for the first proxy to the second proxy. This could lead to the disclosure of sensitive authentication information to an unintended proxy, potentially allowing an attacker to gain unauthorized access or impersonate the user."},"relatedVulnerabilities":[{"id":"CVE-2026-7168","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-7168","cwe":"CWE-294","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-7168","cwe":"CWE-294","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-7168","date":"2026-10-10","epss":0.00591,"percentile":0.46685}],"urls":["https://curl.se/docs/CVE-2026-7168.html","https://curl.se/docs/CVE-2026-7168.json","https://hackerone.com/reports/3697719","http://www.openwall.com/lists/oss-security/2026/04/29/14"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-7168","description":"Successfully using libcurl to do a transfer over a specific HTTP proxy\n(`proxyA`) with **Digest** authentication and then changing the proxy host to\na second one (`proxyB`) for a second transfer, reusing the same handle, makes\nlibcurl wrongly pass on the `Proxy-Authorization:` header field meant for\n`proxyA`, to `proxyB`."}]},{"artifact":{"id":"751040f2dddec633","cpes":["cpe:2.3:a:golang:go:1.26.7:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.26.7","type":"go-module","version":"go1.26.7","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.26.7"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.26.9"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6608","versionConstraint":"<1.26.9||>=1.27.0-0,<1.27.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.26.7"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6608","fix":{"state":"fixed","versions":["1.26.9","1.27.2"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"},{"date":"2026-10-08","kind":"release","version":"1.27.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94440","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94440","date":"2026-10-10","epss":0.00404,"percentile":0.32601}],"risk":0.303,"urls":["https://go.dev/issue/81741","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847307","description":"Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes."},"relatedVulnerabilities":[{"id":"CVE-2026-94440","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94440","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94440","date":"2026-10-10","epss":0.00404,"percentile":0.32601}],"urls":["https://go.dev/cl/847307","https://go.dev/issue/81741","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6608"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-94440","description":"Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-3296","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-3296","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-3296","cwe":"CWE-121","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-3296","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-3296","date":"2026-10-10","epss":0.00561,"percentile":0.45028}],"risk":0.30294000000000004,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-3296","description":"A stack-based buffer overflow vulnerability was found in vim's ex_finally() function of the src/ex_eval.c file. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a bug that causes an application to crash, possibly executing code and corrupting memory."},"relatedVulnerabilities":[{"id":"CVE-2022-3296","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-3296","cwe":"CWE-121","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-3296","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-3296","date":"2026-10-10","epss":0.00561,"percentile":0.45028}],"urls":["https://github.com/vim/vim/commit/96b9bf8f74af8abf1e30054f996708db7dc285be","https://huntr.dev/bounties/958866b8-526a-4979-9471-39392e0c9077","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4QI7AETXBHPC7SGA77Q7O5IEGULWYET7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTBVD4J2SKVSWK4VBN5JP5OEVK6GDS3N/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LSSEWQLK55MCNT4Z2IIJEJYEI5HLCODI/","https://security.gentoo.org/glsa/202305-16"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-3296","description":"Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0577."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-3134","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-3134","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-3134","cwe":"CWE-416","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-3134","cwe":"CWE-416","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-3134","date":"2026-10-10","epss":0.00561,"percentile":0.44985}],"risk":0.30294000000000004,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-3134","description":"A heap use-after-free vulnerability was found in vim's do_tag() function of the src/tag.c file. The issue triggers when the 'tagfunc' closes the window. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap use-after-free that causes an application to crash, possibly executing code and corrupting memory."},"relatedVulnerabilities":[{"id":"CVE-2022-3134","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-3134","cwe":"CWE-416","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-3134","cwe":"CWE-416","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-3134","date":"2026-10-10","epss":0.00561,"percentile":0.44985}],"urls":["https://github.com/vim/vim/commit/ccfde4d028e891a41e3548323c3d47b06fb0b83e","https://huntr.dev/bounties/6ec79e49-c7ab-4cd6-a517-e7934c2eb9dc","https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html","https://security.gentoo.org/glsa/202305-16","https://lists.debian.org/debian-lts-announce/2025/03/msg00023.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-3134","description":"Use After Free in GitHub repository vim/vim prior to 9.0.0389."}]},{"artifact":{"id":"ea0f2a7e0eb5d962","cpes":["cpe:2.3:a:python3:python3:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3:3.9.25-7.el9_8.3:*:*:*:*:*:*:*"],"name":"python3","purl":"pkg:rpm/redhat/python3@3.9.25-7.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=python3.9-3.9.25-7.el9_8.3.src.rpm","type":"rpm","version":"3.9.25-7.el9_8.3","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python3.9","version":"3.9.25-7.el9_8.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19553","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"python3.9","version":"3.9.25-7.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-19553","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19553","cwe":"CWE-297","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-19553","date":"2026-10-10","epss":0.00401,"percentile":0.32338}],"risk":0.298745,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-19553","description":"A flaw was found in Python. When establishing secure connections using the SSLContext.wrap_bio() function with hostname checking enabled, the module fails to validate that a target server hostname is supplied. Because of this missing check, certificate hostname verification is silently skipped rather than triggering an error. A remote man-in-the-middle attacker could exploit this defect to spoof trusted endpoints and intercept or tamper with sensitive encrypted traffic."},"relatedVulnerabilities":[{"id":"CVE-2026-19553","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19553","cwe":"CWE-297","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-19553","date":"2026-10-10","epss":0.00401,"percentile":0.32338}],"urls":["https://github.com/python/cpython/commit/1697ea386c707142555d98a1263176bbbc014a96","https://github.com/python/cpython/commit/5867d4e4ae6d1062352baf6b497a4026e8578ccf","https://github.com/python/cpython/commit/641390146a16a38e6701923f4ee4f1940ae77082","https://github.com/python/cpython/commit/869069d52ce0efab2f8c38197e92cdaaa312f1ed","https://github.com/python/cpython/commit/966bf426d0b6c31c1b0a255ff14a17143a466ced","https://github.com/python/cpython/commit/bdebbf9b366ec91e9cd9daa0b3510c9e84b60b80","https://github.com/python/cpython/commit/f4e43ba525187282f2011da0e6ffc0d2b08d8062","https://github.com/python/cpython/issues/156793","https://github.com/python/cpython/pull/158503","https://mail.python.org/archives/list/security-announce@python.org/thread/QNZRG3YOAMTHDCMVCICXGY6YEFPY2VDL/","http://www.openwall.com/lists/oss-security/2026/09/30/16"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19553","description":"ssl.SSLContext.wrap_bio() didn't require the server_hostname argument\nto not be None if ssl.SSLContext.check_hostname was set. Due to a\nmissing parameter check in SSLObject, if the server_hostname argument\nisn't supplied then hostname verification would be silently skipped.\n\n\nThis defect could lead to programs where certificate hostname verification\n*appeared* to be succeeding with SSLContext.check_hostname = True and no\nValueError being raised due to misconfiguration.\n\n\nIf the program passes a server_hostname value that isn't an empty string\nor None to any of these APIs then certificate hostname verification\nproceeds as expected and the program is not affected by this vulnerability.\n\n\nMitigating this vulnerability doesn't require updating Python or applying\nthe patch. To mitigate, pass a valid non-None and non-empty\nserver_hostname value to SSLContext.wrap_bio(),\nasyncio.create_connection(), or asyncio.loop.start_tls() and\ncertificate hostname verification will proceed as expected. Upgrading to\nthe latest version of Python or applying the patch only changes the\nbehavior from silently skipping hostname verification to raising a\nValueError, similar to SSLContext.wrap_socket(), when server_hostname\nisn't supplied."}]},{"artifact":{"id":"0ed3c72bb9ee9391","cpes":["cpe:2.3:a:python3-libs:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3-libs:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3_libs:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3_libs:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*"],"name":"python3-libs","purl":"pkg:rpm/redhat/python3-libs@3.9.25-7.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=python3.9-3.9.25-7.el9_8.3.src.rpm","type":"rpm","version":"3.9.25-7.el9_8.3","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python3.9","version":"3.9.25-7.el9_8.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19553","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"python3.9","version":"3.9.25-7.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-19553","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19553","cwe":"CWE-297","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-19553","date":"2026-10-10","epss":0.00401,"percentile":0.32338}],"risk":0.298745,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-19553","description":"A flaw was found in Python. When establishing secure connections using the SSLContext.wrap_bio() function with hostname checking enabled, the module fails to validate that a target server hostname is supplied. Because of this missing check, certificate hostname verification is silently skipped rather than triggering an error. A remote man-in-the-middle attacker could exploit this defect to spoof trusted endpoints and intercept or tamper with sensitive encrypted traffic."},"relatedVulnerabilities":[{"id":"CVE-2026-19553","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19553","cwe":"CWE-297","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-19553","date":"2026-10-10","epss":0.00401,"percentile":0.32338}],"urls":["https://github.com/python/cpython/commit/1697ea386c707142555d98a1263176bbbc014a96","https://github.com/python/cpython/commit/5867d4e4ae6d1062352baf6b497a4026e8578ccf","https://github.com/python/cpython/commit/641390146a16a38e6701923f4ee4f1940ae77082","https://github.com/python/cpython/commit/869069d52ce0efab2f8c38197e92cdaaa312f1ed","https://github.com/python/cpython/commit/966bf426d0b6c31c1b0a255ff14a17143a466ced","https://github.com/python/cpython/commit/bdebbf9b366ec91e9cd9daa0b3510c9e84b60b80","https://github.com/python/cpython/commit/f4e43ba525187282f2011da0e6ffc0d2b08d8062","https://github.com/python/cpython/issues/156793","https://github.com/python/cpython/pull/158503","https://mail.python.org/archives/list/security-announce@python.org/thread/QNZRG3YOAMTHDCMVCICXGY6YEFPY2VDL/","http://www.openwall.com/lists/oss-security/2026/09/30/16"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19553","description":"ssl.SSLContext.wrap_bio() didn't require the server_hostname argument\nto not be None if ssl.SSLContext.check_hostname was set. Due to a\nmissing parameter check in SSLObject, if the server_hostname argument\nisn't supplied then hostname verification would be silently skipped.\n\n\nThis defect could lead to programs where certificate hostname verification\n*appeared* to be succeeding with SSLContext.check_hostname = True and no\nValueError being raised due to misconfiguration.\n\n\nIf the program passes a server_hostname value that isn't an empty string\nor None to any of these APIs then certificate hostname verification\nproceeds as expected and the program is not affected by this vulnerability.\n\n\nMitigating this vulnerability doesn't require updating Python or applying\nthe patch. To mitigate, pass a valid non-None and non-empty\nserver_hostname value to SSLContext.wrap_bio(),\nasyncio.create_connection(), or asyncio.loop.start_tls() and\ncertificate hostname verification will proceed as expected. Upgrading to\nthe latest version of Python or applying the patch only changes the\nbehavior from silently skipping hostname verification to raising a\nValueError, similar to SSLContext.wrap_socket(), when server_hostname\nisn't supplied."}]},{"artifact":{"id":"ea0f2a7e0eb5d962","cpes":["cpe:2.3:a:python3:python3:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3:3.9.25-7.el9_8.3:*:*:*:*:*:*:*"],"name":"python3","purl":"pkg:rpm/redhat/python3@3.9.25-7.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=python3.9-3.9.25-7.el9_8.3.src.rpm","type":"rpm","version":"3.9.25-7.el9_8.3","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python3.9","version":"3.9.25-7.el9_8.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-11468","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"python3.9","version":"3.9.25-7.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-11468","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.5,"impactScore":3.6,"exploitabilityScore":1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-11468","cwe":"CWE-93","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-11468","date":"2026-10-10","epss":0.00625,"percentile":0.4842}],"risk":0.296875,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-11468","description":"Missing character filtering has been discovered in Python. When folding a long comment in an email header containing exclusively unfoldable characters, the parenthesis would not be preserved. This could be used for injecting headers into email messages where addresses are user-controlled and not sanitized."},"relatedVulnerabilities":[{"id":"CVE-2025-11468","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-11468","cwe":"CWE-93","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-11468","date":"2026-10-10","epss":0.00625,"percentile":0.4842}],"urls":["https://github.com/python/cpython/commit/003b8315669b9f08b1010a49071f73f15f818094","https://github.com/python/cpython/commit/17d1490aa97bd6b98a42b1a9b324ead84e7fd8a2","https://github.com/python/cpython/commit/61614a5e5056e4f61ced65008d4576f3df34acb6","https://github.com/python/cpython/commit/a76e4cd62dd68e7cbe86e37e6ed988495a646b66","https://github.com/python/cpython/commit/e9970f077240c7c670e8a6fc6662f2b30d3b6ad0","https://github.com/python/cpython/commit/f738386838021c762efea6c9802c82de65e87796","https://github.com/python/cpython/issues/143935","https://github.com/python/cpython/pull/143936","https://mail.python.org/archives/list/security-announce@python.org/thread/FELSEOLBI2QR6YLG6Q7VYF7FWSGQTKLI/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-11468","description":"When folding a long comment in an email header containing exclusively unfoldable characters, the parenthesis would not be preserved. This could be used for injecting headers into email messages where addresses are user-controlled and not sanitized."}]},{"artifact":{"id":"0ed3c72bb9ee9391","cpes":["cpe:2.3:a:python3-libs:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3-libs:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3_libs:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3_libs:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*"],"name":"python3-libs","purl":"pkg:rpm/redhat/python3-libs@3.9.25-7.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=python3.9-3.9.25-7.el9_8.3.src.rpm","type":"rpm","version":"3.9.25-7.el9_8.3","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python3.9","version":"3.9.25-7.el9_8.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-11468","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"python3.9","version":"3.9.25-7.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-11468","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.5,"impactScore":3.6,"exploitabilityScore":1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-11468","cwe":"CWE-93","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-11468","date":"2026-10-10","epss":0.00625,"percentile":0.4842}],"risk":0.296875,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-11468","description":"Missing character filtering has been discovered in Python. When folding a long comment in an email header containing exclusively unfoldable characters, the parenthesis would not be preserved. This could be used for injecting headers into email messages where addresses are user-controlled and not sanitized."},"relatedVulnerabilities":[{"id":"CVE-2025-11468","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-11468","cwe":"CWE-93","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-11468","date":"2026-10-10","epss":0.00625,"percentile":0.4842}],"urls":["https://github.com/python/cpython/commit/003b8315669b9f08b1010a49071f73f15f818094","https://github.com/python/cpython/commit/17d1490aa97bd6b98a42b1a9b324ead84e7fd8a2","https://github.com/python/cpython/commit/61614a5e5056e4f61ced65008d4576f3df34acb6","https://github.com/python/cpython/commit/a76e4cd62dd68e7cbe86e37e6ed988495a646b66","https://github.com/python/cpython/commit/e9970f077240c7c670e8a6fc6662f2b30d3b6ad0","https://github.com/python/cpython/commit/f738386838021c762efea6c9802c82de65e87796","https://github.com/python/cpython/issues/143935","https://github.com/python/cpython/pull/143936","https://mail.python.org/archives/list/security-announce@python.org/thread/FELSEOLBI2QR6YLG6Q7VYF7FWSGQTKLI/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-11468","description":"When folding a long comment in an email header containing exclusively unfoldable characters, the parenthesis would not be preserved. This could be used for injecting headers into email messages where addresses are user-controlled and not sanitized."}]},{"artifact":{"id":"406b3abfffe1d292","cpes":["cpe:2.3:a:git-lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git-lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*"],"name":"git-lfs","purl":"pkg:rpm/redhat/git-lfs@3.7.1-4.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=git-lfs-3.7.1-4.el9_8.3.src.rpm","type":"rpm","version":"3.7.1-4.el9_8.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-78663","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"git-lfs","version":"0:3.7.1-4.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-78663","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78663","cwe":"CWE-675","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78663","date":"2026-10-10","epss":0.00574,"percentile":0.45743}],"risk":0.29561000000000004,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-78663","description":"A flaw was found in Go's HTTP/2 server implementation. A remote attacker can bypass connection-level flow control limits—mechanisms that regulate incoming network data—potentially causing excessive memory consumption and a Denial of Service (DoS). This issue occurs because the server improperly refunds flow control credits twice for the same data: once when a client resets a stream, and again when the application reads the buffered data. Consequently, a malicious client can exceed configured connection buffer limits."},"relatedVulnerabilities":[{"id":"CVE-2026-78663","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78663","cwe":"CWE-675","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78663","date":"2026-10-10","epss":0.00574,"percentile":0.45743}],"urls":["https://go.dev/cl/847187","https://go.dev/cl/847310","https://go.dev/issue/81743","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs","https://pkg.go.dev/vuln/GO-2026-6612"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78663","description":"The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configured connection-level flow control limit (MaxReceiveBufferPerConnection). Total buffered data is still limited by the concurrent stream limit and stream-level flow control."}]},{"artifact":{"id":"406b3abfffe1d292","cpes":["cpe:2.3:a:git-lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git-lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*"],"name":"git-lfs","purl":"pkg:rpm/redhat/git-lfs@3.7.1-4.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=git-lfs-3.7.1-4.el9_8.3.src.rpm","type":"rpm","version":"3.7.1-4.el9_8.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-97031","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"git-lfs","version":"0:3.7.1-4.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-97031","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-97031","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-97031","date":"2026-10-10","epss":0.00394,"percentile":0.31568}],"risk":0.29550000000000004,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-97031","description":"A flaw was found in Go's crypto/tls package. When processing Encrypted Client Hello (ECH) extensions, the server fails to reject multiple outer extension references as required by the protocol specification. A remote attacker can exploit this vulnerability by sending a specially crafted handshake message, triggering memory amplification that leads to process memory exhaustion and a Denial of Service (DoS)."},"relatedVulnerabilities":[{"id":"CVE-2026-97031","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-97031","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-97031","date":"2026-10-10","epss":0.00394,"percentile":0.31568}],"urls":["https://go.dev/cl/847312","https://go.dev/issue/81855","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6607"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-97031","description":"Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references. We now reject these as malformed and curb the memory amplification vector as a result."}]},{"artifact":{"id":"751040f2dddec633","cpes":["cpe:2.3:a:golang:go:1.26.7:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.26.7","type":"go-module","version":"go1.26.7","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.26.7"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.26.9"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6607","versionConstraint":"<1.26.9||>=1.27.0-0,<1.27.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.26.7"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6607","fix":{"state":"fixed","versions":["1.26.9","1.27.2"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"},{"date":"2026-10-08","kind":"release","version":"1.27.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-97031","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-97031","date":"2026-10-10","epss":0.00394,"percentile":0.31568}],"risk":0.29550000000000004,"urls":["https://go.dev/issue/81855","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847312","description":"Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references.\n\nWe now reject these as malformed and curb the memory amplification vector as a result."},"relatedVulnerabilities":[{"id":"CVE-2026-97031","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-97031","cwe":"CWE-405","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-97031","date":"2026-10-10","epss":0.00394,"percentile":0.31568}],"urls":["https://go.dev/cl/847312","https://go.dev/issue/81855","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6607"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-97031","description":"Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references. We now reject these as malformed and curb the memory amplification vector as a result."}]},{"artifact":{"id":"f3e667a0375f3959","cpes":["cpe:2.3:a:xz-libs:xz-libs:5.2.5-8.el9_0:*:*:*:*:*:*:*","cpe:2.3:a:xz-libs:xz_libs:5.2.5-8.el9_0:*:*:*:*:*:*:*","cpe:2.3:a:xz_libs:xz-libs:5.2.5-8.el9_0:*:*:*:*:*:*:*","cpe:2.3:a:xz_libs:xz_libs:5.2.5-8.el9_0:*:*:*:*:*:*:*","cpe:2.3:a:redhat:xz-libs:5.2.5-8.el9_0:*:*:*:*:*:*:*","cpe:2.3:a:redhat:xz_libs:5.2.5-8.el9_0:*:*:*:*:*:*:*","cpe:2.3:a:xz:xz-libs:5.2.5-8.el9_0:*:*:*:*:*:*:*","cpe:2.3:a:xz:xz_libs:5.2.5-8.el9_0:*:*:*:*:*:*:*"],"name":"xz-libs","purl":"pkg:rpm/redhat/xz-libs@5.2.5-8.el9_0?arch=x86_64&distro=rhel-9.8&upstream=xz-5.2.5-8.el9_0.src.rpm","type":"rpm","version":"5.2.5-8.el9_0","language":"","licenses":["Public Domain"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"xz","version":"5.2.5-8.el9_0"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-34743","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"xz","version":"5.2.5-8.el9_0"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-34743","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-34743","cwe":"CWE-122","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-34743","date":"2026-10-10","epss":0.00573,"percentile":0.45683}],"risk":0.295095,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-34743","description":"A flaw was found in XZ Utils. When the `lzma_index_decoder()` function processes an empty index, and a subsequent `lzma_index_append()` operation is performed, insufficient memory is allocated. This can lead to a buffer overflow, potentially causing a denial of service (DoS) for affected systems."},"relatedVulnerabilities":[{"id":"CVE-2026-34743","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":1.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-34743","cwe":"CWE-122","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-34743","date":"2026-10-10","epss":0.00573,"percentile":0.45683}],"urls":["https://github.com/tukaani-project/xz/commit/c8c22869e780ff57c96b46939c3d79ff99395f87","https://github.com/tukaani-project/xz/releases/tag/v5.8.3","https://github.com/tukaani-project/xz/security/advisories/GHSA-x872-m794-cxhv","http://www.openwall.com/lists/oss-security/2026/03/31/13","https://lists.debian.org/debian-lts-announce/2026/07/msg00034.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-34743","description":"XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzma_index_decoder() was used to decode an Index that contained no Records, the resulting lzma_index was left in a state where where a subsequent lzma_index_append() would allocate too little memory, and a buffer overflow would occur. This issue has been patched in version 5.8.3."}]},{"artifact":{"id":"9eebaea2eda844dd","cpes":["cpe:2.3:a:curl-minimal:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl-minimal:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl_minimal:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl_minimal:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*"],"name":"curl-minimal","purl":"pkg:rpm/redhat/curl-minimal@7.76.1-40.el9_8.7?arch=x86_64&distro=rhel-9.8&upstream=curl-7.76.1-40.el9_8.7.src.rpm","type":"rpm","version":"7.76.1-40.el9_8.7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.76.1-40.el9_8.7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6429","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"curl","version":"7.76.1-40.el9_8.7"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-6429","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6429","cwe":"CWE-200","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"}],"epss":[{"cve":"CVE-2026-6429","date":"2026-10-10","epss":0.00512,"percentile":0.41865}],"risk":0.2944,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-6429","description":"A flaw was found in libcurl. When configured to use a .netrc file for credentials and follow HTTP redirects, libcurl can inadvertently send the password from the initial connection to the redirected host. This sensitive information disclosure occurs when both the original and redirect URLs use clear text HTTP, are performed over the same HTTP proxy, and the same connection is reused. This vulnerability, categorized as an Exposure of Sensitive Information to an Unauthorized Actor (CWE-200), could allow an attacker to obtain user credentials."},"relatedVulnerabilities":[{"id":"CVE-2026-6429","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6429","cwe":"CWE-200","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"}],"epss":[{"cve":"CVE-2026-6429","date":"2026-10-10","epss":0.00512,"percentile":0.41865}],"urls":["https://curl.se/docs/CVE-2026-6429.html","https://curl.se/docs/CVE-2026-6429.json","https://hackerone.com/reports/3677759"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6429","description":"When asked to both use a `.netrc` file for credentials and to follow HTTP\nredirects, libcurl could leak the password used for the first host to the\nfollowed-to host under certain circumstances."}]},{"artifact":{"id":"b685606a6baf0f79","cpes":["cpe:2.3:a:libcurl-minimal:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl-minimal:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl_minimal:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl_minimal:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*"],"name":"libcurl-minimal","purl":"pkg:rpm/redhat/libcurl-minimal@7.76.1-40.el9_8.7?arch=x86_64&distro=rhel-9.8&upstream=curl-7.76.1-40.el9_8.7.src.rpm","type":"rpm","version":"7.76.1-40.el9_8.7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.76.1-40.el9_8.7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6429","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"curl","version":"7.76.1-40.el9_8.7"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-6429","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6429","cwe":"CWE-200","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"}],"epss":[{"cve":"CVE-2026-6429","date":"2026-10-10","epss":0.00512,"percentile":0.41865}],"risk":0.2944,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-6429","description":"A flaw was found in libcurl. When configured to use a .netrc file for credentials and follow HTTP redirects, libcurl can inadvertently send the password from the initial connection to the redirected host. This sensitive information disclosure occurs when both the original and redirect URLs use clear text HTTP, are performed over the same HTTP proxy, and the same connection is reused. This vulnerability, categorized as an Exposure of Sensitive Information to an Unauthorized Actor (CWE-200), could allow an attacker to obtain user credentials."},"relatedVulnerabilities":[{"id":"CVE-2026-6429","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6429","cwe":"CWE-200","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"}],"epss":[{"cve":"CVE-2026-6429","date":"2026-10-10","epss":0.00512,"percentile":0.41865}],"urls":["https://curl.se/docs/CVE-2026-6429.html","https://curl.se/docs/CVE-2026-6429.json","https://hackerone.com/reports/3677759"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6429","description":"When asked to both use a `.netrc` file for credentials and to follow HTTP\nredirects, libcurl could leak the password used for the first host to the\nfollowed-to host under certain circumstances."}]},{"artifact":{"id":"9eebaea2eda844dd","cpes":["cpe:2.3:a:curl-minimal:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl-minimal:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl_minimal:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl_minimal:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*"],"name":"curl-minimal","purl":"pkg:rpm/redhat/curl-minimal@7.76.1-40.el9_8.7?arch=x86_64&distro=rhel-9.8&upstream=curl-7.76.1-40.el9_8.7.src.rpm","type":"rpm","version":"7.76.1-40.el9_8.7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.76.1-40.el9_8.7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-5545","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"curl","version":"7.76.1-40.el9_8.7"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-5545","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-5545","cwe":"CWE-305","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-5545","cwe":"CWE-613","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-5545","date":"2026-10-10","epss":0.0051,"percentile":0.41695}],"risk":0.29324999999999996,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-5545","description":"A flaw was found in libcurl. An application using libcurl that performs an authenticated HTTP(S) request after a Negotiate-authenticated one to the same host may incorrectly reuse the previous connection. This authentication bypass vulnerability allows the second request to be sent over a connection authenticated with different credentials, potentially leading to unauthorized access or information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-5545","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-5545","cwe":"CWE-305","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-5545","cwe":"CWE-613","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-5545","date":"2026-10-10","epss":0.0051,"percentile":0.41695}],"urls":["https://curl.se/docs/CVE-2026-5545.html","https://curl.se/docs/CVE-2026-5545.json","https://hackerone.com/reports/3642555"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-5545","description":"libcurl might in some circumstances reuse the wrong connection when asked to\ndo an authenticated HTTP(S) request after a Negotiate-authenticated one, when\nboth use the same host.\n\nlibcurl features a pool of recent connections so that subsequent requests can\nreuse an existing connection to avoid overhead.\n\nWhen reusing a connection a range of criteria must be met. Due to a logical\nerror in the code, a request that was issued by an application could\nwrongfully reuse an existing connection to the same server that was\nauthenticated using different credentials.\n\nAn application that first uses Negotiate authentication to a server with\n`user1:password1` and then does another operation to the same server asking\nfor any authentication method but for `user2:password2` (while the previous\nconnection is still alive) - the second request gets confused and wrongly\nreuses the same connection and sends the new request over that connection\nthinking it uses a mix of user1's and user2's credentials when it is in fact\nstill using the connection authenticated for user1..."}]},{"artifact":{"id":"b685606a6baf0f79","cpes":["cpe:2.3:a:libcurl-minimal:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl-minimal:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl_minimal:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl_minimal:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*"],"name":"libcurl-minimal","purl":"pkg:rpm/redhat/libcurl-minimal@7.76.1-40.el9_8.7?arch=x86_64&distro=rhel-9.8&upstream=curl-7.76.1-40.el9_8.7.src.rpm","type":"rpm","version":"7.76.1-40.el9_8.7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.76.1-40.el9_8.7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-5545","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"curl","version":"7.76.1-40.el9_8.7"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-5545","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-5545","cwe":"CWE-305","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-5545","cwe":"CWE-613","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-5545","date":"2026-10-10","epss":0.0051,"percentile":0.41695}],"risk":0.29324999999999996,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-5545","description":"A flaw was found in libcurl. An application using libcurl that performs an authenticated HTTP(S) request after a Negotiate-authenticated one to the same host may incorrectly reuse the previous connection. This authentication bypass vulnerability allows the second request to be sent over a connection authenticated with different credentials, potentially leading to unauthorized access or information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-5545","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-5545","cwe":"CWE-305","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-5545","cwe":"CWE-613","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-5545","date":"2026-10-10","epss":0.0051,"percentile":0.41695}],"urls":["https://curl.se/docs/CVE-2026-5545.html","https://curl.se/docs/CVE-2026-5545.json","https://hackerone.com/reports/3642555"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-5545","description":"libcurl might in some circumstances reuse the wrong connection when asked to\ndo an authenticated HTTP(S) request after a Negotiate-authenticated one, when\nboth use the same host.\n\nlibcurl features a pool of recent connections so that subsequent requests can\nreuse an existing connection to avoid overhead.\n\nWhen reusing a connection a range of criteria must be met. Due to a logical\nerror in the code, a request that was issued by an application could\nwrongfully reuse an existing connection to the same server that was\nauthenticated using different credentials.\n\nAn application that first uses Negotiate authentication to a server with\n`user1:password1` and then does another operation to the same server asking\nfor any authentication method but for `user2:password2` (while the previous\nconnection is still alive) - the second request gets confused and wrongly\nreuses the same connection and sends the new request over that connection\nthinking it uses a mix of user1's and user2's credentials when it is in fact\nstill using the connection authenticated for user1..."}]},{"artifact":{"id":"ea0f2a7e0eb5d962","cpes":["cpe:2.3:a:python3:python3:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3:3.9.25-7.el9_8.3:*:*:*:*:*:*:*"],"name":"python3","purl":"pkg:rpm/redhat/python3@3.9.25-7.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=python3.9-3.9.25-7.el9_8.3.src.rpm","type":"rpm","version":"3.9.25-7.el9_8.3","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python3.9","version":"3.9.25-7.el9_8.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-12781","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"python3.9","version":"3.9.25-7.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-12781","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-12781","cwe":"CWE-704","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-12781","date":"2026-10-10","epss":0.00569,"percentile":0.45494}],"risk":0.293035,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-12781","description":"A flaw was found in the base64 module in the Python standard library. The b64decode, standard_b64decode and urlsafe_b64decode functions will always accept the '+' and '/' characters even when an alternative base64 alphabet is specified via the altchars parameter that excludes them. This input validation bypass allows malformed or unexpected data to pass through decoding filters, potentially causing logical errors or data integrity issues in applications relying on strict character sets."},"relatedVulnerabilities":[{"id":"CVE-2025-12781","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-12781","cwe":"CWE-704","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-12781","date":"2026-10-10","epss":0.00569,"percentile":0.45494}],"urls":["https://github.com/python/cpython/commit/13360efd385d1a7d0659beba03787ea3d063ef9b","https://github.com/python/cpython/commit/1be80bec7960f5ccd059e75f3dfbd45fca302947","https://github.com/python/cpython/commit/9060b4abbe475591b6230b23c2afefeff26fcca5","https://github.com/python/cpython/commit/e95e783dff443b68e8179fdb57737025bf02ba76","https://github.com/python/cpython/commit/fd17ee026fa9b67f6288cbafe374a3e479fe03a5","https://github.com/python/cpython/issues/125346","https://github.com/python/cpython/pull/141128","https://mail.python.org/archives/list/security-announce@python.org/thread/KRI7GC6S27YV5NJ4FPDALS2WI5ENAFJ6/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-12781","description":"When passing data to the b64decode(), standard_b64decode(), and urlsafe_b64decode() functions in the \"base64\" module the characters \"+/\" will always be accepted, regardless of the value of \"altchars\" parameter, typically used to establish an \"alternative base64 alphabet\" such as the URL safe alphabet. This behavior matches what is recommended in earlier base64 RFCs, but newer RFCs now recommend either dropping characters outside the specified base64 alphabet or raising an error. The old behavior has the possibility of causing data integrity issues.\n\n\n\n\nThis behavior can only be insecure if your application uses an alternate base64 alphabet (without \"+/\"). If your application does not use the \"altchars\" parameter or the urlsafe_b64decode() function, then your application does not use an alternative base64 alphabet.\n\n\n\n\nThe attached patches DOES NOT make the base64-decode behavior raise an error, as this would be a change in behavior and break existing programs. Instead, the patch deprecates the behavior which will be replaced with the newly recommended behavior in a future version of Python. Users are recommended to mitigate by verifying user-controlled inputs match the base64 \nalphabet they are expecting or verify that their application would not be \naffected if the b64decode() functions accepted \"+\" or \"/\" outside of altchars."}]},{"artifact":{"id":"0ed3c72bb9ee9391","cpes":["cpe:2.3:a:python3-libs:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3-libs:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3_libs:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3_libs:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*"],"name":"python3-libs","purl":"pkg:rpm/redhat/python3-libs@3.9.25-7.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=python3.9-3.9.25-7.el9_8.3.src.rpm","type":"rpm","version":"3.9.25-7.el9_8.3","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python3.9","version":"3.9.25-7.el9_8.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-12781","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"python3.9","version":"3.9.25-7.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-12781","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-12781","cwe":"CWE-704","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-12781","date":"2026-10-10","epss":0.00569,"percentile":0.45494}],"risk":0.293035,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-12781","description":"A flaw was found in the base64 module in the Python standard library. The b64decode, standard_b64decode and urlsafe_b64decode functions will always accept the '+' and '/' characters even when an alternative base64 alphabet is specified via the altchars parameter that excludes them. This input validation bypass allows malformed or unexpected data to pass through decoding filters, potentially causing logical errors or data integrity issues in applications relying on strict character sets."},"relatedVulnerabilities":[{"id":"CVE-2025-12781","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-12781","cwe":"CWE-704","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-12781","date":"2026-10-10","epss":0.00569,"percentile":0.45494}],"urls":["https://github.com/python/cpython/commit/13360efd385d1a7d0659beba03787ea3d063ef9b","https://github.com/python/cpython/commit/1be80bec7960f5ccd059e75f3dfbd45fca302947","https://github.com/python/cpython/commit/9060b4abbe475591b6230b23c2afefeff26fcca5","https://github.com/python/cpython/commit/e95e783dff443b68e8179fdb57737025bf02ba76","https://github.com/python/cpython/commit/fd17ee026fa9b67f6288cbafe374a3e479fe03a5","https://github.com/python/cpython/issues/125346","https://github.com/python/cpython/pull/141128","https://mail.python.org/archives/list/security-announce@python.org/thread/KRI7GC6S27YV5NJ4FPDALS2WI5ENAFJ6/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-12781","description":"When passing data to the b64decode(), standard_b64decode(), and urlsafe_b64decode() functions in the \"base64\" module the characters \"+/\" will always be accepted, regardless of the value of \"altchars\" parameter, typically used to establish an \"alternative base64 alphabet\" such as the URL safe alphabet. This behavior matches what is recommended in earlier base64 RFCs, but newer RFCs now recommend either dropping characters outside the specified base64 alphabet or raising an error. The old behavior has the possibility of causing data integrity issues.\n\n\n\n\nThis behavior can only be insecure if your application uses an alternate base64 alphabet (without \"+/\"). If your application does not use the \"altchars\" parameter or the urlsafe_b64decode() function, then your application does not use an alternative base64 alphabet.\n\n\n\n\nThe attached patches DOES NOT make the base64-decode behavior raise an error, as this would be a change in behavior and break existing programs. Instead, the patch deprecates the behavior which will be replaced with the newly recommended behavior in a future version of Python. Users are recommended to mitigate by verifying user-controlled inputs match the base64 \nalphabet they are expecting or verify that their application would not be \naffected if the b64decode() functions accepted \"+\" or \"/\" outside of altchars."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-0351","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-0351","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":6.6,"impactScore":4.8,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-0351","cwe":"CWE-786","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-0351","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-0351","date":"2026-10-10","epss":0.00609,"percentile":0.47596}],"risk":0.29231999999999997,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-0351","description":"A flaw was found in vim. The vulnerability occurs due to too many recursions, which can lead to a segmentation fault. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution."},"relatedVulnerabilities":[{"id":"CVE-2022-0351","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":4.6,"impactScore":6.5,"exploitabilityScore":4},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.4,"impactScore":5.9,"exploitabilityScore":2.6},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-0351","cwe":"CWE-786","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-0351","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-0351","date":"2026-10-10","epss":0.00609,"percentile":0.47596}],"urls":["http://seclists.org/fulldisclosure/2022/Oct/28","http://seclists.org/fulldisclosure/2022/Oct/41","http://seclists.org/fulldisclosure/2022/Oct/43","https://github.com/vim/vim/commit/fe6fb267e6ee5c5da2f41889e4e0e0ac5bf4b89d","https://huntr.dev/bounties/8b36db58-b65c-4298-be7f-40b9e37fd161","https://lists.debian.org/debian-lts-announce/2022/05/msg00022.html","https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html","https://security.gentoo.org/glsa/202208-32","https://support.apple.com/kb/HT213444","https://support.apple.com/kb/HT213488","https://lists.debian.org/debian-lts-announce/2025/03/msg00023.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-0351","description":"Access of Memory Location Before Start of Buffer in GitHub repository vim/vim prior to 8.2."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-0049","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2023-0049","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.3,"impactScore":5.9,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-0049","cwe":"CWE-125","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2023-0049","date":"2026-10-10","epss":0.00566,"percentile":0.45335}],"risk":0.29149,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-0049","description":"A flaw was found in vim, which is vulnerable to an out-of-bounds read in the build_stl_str_hl function. This flaw allows a specially crafted file to cause information disclosure, data integrity corruption, or crash the software."},"relatedVulnerabilities":[{"id":"CVE-2023-0049","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.3,"impactScore":5.9,"exploitabilityScore":1.4},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-0049","cwe":"CWE-125","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2023-0049","date":"2026-10-10","epss":0.00566,"percentile":0.45335}],"urls":["http://seclists.org/fulldisclosure/2023/Mar/17","https://github.com/vim/vim/commit/7b17eb4b063a234376c1ec909ee293e42cff290c","https://huntr.dev/bounties/5e6f325c-ba54-4bf0-b050-dca048fd3fd9","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3Y752EAVACVC5XY2TMGGOAIU25VQRPDW/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T33LLWHLH63XDCO5OME7NWN63RA4U5HF/","https://security.gentoo.org/glsa/202305-16","https://support.apple.com/kb/HT213670","https://security.netapp.com/advisory/ntap-20250117-0005/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-0049","description":"Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143."}]},{"artifact":{"id":"73ec63868795f316","cpes":["cpe:2.3:a:openssl:openssl:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:rpm/redhat/openssl@3.5.8-1.el9_8?arch=x86_64&distro=rhel-9.8&epoch=1&upstream=openssl-3.5.8-1.el9_8.src.rpm","type":"rpm","version":"1:3.5.8-1.el9_8","language":"","licenses":["Apache-2.0"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1:3.5.8-2.el9_8"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-84782","versionConstraint":"< 1:3.5.8-2.el9_8 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"openssl","version":"1:3.5.8-1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-84782","fix":{"state":"fixed","versions":["1:3.5.8-2.el9_8"],"available":[{"date":"2026-10-09","kind":"first-observed","version":"1:3.5.8-2.el9_8"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84782","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-84782","date":"2026-10-10","epss":0.0039,"percentile":0.31132}],"risk":0.29055,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:9","advisories":[{"id":"RHSA-2026:77396","link":"https://access.redhat.com/errata/RHSA-2026:77396"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-84782","description":"A flaw was found in OpenSSL. The Datagram Transport Layer Security (DTLS) retransmission mechanism fails to properly handle handshake message writes that are suspended before completion. A remote attacker could exploit this vulnerability during handshake message retransmission, causing OpenSSL to read past the message buffer or overwrite internal state required to resume writing. This issue can result in information disclosure through out-of-bounds memory reads or cause a Denial of Service (DoS) by crashing the process."},"relatedVulnerabilities":[{"id":"CVE-2026-84782","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84782","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-84782","date":"2026-10-10","epss":0.0039,"percentile":0.31132}],"urls":["https://github.com/openssl/openssl/commit/906cf0ef1c85ca40ce69163e9086d6d3fe292943","https://github.com/openssl/openssl/commit/9f6b34422af7eb5dac61322e33dac1ae989fa628","https://github.com/openssl/openssl/commit/a383dafdd754eb5b22bf45e37e1bff9d07277a58","https://github.com/openssl/openssl/commit/d951e02ede8f6a6ff8150546db44b34f0518192c","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-84782","description":"Issue summary: The DTLS retransmission logic does not correctly handle\na handshake message write that is suspended part-way through.\nThe retransmitted message can be read past the message buffer and\nthe retransmission overwrites the internal state the suspended write\nneeds to resume correctly.\n\nImpact summary: The retransmitted message can disclose a heap memory\nto the peer as plaintext handshake data or cause a crash and a Denial\nof Service when the read reaches an unmapped memory region.\n\nCWE: CWE-125: Out-of-bounds Read\n\nDescription: DTLS handshake messages can be written out in multiple\nfragments, and a write can suspend mid-message (returning WANT_WRITE)\nif the underlying transport temporarily cannot accept more data. While\nsuch a write is suspended, the DTLS retransmission timer may\nindependently fire and ask the retransmission logic to resend an\nearlier, already-acknowledged-as-sent message from its retransmit\nqueue.\n\nThe retransmission logic reused the same internal buffer and position\ntracking as the message that was still being written, without\nresetting the position back to the start of the message being\nretransmitted. As a result the retransmission was read starting from\nwherever the suspended write had left off, producing a mislabelled\nmessage whose body was leftover bytes from the other, larger message\nstill in flight - content that was never meant to be sent at that\npoint, and which could run past the end of the allocated buffer.\n\nSeparately, even when the retransmission is positioned correctly,\nallowing it to run to completion while another write is suspended\noverwrites the same shared bookkeeping that the suspended write\ndepends on to resume. When the application later resumes the\nsuspended write (via a subsequent SSL_read(), SSL_write(),\nSSL_accept(), or SSL_connect() call), it finds that bookkeeping in a\nstate inconsistent with the message and aborts the process in\na debugging build.\n\nThe fix resets the retransmission's read position to the start of the\nmessage before resending, and skips retransmission entirely whenever a\nhandshake write is still suspended, deferring to the next call that\nresumes it instead.\n\nFIPS impact: no\nThe affected code is outside the FIPS module boundary."}]},{"artifact":{"id":"753337be7fe19d16","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/redhat/openssl-libs@3.5.8-1.el9_8?arch=x86_64&distro=rhel-9.8&epoch=1&upstream=openssl-3.5.8-1.el9_8.src.rpm","type":"rpm","version":"1:3.5.8-1.el9_8","language":"","licenses":["Apache-2.0"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"3.5.8-1.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1:3.5.8-2.el9_8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-84782","versionConstraint":"< 1:3.5.8-2.el9_8 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"openssl","version":"3.5.8-1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-84782","fix":{"state":"fixed","versions":["1:3.5.8-2.el9_8"],"available":[{"date":"2026-10-09","kind":"first-observed","version":"1:3.5.8-2.el9_8"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84782","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-84782","date":"2026-10-10","epss":0.0039,"percentile":0.31132}],"risk":0.29055,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:9","advisories":[{"id":"RHSA-2026:77396","link":"https://access.redhat.com/errata/RHSA-2026:77396"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-84782","description":"A flaw was found in OpenSSL. The Datagram Transport Layer Security (DTLS) retransmission mechanism fails to properly handle handshake message writes that are suspended before completion. A remote attacker could exploit this vulnerability during handshake message retransmission, causing OpenSSL to read past the message buffer or overwrite internal state required to resume writing. This issue can result in information disclosure through out-of-bounds memory reads or cause a Denial of Service (DoS) by crashing the process."},"relatedVulnerabilities":[{"id":"CVE-2026-84782","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84782","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-84782","date":"2026-10-10","epss":0.0039,"percentile":0.31132}],"urls":["https://github.com/openssl/openssl/commit/906cf0ef1c85ca40ce69163e9086d6d3fe292943","https://github.com/openssl/openssl/commit/9f6b34422af7eb5dac61322e33dac1ae989fa628","https://github.com/openssl/openssl/commit/a383dafdd754eb5b22bf45e37e1bff9d07277a58","https://github.com/openssl/openssl/commit/d951e02ede8f6a6ff8150546db44b34f0518192c","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-84782","description":"Issue summary: The DTLS retransmission logic does not correctly handle\na handshake message write that is suspended part-way through.\nThe retransmitted message can be read past the message buffer and\nthe retransmission overwrites the internal state the suspended write\nneeds to resume correctly.\n\nImpact summary: The retransmitted message can disclose a heap memory\nto the peer as plaintext handshake data or cause a crash and a Denial\nof Service when the read reaches an unmapped memory region.\n\nCWE: CWE-125: Out-of-bounds Read\n\nDescription: DTLS handshake messages can be written out in multiple\nfragments, and a write can suspend mid-message (returning WANT_WRITE)\nif the underlying transport temporarily cannot accept more data. While\nsuch a write is suspended, the DTLS retransmission timer may\nindependently fire and ask the retransmission logic to resend an\nearlier, already-acknowledged-as-sent message from its retransmit\nqueue.\n\nThe retransmission logic reused the same internal buffer and position\ntracking as the message that was still being written, without\nresetting the position back to the start of the message being\nretransmitted. As a result the retransmission was read starting from\nwherever the suspended write had left off, producing a mislabelled\nmessage whose body was leftover bytes from the other, larger message\nstill in flight - content that was never meant to be sent at that\npoint, and which could run past the end of the allocated buffer.\n\nSeparately, even when the retransmission is positioned correctly,\nallowing it to run to completion while another write is suspended\noverwrites the same shared bookkeeping that the suspended write\ndepends on to resume. When the application later resumes the\nsuspended write (via a subsequent SSL_read(), SSL_write(),\nSSL_accept(), or SSL_connect() call), it finds that bookkeeping in a\nstate inconsistent with the message and aborts the process in\na debugging build.\n\nThe fix resets the retransmission's read position to the start of the\nmessage before resending, and skips retransmission entirely whenever a\nhandshake write is still suspended, deferring to the next call that\nresumes it instead.\n\nFIPS impact: no\nThe affected code is outside the FIPS module boundary."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-2817","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-2817","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2817","cwe":"CWE-416","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2022-2817","date":"2026-10-10","epss":0.00535,"percentile":0.43467}],"risk":0.2889,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-2817","description":"A use-after-free vulnerability was found in Vim in the string_quote function in the strings.c file. This issue occurs because an already freed memory is used when a specially crafted input is processed. This flaw allows an attacker who can trick a user into opening a specially crafted file into triggering the use-after-free, causing the application to crash, possibly executing code and corrupting memory."},"relatedVulnerabilities":[{"id":"CVE-2022-2817","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2817","cwe":"CWE-416","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2022-2817","date":"2026-10-10","epss":0.00535,"percentile":0.43467}],"urls":["https://github.com/vim/vim/commit/249e1b903a9c0460d618f6dcc59aeb8c03b24b20","https://huntr.dev/bounties/a7b7d242-3d88-4bde-a681-6c986aff886f","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHFAR6OY6G77M6GXCJT75A4KITLNR6GO/","https://security.gentoo.org/glsa/202305-16"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-2817","description":"Use After Free in GitHub repository vim/vim prior to 9.0.0213."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-3234","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-3234","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-3234","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-3234","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-3234","date":"2026-10-10","epss":0.00532,"percentile":0.43274}],"risk":0.28728000000000004,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-3234","description":"Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0483."},"relatedVulnerabilities":[{"id":"CVE-2022-3234","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-3234","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-3234","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-3234","date":"2026-10-10","epss":0.00532,"percentile":0.43274}],"urls":["https://github.com/vim/vim/commit/c249913edc35c0e666d783bfc21595cf9f7d9e0d","https://huntr.dev/bounties/90fdf374-bf04-4386-8a23-38c83b88f0da","https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4QI7AETXBHPC7SGA77Q7O5IEGULWYET7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTBVD4J2SKVSWK4VBN5JP5OEVK6GDS3N/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LSSEWQLK55MCNT4Z2IIJEJYEI5HLCODI/","https://security.gentoo.org/glsa/202305-16"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-3234","description":"Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0483."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-3324","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-3324","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-3324","cwe":"CWE-121","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-3324","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-3324","date":"2026-10-10","epss":0.00532,"percentile":0.43273}],"risk":0.28728000000000004,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-3324","description":"A stack-based buffer overflow vulnerability was found in Vim's win_redr_ruler() function of the src/drawscreen.c file. The issue occurs when using a negative array index with a negative width window. This flaw allows an attacker to trick a user into opening a specially crafted file, which triggers the bug, causing an application to crash, possibly executing code and corrupting memory."},"relatedVulnerabilities":[{"id":"CVE-2022-3324","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-3324","cwe":"CWE-121","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-3324","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-3324","date":"2026-10-10","epss":0.00532,"percentile":0.43273}],"urls":["https://github.com/vim/vim/commit/8279af514ca7e5fd3c31cf13b0864163d1a0bfeb","https://huntr.dev/bounties/e414e55b-f332-491f-863b-c18dca97403c","https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4QI7AETXBHPC7SGA77Q7O5IEGULWYET7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTBVD4J2SKVSWK4VBN5JP5OEVK6GDS3N/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LSSEWQLK55MCNT4Z2IIJEJYEI5HLCODI/","https://security.gentoo.org/glsa/202305-16","https://lists.debian.org/debian-lts-announce/2025/03/msg00023.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-3324","description":"Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-2946","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-2946","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2946","cwe":"CWE-416","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-2946","cwe":"CWE-416","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-2946","date":"2026-10-10","epss":0.00532,"percentile":0.43258}],"risk":0.28728000000000004,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-2946","description":"A flaw was found in vim, where it is vulnerable to a use-after-free in the vim_vsnprintf_typval function. This flaw allows a specially crafted file to crash a program, use unexpected values, or execute code."},"relatedVulnerabilities":[{"id":"CVE-2022-2946","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2946","cwe":"CWE-416","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-2946","cwe":"CWE-416","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-2946","date":"2026-10-10","epss":0.00532,"percentile":0.43258}],"urls":["https://github.com/vim/vim/commit/adce965162dd89bf29ee0e5baf53652e7515762c","https://huntr.dev/bounties/5d389a18-5026-47df-a5d0-1548a9b555d5","https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C72HDIMR3KTTAO7QGTXWUMPBNFUFIBRD/","https://security.gentoo.org/glsa/202305-16"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-2946","description":"Use After Free in GitHub repository vim/vim prior to 9.0.0246."}]},{"artifact":{"id":"406b3abfffe1d292","cpes":["cpe:2.3:a:git-lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git-lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*"],"name":"git-lfs","purl":"pkg:rpm/redhat/git-lfs@3.7.1-4.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=git-lfs-3.7.1-4.el9_8.3.src.rpm","type":"rpm","version":"3.7.1-4.el9_8.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-58185","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"git-lfs","version":"0:3.7.1-4.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-58185","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-58185","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-58185","date":"2026-10-10","epss":0.00556,"percentile":0.44701}],"risk":0.28634,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-58185","description":"A memory exhaustion flaw has been discovered in the golang encoding/asn1 module. Within parseSequenceOf, reflect.MakeSlice is being used to pre-allocate a slice that is needed in order to fully validate the given DER payload. The size of the slice allocated are also multiple times larger than the input DER. As a result, a malicious actor can craft a big empty DER payload, resulting in an unnecessary large allocation of memories. This can be a way to cause memory exhaustion."},"relatedVulnerabilities":[{"id":"CVE-2025-58185","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-58185","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-58185","date":"2026-10-10","epss":0.00556,"percentile":0.44701}],"urls":["https://go.dev/cl/709856","https://go.dev/issue/75671","https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI","https://pkg.go.dev/vuln/GO-2025-4011","http://www.openwall.com/lists/oss-security/2025/10/08/1"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-58185","description":"Parsing a maliciously crafted DER payload could allocate large amounts of memory, causing memory exhaustion."}]},{"artifact":{"id":"406b3abfffe1d292","cpes":["cpe:2.3:a:git-lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git-lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*"],"name":"git-lfs","purl":"pkg:rpm/redhat/git-lfs@3.7.1-4.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=git-lfs-3.7.1-4.el9_8.3.src.rpm","type":"rpm","version":"3.7.1-4.el9_8.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-61724","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"git-lfs","version":"0:3.7.1-4.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-61724","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-61724","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-61724","date":"2026-10-10","epss":0.00556,"percentile":0.44701}],"risk":0.28634,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-61724","description":"The Reader.ReadResponse function constructs a response string through repeated string concatenation of lines. When the number of lines in a response is large, this can cause excessive CPU consumption."},"relatedVulnerabilities":[{"id":"CVE-2025-61724","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-61724","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-61724","date":"2026-10-10","epss":0.00556,"percentile":0.44701}],"urls":["https://go.dev/cl/709859","https://go.dev/issue/75716","https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI","https://pkg.go.dev/vuln/GO-2025-4015","http://www.openwall.com/lists/oss-security/2025/10/08/1"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-61724","description":"The Reader.ReadResponse function constructs a response string through repeated string concatenation of lines. When the number of lines in a response is large, this can cause excessive CPU consumption."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-3037","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-3037","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-3037","cwe":"CWE-416","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2022-3037","date":"2026-10-10","epss":0.00529,"percentile":0.43066}],"risk":0.28566,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-3037","description":"A flaw was found in vim, where it is vulnerable to a use-after-free in the qf_buf_add_line() function. This flaw allows a specially crafted file to crash a program, use unexpected values, or execute code."},"relatedVulnerabilities":[{"id":"CVE-2022-3037","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-3037","cwe":"CWE-416","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2022-3037","date":"2026-10-10","epss":0.00529,"percentile":0.43066}],"urls":["https://github.com/vim/vim/commit/4f1b083be43f351bc107541e7b0c9655a5d2c0bb","https://huntr.dev/bounties/af4c2f2d-d754-4607-b565-9e92f3f717b5","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RY3GEN2Q46ZJKSNHTN2XB6B3VAJBEILN/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHJ6LCLHGGVI2U6ZHXHTZ2PYP4STC23N/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWOJOA7PZZAMBI5GFTL6PWHXMWSDLUXL/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-3037","description":"Use After Free in GitHub repository vim/vim prior to 9.0.0322."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-3016","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-3016","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-3016","cwe":"CWE-416","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2022-3016","date":"2026-10-10","epss":0.00527,"percentile":0.42956}],"risk":0.28458000000000006,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-3016","description":"A heap use-after-free vulnerability was found in vim's get_next_valid_entry() function of the src/quickfix.c file. The issue occurs because vim is using freed memory when the location list is changed in autocmd. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap use-after-free that causes an application to crash, possibly executing code and corrupting memory."},"relatedVulnerabilities":[{"id":"CVE-2022-3016","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-3016","cwe":"CWE-416","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2022-3016","date":"2026-10-10","epss":0.00527,"percentile":0.42956}],"urls":["https://github.com/vim/vim/commit/6d24a51b94beb1991cddce221f90b455e2d50db7","https://huntr.dev/bounties/260516c2-5c4a-4b7f-a01c-04b1aeeea371","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWOJOA7PZZAMBI5GFTL6PWHXMWSDLUXL/","https://security.gentoo.org/glsa/202305-16"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-3016","description":"Use After Free in GitHub repository vim/vim prior to 9.0.0286."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-2889","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-2889","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2889","cwe":"CWE-416","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-2889","cwe":"CWE-416","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-2889","date":"2026-10-10","epss":0.00527,"percentile":0.42955}],"risk":0.28458000000000006,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-2889","description":"A use-after-free vulnerability was found in Vim in the find_var_also_in_script function in the evalvars.c file. This issue occurs because an already freed memory is used when a specially crafted input is processed. This flaw allows an attacker who can trick a user into opening a specially crafted file into triggering the use-after-free, causing the application to crash, possibly executing code and corrupting memory."},"relatedVulnerabilities":[{"id":"CVE-2022-2889","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2889","cwe":"CWE-416","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-2889","cwe":"CWE-416","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-2889","date":"2026-10-10","epss":0.00527,"percentile":0.42955}],"urls":["https://github.com/vim/vim/commit/91c7cbfe31bbef57d5fcf7d76989fc159f73ef15","https://huntr.dev/bounties/d1ac9817-825d-49ce-b514-1d5b12b6bdaa","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C72HDIMR3KTTAO7QGTXWUMPBNFUFIBRD/","https://security.gentoo.org/glsa/202305-16"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-2889","description":"Use After Free in GitHub repository vim/vim prior to 9.0.0225."}]},{"artifact":{"id":"406b3abfffe1d292","cpes":["cpe:2.3:a:git-lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git-lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*"],"name":"git-lfs","purl":"pkg:rpm/redhat/git-lfs@3.7.1-4.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=git-lfs-3.7.1-4.el9_8.3.src.rpm","type":"rpm","version":"3.7.1-4.el9_8.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-78667","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"git-lfs","version":"0:3.7.1-4.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-78667","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78667","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78667","date":"2026-10-10","epss":0.00379,"percentile":0.2992}],"risk":0.28425,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-78667","description":"A flaw was found in the Go net/http package. A remote attacker can cause a Denial of Service (DoS) by sending an HTTP request containing a Range header with a large number of small byte ranges. When the server processes these ranges while serving content, it consumes an excessive amount of CPU resources, rendering the application unresponsive to legitimate users."},"relatedVulnerabilities":[{"id":"CVE-2026-78667","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78667","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78667","date":"2026-10-10","epss":0.00379,"percentile":0.2992}],"urls":["https://go.dev/cl/847309","https://go.dev/issue/81858","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6609"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78667","description":"When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS) can consume an excessive amount of CPU."}]},{"artifact":{"id":"751040f2dddec633","cpes":["cpe:2.3:a:golang:go:1.26.7:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.26.7","type":"go-module","version":"go1.26.7","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.26.7"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.26.9"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6609","versionConstraint":"<1.26.9||>=1.27.0-0,<1.27.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.26.7"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6609","fix":{"state":"fixed","versions":["1.26.9","1.27.2"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"},{"date":"2026-10-08","kind":"release","version":"1.27.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78667","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78667","date":"2026-10-10","epss":0.00379,"percentile":0.2992}],"risk":0.28425,"urls":["https://go.dev/issue/81858","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847309","description":"When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS) can consume an excessive amount of CPU."},"relatedVulnerabilities":[{"id":"CVE-2026-78667","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78667","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78667","date":"2026-10-10","epss":0.00379,"percentile":0.2992}],"urls":["https://go.dev/cl/847309","https://go.dev/issue/81858","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6609"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78667","description":"When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS) can consume an excessive amount of CPU."}]},{"artifact":{"id":"6a400801b03158c5","cpes":["cpe:2.3:a:perl-AutoLoader:perl-AutoLoader:0\\:5.74-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-AutoLoader:perl_AutoLoader:0\\:5.74-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_AutoLoader:perl-AutoLoader:0\\:5.74-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_AutoLoader:perl_AutoLoader:0\\:5.74-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-AutoLoader:0\\:5.74-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_AutoLoader:0\\:5.74-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-AutoLoader:0\\:5.74-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_AutoLoader:0\\:5.74-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-AutoLoader","purl":"pkg:rpm/redhat/perl-AutoLoader@5.74-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:5.74-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6659","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-6659","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"risk":0.28193999999999997,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-6659","description":"A flaw was found in Crypt::PasswdMD5 for Perl. This component generates insecure random values for cryptographic salts, which are used to strengthen password hashes. The built-in `rand` function, used for generating these salts, is predictable and not suitable for cryptographic purposes. This vulnerability could allow an attacker to more easily crack password hashes, potentially leading to unauthorized access or information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-6659","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"urls":["https://github.com/ronsavage/Crypt-PasswdMD5/commit/a2f821637db0296082297aa4b02254ab08f0dc5e.patch","https://github.com/ronsavage/Crypt-PasswdMD5/pull/3","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.42/source/lib/Crypt/PasswdMD5.pm#L35-47","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.43/changes","http://www.openwall.com/lists/oss-security/2026/05/08/17"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6659","description":"Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts.\n\nThe built-in rand function is predictable, and unsuitable for cryptography."}]},{"artifact":{"id":"aae7e303a752a1c7","cpes":["cpe:2.3:a:perl-B:perl-B:0\\:1.80-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-B:perl_B:0\\:1.80-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_B:perl-B:0\\:1.80-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_B:perl_B:0\\:1.80-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-B:0\\:1.80-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_B:0\\:1.80-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-B:0\\:1.80-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_B:0\\:1.80-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-B","purl":"pkg:rpm/redhat/perl-B@1.80-484.el9_8?arch=x86_64&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.80-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6659","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-6659","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"risk":0.28193999999999997,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-6659","description":"A flaw was found in Crypt::PasswdMD5 for Perl. This component generates insecure random values for cryptographic salts, which are used to strengthen password hashes. The built-in `rand` function, used for generating these salts, is predictable and not suitable for cryptographic purposes. This vulnerability could allow an attacker to more easily crack password hashes, potentially leading to unauthorized access or information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-6659","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"urls":["https://github.com/ronsavage/Crypt-PasswdMD5/commit/a2f821637db0296082297aa4b02254ab08f0dc5e.patch","https://github.com/ronsavage/Crypt-PasswdMD5/pull/3","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.42/source/lib/Crypt/PasswdMD5.pm#L35-47","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.43/changes","http://www.openwall.com/lists/oss-security/2026/05/08/17"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6659","description":"Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts.\n\nThe built-in rand function is predictable, and unsuitable for cryptography."}]},{"artifact":{"id":"64f2bf74d87051e4","cpes":["cpe:2.3:a:perl-Class-Struct:perl-Class-Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-Class-Struct:perl_Class_Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Class_Struct:perl-Class-Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Class_Struct:perl_Class_Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-Class:perl-Class-Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-Class:perl_Class_Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Class:perl-Class-Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Class:perl_Class_Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-Class-Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_Class_Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-Class-Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_Class_Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-Class-Struct","purl":"pkg:rpm/redhat/perl-Class-Struct@0.66-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:0.66-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6659","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-6659","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"risk":0.28193999999999997,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-6659","description":"A flaw was found in Crypt::PasswdMD5 for Perl. This component generates insecure random values for cryptographic salts, which are used to strengthen password hashes. The built-in `rand` function, used for generating these salts, is predictable and not suitable for cryptographic purposes. This vulnerability could allow an attacker to more easily crack password hashes, potentially leading to unauthorized access or information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-6659","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"urls":["https://github.com/ronsavage/Crypt-PasswdMD5/commit/a2f821637db0296082297aa4b02254ab08f0dc5e.patch","https://github.com/ronsavage/Crypt-PasswdMD5/pull/3","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.42/source/lib/Crypt/PasswdMD5.pm#L35-47","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.43/changes","http://www.openwall.com/lists/oss-security/2026/05/08/17"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6659","description":"Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts.\n\nThe built-in rand function is predictable, and unsuitable for cryptography."}]},{"artifact":{"id":"0ee020f622eb09ee","cpes":["cpe:2.3:a:perl-DynaLoader:perl-DynaLoader:0\\:1.47-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-DynaLoader:perl_DynaLoader:0\\:1.47-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_DynaLoader:perl-DynaLoader:0\\:1.47-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_DynaLoader:perl_DynaLoader:0\\:1.47-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-DynaLoader:0\\:1.47-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_DynaLoader:0\\:1.47-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-DynaLoader:0\\:1.47-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_DynaLoader:0\\:1.47-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-DynaLoader","purl":"pkg:rpm/redhat/perl-DynaLoader@1.47-484.el9_8?arch=x86_64&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.47-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6659","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-6659","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"risk":0.28193999999999997,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-6659","description":"A flaw was found in Crypt::PasswdMD5 for Perl. This component generates insecure random values for cryptographic salts, which are used to strengthen password hashes. The built-in `rand` function, used for generating these salts, is predictable and not suitable for cryptographic purposes. This vulnerability could allow an attacker to more easily crack password hashes, potentially leading to unauthorized access or information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-6659","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"urls":["https://github.com/ronsavage/Crypt-PasswdMD5/commit/a2f821637db0296082297aa4b02254ab08f0dc5e.patch","https://github.com/ronsavage/Crypt-PasswdMD5/pull/3","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.42/source/lib/Crypt/PasswdMD5.pm#L35-47","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.43/changes","http://www.openwall.com/lists/oss-security/2026/05/08/17"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6659","description":"Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts.\n\nThe built-in rand function is predictable, and unsuitable for cryptography."}]},{"artifact":{"id":"2c29c58595b13830","cpes":["cpe:2.3:a:perl-Errno:perl-Errno:0\\:1.30-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-Errno:perl_Errno:0\\:1.30-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Errno:perl-Errno:0\\:1.30-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Errno:perl_Errno:0\\:1.30-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-Errno:0\\:1.30-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_Errno:0\\:1.30-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-Errno:0\\:1.30-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_Errno:0\\:1.30-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-Errno","purl":"pkg:rpm/redhat/perl-Errno@1.30-484.el9_8?arch=x86_64&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.30-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6659","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-6659","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"risk":0.28193999999999997,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-6659","description":"A flaw was found in Crypt::PasswdMD5 for Perl. This component generates insecure random values for cryptographic salts, which are used to strengthen password hashes. The built-in `rand` function, used for generating these salts, is predictable and not suitable for cryptographic purposes. This vulnerability could allow an attacker to more easily crack password hashes, potentially leading to unauthorized access or information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-6659","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"urls":["https://github.com/ronsavage/Crypt-PasswdMD5/commit/a2f821637db0296082297aa4b02254ab08f0dc5e.patch","https://github.com/ronsavage/Crypt-PasswdMD5/pull/3","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.42/source/lib/Crypt/PasswdMD5.pm#L35-47","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.43/changes","http://www.openwall.com/lists/oss-security/2026/05/08/17"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6659","description":"Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts.\n\nThe built-in rand function is predictable, and unsuitable for cryptography."}]},{"artifact":{"id":"9a350f67e34cc0a6","cpes":["cpe:2.3:a:perl-Fcntl:perl-Fcntl:0\\:1.13-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-Fcntl:perl_Fcntl:0\\:1.13-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Fcntl:perl-Fcntl:0\\:1.13-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Fcntl:perl_Fcntl:0\\:1.13-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-Fcntl:0\\:1.13-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_Fcntl:0\\:1.13-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-Fcntl:0\\:1.13-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_Fcntl:0\\:1.13-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-Fcntl","purl":"pkg:rpm/redhat/perl-Fcntl@1.13-484.el9_8?arch=x86_64&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.13-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6659","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-6659","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"risk":0.28193999999999997,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-6659","description":"A flaw was found in Crypt::PasswdMD5 for Perl. This component generates insecure random values for cryptographic salts, which are used to strengthen password hashes. The built-in `rand` function, used for generating these salts, is predictable and not suitable for cryptographic purposes. This vulnerability could allow an attacker to more easily crack password hashes, potentially leading to unauthorized access or information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-6659","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"urls":["https://github.com/ronsavage/Crypt-PasswdMD5/commit/a2f821637db0296082297aa4b02254ab08f0dc5e.patch","https://github.com/ronsavage/Crypt-PasswdMD5/pull/3","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.42/source/lib/Crypt/PasswdMD5.pm#L35-47","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.43/changes","http://www.openwall.com/lists/oss-security/2026/05/08/17"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6659","description":"Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts.\n\nThe built-in rand function is predictable, and unsuitable for cryptography."}]},{"artifact":{"id":"ccc96546d7bf7925","cpes":["cpe:2.3:a:perl-File-Basename:perl-File-Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-File-Basename:perl_File_Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_File_Basename:perl-File-Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_File_Basename:perl_File_Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-File:perl-File-Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-File:perl_File_Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_File:perl-File-Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_File:perl_File_Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-File-Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_File_Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-File-Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_File_Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-File-Basename","purl":"pkg:rpm/redhat/perl-File-Basename@2.85-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:2.85-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6659","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-6659","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"risk":0.28193999999999997,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-6659","description":"A flaw was found in Crypt::PasswdMD5 for Perl. This component generates insecure random values for cryptographic salts, which are used to strengthen password hashes. The built-in `rand` function, used for generating these salts, is predictable and not suitable for cryptographic purposes. This vulnerability could allow an attacker to more easily crack password hashes, potentially leading to unauthorized access or information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-6659","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"urls":["https://github.com/ronsavage/Crypt-PasswdMD5/commit/a2f821637db0296082297aa4b02254ab08f0dc5e.patch","https://github.com/ronsavage/Crypt-PasswdMD5/pull/3","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.42/source/lib/Crypt/PasswdMD5.pm#L35-47","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.43/changes","http://www.openwall.com/lists/oss-security/2026/05/08/17"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6659","description":"Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts.\n\nThe built-in rand function is predictable, and unsuitable for cryptography."}]},{"artifact":{"id":"2c4e8249c7be919b","cpes":["cpe:2.3:a:perl-File-stat:perl-File-stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-File-stat:perl_File_stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_File_stat:perl-File-stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_File_stat:perl_File_stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-File:perl-File-stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-File:perl_File_stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_File:perl-File-stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_File:perl_File_stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-File-stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_File_stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-File-stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_File_stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-File-stat","purl":"pkg:rpm/redhat/perl-File-stat@1.09-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.09-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6659","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-6659","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"risk":0.28193999999999997,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-6659","description":"A flaw was found in Crypt::PasswdMD5 for Perl. This component generates insecure random values for cryptographic salts, which are used to strengthen password hashes. The built-in `rand` function, used for generating these salts, is predictable and not suitable for cryptographic purposes. This vulnerability could allow an attacker to more easily crack password hashes, potentially leading to unauthorized access or information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-6659","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"urls":["https://github.com/ronsavage/Crypt-PasswdMD5/commit/a2f821637db0296082297aa4b02254ab08f0dc5e.patch","https://github.com/ronsavage/Crypt-PasswdMD5/pull/3","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.42/source/lib/Crypt/PasswdMD5.pm#L35-47","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.43/changes","http://www.openwall.com/lists/oss-security/2026/05/08/17"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6659","description":"Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts.\n\nThe built-in rand function is predictable, and unsuitable for cryptography."}]},{"artifact":{"id":"4afdea7b02a85f83","cpes":["cpe:2.3:a:perl-FileHandle:perl-FileHandle:0\\:2.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-FileHandle:perl_FileHandle:0\\:2.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_FileHandle:perl-FileHandle:0\\:2.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_FileHandle:perl_FileHandle:0\\:2.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-FileHandle:0\\:2.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_FileHandle:0\\:2.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-FileHandle:0\\:2.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_FileHandle:0\\:2.03-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-FileHandle","purl":"pkg:rpm/redhat/perl-FileHandle@2.03-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:2.03-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6659","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-6659","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"risk":0.28193999999999997,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-6659","description":"A flaw was found in Crypt::PasswdMD5 for Perl. This component generates insecure random values for cryptographic salts, which are used to strengthen password hashes. The built-in `rand` function, used for generating these salts, is predictable and not suitable for cryptographic purposes. This vulnerability could allow an attacker to more easily crack password hashes, potentially leading to unauthorized access or information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-6659","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"urls":["https://github.com/ronsavage/Crypt-PasswdMD5/commit/a2f821637db0296082297aa4b02254ab08f0dc5e.patch","https://github.com/ronsavage/Crypt-PasswdMD5/pull/3","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.42/source/lib/Crypt/PasswdMD5.pm#L35-47","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.43/changes","http://www.openwall.com/lists/oss-security/2026/05/08/17"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6659","description":"Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts.\n\nThe built-in rand function is predictable, and unsuitable for cryptography."}]},{"artifact":{"id":"3e595c731988d8d7","cpes":["cpe:2.3:a:perl-Getopt-Std:perl-Getopt-Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-Getopt-Std:perl_Getopt_Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Getopt_Std:perl-Getopt-Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Getopt_Std:perl_Getopt_Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-Getopt:perl-Getopt-Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-Getopt:perl_Getopt_Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Getopt:perl-Getopt-Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Getopt:perl_Getopt_Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-Getopt-Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_Getopt_Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-Getopt-Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_Getopt_Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-Getopt-Std","purl":"pkg:rpm/redhat/perl-Getopt-Std@1.12-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.12-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6659","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-6659","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"risk":0.28193999999999997,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-6659","description":"A flaw was found in Crypt::PasswdMD5 for Perl. This component generates insecure random values for cryptographic salts, which are used to strengthen password hashes. The built-in `rand` function, used for generating these salts, is predictable and not suitable for cryptographic purposes. This vulnerability could allow an attacker to more easily crack password hashes, potentially leading to unauthorized access or information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-6659","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"urls":["https://github.com/ronsavage/Crypt-PasswdMD5/commit/a2f821637db0296082297aa4b02254ab08f0dc5e.patch","https://github.com/ronsavage/Crypt-PasswdMD5/pull/3","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.42/source/lib/Crypt/PasswdMD5.pm#L35-47","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.43/changes","http://www.openwall.com/lists/oss-security/2026/05/08/17"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6659","description":"Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts.\n\nThe built-in rand function is predictable, and unsuitable for cryptography."}]},{"artifact":{"id":"8e1068a3ad769685","cpes":["cpe:2.3:a:perl-IO:perl-IO:0\\:1.43-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-IO:perl_IO:0\\:1.43-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_IO:perl-IO:0\\:1.43-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_IO:perl_IO:0\\:1.43-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-IO:0\\:1.43-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_IO:0\\:1.43-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-IO:0\\:1.43-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_IO:0\\:1.43-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-IO","purl":"pkg:rpm/redhat/perl-IO@1.43-484.el9_8?arch=x86_64&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.43-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6659","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-6659","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"risk":0.28193999999999997,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-6659","description":"A flaw was found in Crypt::PasswdMD5 for Perl. This component generates insecure random values for cryptographic salts, which are used to strengthen password hashes. The built-in `rand` function, used for generating these salts, is predictable and not suitable for cryptographic purposes. This vulnerability could allow an attacker to more easily crack password hashes, potentially leading to unauthorized access or information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-6659","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"urls":["https://github.com/ronsavage/Crypt-PasswdMD5/commit/a2f821637db0296082297aa4b02254ab08f0dc5e.patch","https://github.com/ronsavage/Crypt-PasswdMD5/pull/3","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.42/source/lib/Crypt/PasswdMD5.pm#L35-47","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.43/changes","http://www.openwall.com/lists/oss-security/2026/05/08/17"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6659","description":"Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts.\n\nThe built-in rand function is predictable, and unsuitable for cryptography."}]},{"artifact":{"id":"fe624a2355bcc9a0","cpes":["cpe:2.3:a:perl-IPC-Open3:perl-IPC-Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-IPC-Open3:perl_IPC_Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_IPC_Open3:perl-IPC-Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_IPC_Open3:perl_IPC_Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-IPC:perl-IPC-Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-IPC:perl_IPC_Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_IPC:perl-IPC-Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_IPC:perl_IPC_Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-IPC-Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_IPC_Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-IPC-Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_IPC_Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-IPC-Open3","purl":"pkg:rpm/redhat/perl-IPC-Open3@1.21-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.21-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6659","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-6659","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"risk":0.28193999999999997,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-6659","description":"A flaw was found in Crypt::PasswdMD5 for Perl. This component generates insecure random values for cryptographic salts, which are used to strengthen password hashes. The built-in `rand` function, used for generating these salts, is predictable and not suitable for cryptographic purposes. This vulnerability could allow an attacker to more easily crack password hashes, potentially leading to unauthorized access or information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-6659","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"urls":["https://github.com/ronsavage/Crypt-PasswdMD5/commit/a2f821637db0296082297aa4b02254ab08f0dc5e.patch","https://github.com/ronsavage/Crypt-PasswdMD5/pull/3","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.42/source/lib/Crypt/PasswdMD5.pm#L35-47","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.43/changes","http://www.openwall.com/lists/oss-security/2026/05/08/17"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6659","description":"Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts.\n\nThe built-in rand function is predictable, and unsuitable for cryptography."}]},{"artifact":{"id":"966429419a0c4e60","cpes":["cpe:2.3:a:perl-POSIX:perl-POSIX:0\\:1.94-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-POSIX:perl_POSIX:0\\:1.94-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_POSIX:perl-POSIX:0\\:1.94-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_POSIX:perl_POSIX:0\\:1.94-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-POSIX:0\\:1.94-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_POSIX:0\\:1.94-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-POSIX:0\\:1.94-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_POSIX:0\\:1.94-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-POSIX","purl":"pkg:rpm/redhat/perl-POSIX@1.94-484.el9_8?arch=x86_64&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.94-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6659","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-6659","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"risk":0.28193999999999997,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-6659","description":"A flaw was found in Crypt::PasswdMD5 for Perl. This component generates insecure random values for cryptographic salts, which are used to strengthen password hashes. The built-in `rand` function, used for generating these salts, is predictable and not suitable for cryptographic purposes. This vulnerability could allow an attacker to more easily crack password hashes, potentially leading to unauthorized access or information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-6659","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"urls":["https://github.com/ronsavage/Crypt-PasswdMD5/commit/a2f821637db0296082297aa4b02254ab08f0dc5e.patch","https://github.com/ronsavage/Crypt-PasswdMD5/pull/3","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.42/source/lib/Crypt/PasswdMD5.pm#L35-47","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.43/changes","http://www.openwall.com/lists/oss-security/2026/05/08/17"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6659","description":"Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts.\n\nThe built-in rand function is predictable, and unsuitable for cryptography."}]},{"artifact":{"id":"ed8cd6cbedb5c087","cpes":["cpe:2.3:a:perl-SelectSaver:perl-SelectSaver:0\\:1.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-SelectSaver:perl_SelectSaver:0\\:1.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_SelectSaver:perl-SelectSaver:0\\:1.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_SelectSaver:perl_SelectSaver:0\\:1.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-SelectSaver:0\\:1.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_SelectSaver:0\\:1.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-SelectSaver:0\\:1.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_SelectSaver:0\\:1.02-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-SelectSaver","purl":"pkg:rpm/redhat/perl-SelectSaver@1.02-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.02-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6659","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-6659","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"risk":0.28193999999999997,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-6659","description":"A flaw was found in Crypt::PasswdMD5 for Perl. This component generates insecure random values for cryptographic salts, which are used to strengthen password hashes. The built-in `rand` function, used for generating these salts, is predictable and not suitable for cryptographic purposes. This vulnerability could allow an attacker to more easily crack password hashes, potentially leading to unauthorized access or information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-6659","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"urls":["https://github.com/ronsavage/Crypt-PasswdMD5/commit/a2f821637db0296082297aa4b02254ab08f0dc5e.patch","https://github.com/ronsavage/Crypt-PasswdMD5/pull/3","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.42/source/lib/Crypt/PasswdMD5.pm#L35-47","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.43/changes","http://www.openwall.com/lists/oss-security/2026/05/08/17"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6659","description":"Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts.\n\nThe built-in rand function is predictable, and unsuitable for cryptography."}]},{"artifact":{"id":"9bf020807c3348c1","cpes":["cpe:2.3:a:perl-Symbol:perl-Symbol:0\\:1.08-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-Symbol:perl_Symbol:0\\:1.08-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Symbol:perl-Symbol:0\\:1.08-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Symbol:perl_Symbol:0\\:1.08-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-Symbol:0\\:1.08-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_Symbol:0\\:1.08-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-Symbol:0\\:1.08-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_Symbol:0\\:1.08-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-Symbol","purl":"pkg:rpm/redhat/perl-Symbol@1.08-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.08-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6659","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-6659","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"risk":0.28193999999999997,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-6659","description":"A flaw was found in Crypt::PasswdMD5 for Perl. This component generates insecure random values for cryptographic salts, which are used to strengthen password hashes. The built-in `rand` function, used for generating these salts, is predictable and not suitable for cryptographic purposes. This vulnerability could allow an attacker to more easily crack password hashes, potentially leading to unauthorized access or information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-6659","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"urls":["https://github.com/ronsavage/Crypt-PasswdMD5/commit/a2f821637db0296082297aa4b02254ab08f0dc5e.patch","https://github.com/ronsavage/Crypt-PasswdMD5/pull/3","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.42/source/lib/Crypt/PasswdMD5.pm#L35-47","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.43/changes","http://www.openwall.com/lists/oss-security/2026/05/08/17"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6659","description":"Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts.\n\nThe built-in rand function is predictable, and unsuitable for cryptography."}]},{"artifact":{"id":"f7b1f706a4c8603f","cpes":["cpe:2.3:a:perl-base:perl-base:0\\:2.27-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-base:perl_base:0\\:2.27-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl-base:0\\:2.27-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl_base:0\\:2.27-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-base:0\\:2.27-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_base:0\\:2.27-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-base:0\\:2.27-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_base:0\\:2.27-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-base","purl":"pkg:rpm/redhat/perl-base@2.27-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:2.27-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6659","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-6659","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"risk":0.28193999999999997,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-6659","description":"A flaw was found in Crypt::PasswdMD5 for Perl. This component generates insecure random values for cryptographic salts, which are used to strengthen password hashes. The built-in `rand` function, used for generating these salts, is predictable and not suitable for cryptographic purposes. This vulnerability could allow an attacker to more easily crack password hashes, potentially leading to unauthorized access or information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-6659","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"urls":["https://github.com/ronsavage/Crypt-PasswdMD5/commit/a2f821637db0296082297aa4b02254ab08f0dc5e.patch","https://github.com/ronsavage/Crypt-PasswdMD5/pull/3","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.42/source/lib/Crypt/PasswdMD5.pm#L35-47","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.43/changes","http://www.openwall.com/lists/oss-security/2026/05/08/17"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6659","description":"Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts.\n\nThe built-in rand function is predictable, and unsuitable for cryptography."}]},{"artifact":{"id":"51a4d5612497e394","cpes":["cpe:2.3:a:perl-if:perl-if:0\\:0.60.800-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-if:perl_if:0\\:0.60.800-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_if:perl-if:0\\:0.60.800-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_if:perl_if:0\\:0.60.800-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-if:0\\:0.60.800-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_if:0\\:0.60.800-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-if:0\\:0.60.800-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_if:0\\:0.60.800-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-if","purl":"pkg:rpm/redhat/perl-if@0.60.800-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:0.60.800-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6659","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-6659","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"risk":0.28193999999999997,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-6659","description":"A flaw was found in Crypt::PasswdMD5 for Perl. This component generates insecure random values for cryptographic salts, which are used to strengthen password hashes. The built-in `rand` function, used for generating these salts, is predictable and not suitable for cryptographic purposes. This vulnerability could allow an attacker to more easily crack password hashes, potentially leading to unauthorized access or information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-6659","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"urls":["https://github.com/ronsavage/Crypt-PasswdMD5/commit/a2f821637db0296082297aa4b02254ab08f0dc5e.patch","https://github.com/ronsavage/Crypt-PasswdMD5/pull/3","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.42/source/lib/Crypt/PasswdMD5.pm#L35-47","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.43/changes","http://www.openwall.com/lists/oss-security/2026/05/08/17"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6659","description":"Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts.\n\nThe built-in rand function is predictable, and unsuitable for cryptography."}]},{"artifact":{"id":"aa8ec3d3a0c8cb51","cpes":["cpe:2.3:a:perl-interpreter:perl-interpreter:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-interpreter:perl_interpreter:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_interpreter:perl-interpreter:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_interpreter:perl_interpreter:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-interpreter:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_interpreter:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-interpreter:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_interpreter:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-interpreter","purl":"pkg:rpm/redhat/perl-interpreter@5.32.1-484.el9_8?arch=x86_64&distro=rhel-9.8&epoch=4&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"4:5.32.1-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":4,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6659","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-6659","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"risk":0.28193999999999997,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-6659","description":"A flaw was found in Crypt::PasswdMD5 for Perl. This component generates insecure random values for cryptographic salts, which are used to strengthen password hashes. The built-in `rand` function, used for generating these salts, is predictable and not suitable for cryptographic purposes. This vulnerability could allow an attacker to more easily crack password hashes, potentially leading to unauthorized access or information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-6659","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"urls":["https://github.com/ronsavage/Crypt-PasswdMD5/commit/a2f821637db0296082297aa4b02254ab08f0dc5e.patch","https://github.com/ronsavage/Crypt-PasswdMD5/pull/3","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.42/source/lib/Crypt/PasswdMD5.pm#L35-47","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.43/changes","http://www.openwall.com/lists/oss-security/2026/05/08/17"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6659","description":"Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts.\n\nThe built-in rand function is predictable, and unsuitable for cryptography."}]},{"artifact":{"id":"767f57c8ab68452b","cpes":["cpe:2.3:a:perl-lib:perl-lib:0\\:0.65-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-lib:perl_lib:0\\:0.65-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_lib:perl-lib:0\\:0.65-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_lib:perl_lib:0\\:0.65-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-lib:0\\:0.65-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_lib:0\\:0.65-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-lib:0\\:0.65-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_lib:0\\:0.65-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-lib","purl":"pkg:rpm/redhat/perl-lib@0.65-484.el9_8?arch=x86_64&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:0.65-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6659","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-6659","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"risk":0.28193999999999997,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-6659","description":"A flaw was found in Crypt::PasswdMD5 for Perl. This component generates insecure random values for cryptographic salts, which are used to strengthen password hashes. The built-in `rand` function, used for generating these salts, is predictable and not suitable for cryptographic purposes. This vulnerability could allow an attacker to more easily crack password hashes, potentially leading to unauthorized access or information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-6659","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"urls":["https://github.com/ronsavage/Crypt-PasswdMD5/commit/a2f821637db0296082297aa4b02254ab08f0dc5e.patch","https://github.com/ronsavage/Crypt-PasswdMD5/pull/3","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.42/source/lib/Crypt/PasswdMD5.pm#L35-47","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.43/changes","http://www.openwall.com/lists/oss-security/2026/05/08/17"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6659","description":"Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts.\n\nThe built-in rand function is predictable, and unsuitable for cryptography."}]},{"artifact":{"id":"afda1e38bc7344c3","cpes":["cpe:2.3:a:perl-libs:perl-libs:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-libs:perl_libs:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_libs:perl-libs:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_libs:perl_libs:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-libs:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_libs:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-libs:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_libs:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-libs","purl":"pkg:rpm/redhat/perl-libs@5.32.1-484.el9_8?arch=x86_64&distro=rhel-9.8&epoch=4&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"4:5.32.1-484.el9_8","language":"","licenses":["(GPL+ or Artistic) and BSD and HSRL and MIT and UCD and Public domain"],"metadata":{"epoch":4,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6659","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-6659","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"risk":0.28193999999999997,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-6659","description":"A flaw was found in Crypt::PasswdMD5 for Perl. This component generates insecure random values for cryptographic salts, which are used to strengthen password hashes. The built-in `rand` function, used for generating these salts, is predictable and not suitable for cryptographic purposes. This vulnerability could allow an attacker to more easily crack password hashes, potentially leading to unauthorized access or information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-6659","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"urls":["https://github.com/ronsavage/Crypt-PasswdMD5/commit/a2f821637db0296082297aa4b02254ab08f0dc5e.patch","https://github.com/ronsavage/Crypt-PasswdMD5/pull/3","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.42/source/lib/Crypt/PasswdMD5.pm#L35-47","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.43/changes","http://www.openwall.com/lists/oss-security/2026/05/08/17"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6659","description":"Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts.\n\nThe built-in rand function is predictable, and unsuitable for cryptography."}]},{"artifact":{"id":"84662c3c03211d25","cpes":["cpe:2.3:a:perl-mro:perl-mro:0\\:1.23-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-mro:perl_mro:0\\:1.23-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_mro:perl-mro:0\\:1.23-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_mro:perl_mro:0\\:1.23-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-mro:0\\:1.23-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_mro:0\\:1.23-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-mro:0\\:1.23-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_mro:0\\:1.23-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-mro","purl":"pkg:rpm/redhat/perl-mro@1.23-484.el9_8?arch=x86_64&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.23-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6659","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-6659","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"risk":0.28193999999999997,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-6659","description":"A flaw was found in Crypt::PasswdMD5 for Perl. This component generates insecure random values for cryptographic salts, which are used to strengthen password hashes. The built-in `rand` function, used for generating these salts, is predictable and not suitable for cryptographic purposes. This vulnerability could allow an attacker to more easily crack password hashes, potentially leading to unauthorized access or information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-6659","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"urls":["https://github.com/ronsavage/Crypt-PasswdMD5/commit/a2f821637db0296082297aa4b02254ab08f0dc5e.patch","https://github.com/ronsavage/Crypt-PasswdMD5/pull/3","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.42/source/lib/Crypt/PasswdMD5.pm#L35-47","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.43/changes","http://www.openwall.com/lists/oss-security/2026/05/08/17"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6659","description":"Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts.\n\nThe built-in rand function is predictable, and unsuitable for cryptography."}]},{"artifact":{"id":"cfd33bba5b1551d2","cpes":["cpe:2.3:a:perl-overload:perl-overload:0\\:1.31-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-overload:perl_overload:0\\:1.31-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_overload:perl-overload:0\\:1.31-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_overload:perl_overload:0\\:1.31-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-overload:0\\:1.31-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_overload:0\\:1.31-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-overload:0\\:1.31-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_overload:0\\:1.31-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-overload","purl":"pkg:rpm/redhat/perl-overload@1.31-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.31-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6659","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-6659","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"risk":0.28193999999999997,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-6659","description":"A flaw was found in Crypt::PasswdMD5 for Perl. This component generates insecure random values for cryptographic salts, which are used to strengthen password hashes. The built-in `rand` function, used for generating these salts, is predictable and not suitable for cryptographic purposes. This vulnerability could allow an attacker to more easily crack password hashes, potentially leading to unauthorized access or information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-6659","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"urls":["https://github.com/ronsavage/Crypt-PasswdMD5/commit/a2f821637db0296082297aa4b02254ab08f0dc5e.patch","https://github.com/ronsavage/Crypt-PasswdMD5/pull/3","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.42/source/lib/Crypt/PasswdMD5.pm#L35-47","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.43/changes","http://www.openwall.com/lists/oss-security/2026/05/08/17"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6659","description":"Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts.\n\nThe built-in rand function is predictable, and unsuitable for cryptography."}]},{"artifact":{"id":"15c2c34f0c45d893","cpes":["cpe:2.3:a:perl-overloading:perl-overloading:0\\:0.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-overloading:perl_overloading:0\\:0.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_overloading:perl-overloading:0\\:0.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_overloading:perl_overloading:0\\:0.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-overloading:0\\:0.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_overloading:0\\:0.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-overloading:0\\:0.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_overloading:0\\:0.02-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-overloading","purl":"pkg:rpm/redhat/perl-overloading@0.02-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:0.02-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6659","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-6659","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"risk":0.28193999999999997,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-6659","description":"A flaw was found in Crypt::PasswdMD5 for Perl. This component generates insecure random values for cryptographic salts, which are used to strengthen password hashes. The built-in `rand` function, used for generating these salts, is predictable and not suitable for cryptographic purposes. This vulnerability could allow an attacker to more easily crack password hashes, potentially leading to unauthorized access or information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-6659","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"urls":["https://github.com/ronsavage/Crypt-PasswdMD5/commit/a2f821637db0296082297aa4b02254ab08f0dc5e.patch","https://github.com/ronsavage/Crypt-PasswdMD5/pull/3","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.42/source/lib/Crypt/PasswdMD5.pm#L35-47","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.43/changes","http://www.openwall.com/lists/oss-security/2026/05/08/17"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6659","description":"Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts.\n\nThe built-in rand function is predictable, and unsuitable for cryptography."}]},{"artifact":{"id":"84db60c0f6c9abcf","cpes":["cpe:2.3:a:perl-subs:perl-subs:0\\:1.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-subs:perl_subs:0\\:1.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_subs:perl-subs:0\\:1.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_subs:perl_subs:0\\:1.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-subs:0\\:1.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_subs:0\\:1.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-subs:0\\:1.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_subs:0\\:1.03-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-subs","purl":"pkg:rpm/redhat/perl-subs@1.03-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.03-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6659","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-6659","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"risk":0.28193999999999997,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-6659","description":"A flaw was found in Crypt::PasswdMD5 for Perl. This component generates insecure random values for cryptographic salts, which are used to strengthen password hashes. The built-in `rand` function, used for generating these salts, is predictable and not suitable for cryptographic purposes. This vulnerability could allow an attacker to more easily crack password hashes, potentially leading to unauthorized access or information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-6659","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"urls":["https://github.com/ronsavage/Crypt-PasswdMD5/commit/a2f821637db0296082297aa4b02254ab08f0dc5e.patch","https://github.com/ronsavage/Crypt-PasswdMD5/pull/3","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.42/source/lib/Crypt/PasswdMD5.pm#L35-47","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.43/changes","http://www.openwall.com/lists/oss-security/2026/05/08/17"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6659","description":"Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts.\n\nThe built-in rand function is predictable, and unsuitable for cryptography."}]},{"artifact":{"id":"0ad1840c208a6594","cpes":["cpe:2.3:a:perl-vars:perl-vars:0\\:1.05-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-vars:perl_vars:0\\:1.05-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_vars:perl-vars:0\\:1.05-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_vars:perl_vars:0\\:1.05-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-vars:0\\:1.05-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_vars:0\\:1.05-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-vars:0\\:1.05-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_vars:0\\:1.05-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-vars","purl":"pkg:rpm/redhat/perl-vars@1.05-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.05-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6659","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-6659","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"risk":0.28193999999999997,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-6659","description":"A flaw was found in Crypt::PasswdMD5 for Perl. This component generates insecure random values for cryptographic salts, which are used to strengthen password hashes. The built-in `rand` function, used for generating these salts, is predictable and not suitable for cryptographic purposes. This vulnerability could allow an attacker to more easily crack password hashes, potentially leading to unauthorized access or information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-6659","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6659","cwe":"CWE-338","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-6659","date":"2026-10-10","epss":0.00508,"percentile":0.41622}],"urls":["https://github.com/ronsavage/Crypt-PasswdMD5/commit/a2f821637db0296082297aa4b02254ab08f0dc5e.patch","https://github.com/ronsavage/Crypt-PasswdMD5/pull/3","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.42/source/lib/Crypt/PasswdMD5.pm#L35-47","https://metacpan.org/release/RSAVAGE/Crypt-PasswdMD5-1.43/changes","http://www.openwall.com/lists/oss-security/2026/05/08/17"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6659","description":"Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts.\n\nThe built-in rand function is predictable, and unsuitable for cryptography."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-3297","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-3297","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-3297","cwe":"CWE-416","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-3297","cwe":"CWE-416","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-3297","date":"2026-10-10","epss":0.0052,"percentile":0.42427}],"risk":0.2808,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-3297","description":"A heap use-after-free vulnerability was found in Vim's process_next_cpt_value() function of the src/insexpand.c file. This flaw occurs due to the usage of freed memory when 'tagfunc' wipes out the buffer that holds 'complete.' This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap use-after-free issue that causes an application to crash, possibly executing code and corrupting memory."},"relatedVulnerabilities":[{"id":"CVE-2022-3297","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-3297","cwe":"CWE-416","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-3297","cwe":"CWE-416","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-3297","date":"2026-10-10","epss":0.0052,"percentile":0.42427}],"urls":["https://github.com/vim/vim/commit/0ff01835a40f549c5c4a550502f62a2ac9ac447c","https://huntr.dev/bounties/1aa9ec92-0355-4710-bf85-5bce9effa01c","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4QI7AETXBHPC7SGA77Q7O5IEGULWYET7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTBVD4J2SKVSWK4VBN5JP5OEVK6GDS3N/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LSSEWQLK55MCNT4Z2IIJEJYEI5HLCODI/","https://security.gentoo.org/glsa/202305-16"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-3297","description":"Use After Free in GitHub repository vim/vim prior to 9.0.0579."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-0051","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2023-0051","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-0051","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2023-0051","date":"2026-10-10","epss":0.00518,"percentile":0.42321}],"risk":0.27972,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-0051","description":"A heap-based buffer overflow was found in Vim in the msg_puts_printf function in the message.c file. The issue occurs because of an invalid memory access when calculating the length of a string when a specially crafted input is processed. This flaw allows an attacker who can trick a user into opening a specially crafted file into triggering the heap-based buffer overflow, causing the application to crash."},"relatedVulnerabilities":[{"id":"CVE-2023-0051","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.3,"impactScore":5.9,"exploitabilityScore":1.4},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-0051","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2023-0051","date":"2026-10-10","epss":0.00518,"percentile":0.42321}],"urls":["http://seclists.org/fulldisclosure/2023/Mar/17","https://github.com/vim/vim/commit/c32949b0779106ed5710ae3bffc5053e49083ab4","https://huntr.dev/bounties/1c8686db-baa6-42dc-ba45-aed322802de9","https://security.gentoo.org/glsa/202305-16","https://support.apple.com/kb/HT213670"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-0051","description":"Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-0433","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2023-0433","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-0433","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2023-0433","date":"2026-10-10","epss":0.00516,"percentile":0.42186}],"risk":0.27864,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-0433","description":"Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225."},"relatedVulnerabilities":[{"id":"CVE-2023-0433","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-0433","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2023-0433","date":"2026-10-10","epss":0.00516,"percentile":0.42186}],"urls":["http://seclists.org/fulldisclosure/2023/Mar/17","http://seclists.org/fulldisclosure/2023/Mar/18","http://seclists.org/fulldisclosure/2023/Mar/21","https://github.com/vim/vim/commit/11977f917506d950b7e0cae558bd9189260b253b","https://huntr.dev/bounties/ae933869-a1ec-402a-bbea-d51764c6618e","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4EX6N2DB75A73MQGVW3CS4VTNPAYVM2M/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PZWIJBSQX53P7DHV77KRXJIXA4GH7XHC/","https://support.apple.com/kb/HT213670","https://support.apple.com/kb/HT213675","https://support.apple.com/kb/HT213677"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-0433","description":"Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225."}]},{"artifact":{"id":"6a400801b03158c5","cpes":["cpe:2.3:a:perl-AutoLoader:perl-AutoLoader:0\\:5.74-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-AutoLoader:perl_AutoLoader:0\\:5.74-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_AutoLoader:perl-AutoLoader:0\\:5.74-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_AutoLoader:perl_AutoLoader:0\\:5.74-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-AutoLoader:0\\:5.74-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_AutoLoader:0\\:5.74-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-AutoLoader:0\\:5.74-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_AutoLoader:0\\:5.74-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-AutoLoader","purl":"pkg:rpm/redhat/perl-AutoLoader@5.74-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:5.74-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-45190","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-45190","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"risk":0.27829999999999994,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-45190","description":"A flaw was found in Net::CIDR::Lite, a Perl module for handling IP address ranges. This vulnerability allows a remote attacker to bypass IP Access Control Lists (ACLs) due to improper validation of IP address and CIDR (Classless Inter-Domain Routing) mask inputs. Specifically, inputs containing trailing newlines or non-ASCII digit characters are incorrectly processed, leading to a mismatch between the intended and actual IP addresses. This can cause functions like `find()` and `bin_find()` to incorrectly allow or deny access, compromising network security policies."},"relatedVulnerabilities":[{"id":"CVE-2026-45190","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"urls":["https://github.com/stigtsp/Net-CIDR-Lite/commit/ca9542adec87110556601d7ce48381ea8d13e692.patch","https://metacpan.org/release/STIGTSP/Net-CIDR-Lite-0.24/changes","https://www.cve.org/CVERecord?id=CVE-2026-45191"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-45190","description":"Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass.\n\nInputs containing a trailing newline or non-ASCII digit characters pass the validators but are then re-encoded by the parser to a different address than the input string spelled. find() and bin_find() can match or miss addresses as a result.\n\nExample:\n\n  my $cidr = Net::CIDR::Lite->new();\n  $cidr->add(\"::1\\n/128\");\n  $cidr->find(\"::1a\");  # incorrectly returns true\n\nSee also CVE-2026-45191."}]},{"artifact":{"id":"aae7e303a752a1c7","cpes":["cpe:2.3:a:perl-B:perl-B:0\\:1.80-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-B:perl_B:0\\:1.80-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_B:perl-B:0\\:1.80-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_B:perl_B:0\\:1.80-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-B:0\\:1.80-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_B:0\\:1.80-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-B:0\\:1.80-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_B:0\\:1.80-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-B","purl":"pkg:rpm/redhat/perl-B@1.80-484.el9_8?arch=x86_64&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.80-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-45190","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-45190","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"risk":0.27829999999999994,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-45190","description":"A flaw was found in Net::CIDR::Lite, a Perl module for handling IP address ranges. This vulnerability allows a remote attacker to bypass IP Access Control Lists (ACLs) due to improper validation of IP address and CIDR (Classless Inter-Domain Routing) mask inputs. Specifically, inputs containing trailing newlines or non-ASCII digit characters are incorrectly processed, leading to a mismatch between the intended and actual IP addresses. This can cause functions like `find()` and `bin_find()` to incorrectly allow or deny access, compromising network security policies."},"relatedVulnerabilities":[{"id":"CVE-2026-45190","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"urls":["https://github.com/stigtsp/Net-CIDR-Lite/commit/ca9542adec87110556601d7ce48381ea8d13e692.patch","https://metacpan.org/release/STIGTSP/Net-CIDR-Lite-0.24/changes","https://www.cve.org/CVERecord?id=CVE-2026-45191"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-45190","description":"Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass.\n\nInputs containing a trailing newline or non-ASCII digit characters pass the validators but are then re-encoded by the parser to a different address than the input string spelled. find() and bin_find() can match or miss addresses as a result.\n\nExample:\n\n  my $cidr = Net::CIDR::Lite->new();\n  $cidr->add(\"::1\\n/128\");\n  $cidr->find(\"::1a\");  # incorrectly returns true\n\nSee also CVE-2026-45191."}]},{"artifact":{"id":"64f2bf74d87051e4","cpes":["cpe:2.3:a:perl-Class-Struct:perl-Class-Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-Class-Struct:perl_Class_Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Class_Struct:perl-Class-Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Class_Struct:perl_Class_Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-Class:perl-Class-Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-Class:perl_Class_Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Class:perl-Class-Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Class:perl_Class_Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-Class-Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_Class_Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-Class-Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_Class_Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-Class-Struct","purl":"pkg:rpm/redhat/perl-Class-Struct@0.66-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:0.66-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-45190","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-45190","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"risk":0.27829999999999994,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-45190","description":"A flaw was found in Net::CIDR::Lite, a Perl module for handling IP address ranges. This vulnerability allows a remote attacker to bypass IP Access Control Lists (ACLs) due to improper validation of IP address and CIDR (Classless Inter-Domain Routing) mask inputs. Specifically, inputs containing trailing newlines or non-ASCII digit characters are incorrectly processed, leading to a mismatch between the intended and actual IP addresses. This can cause functions like `find()` and `bin_find()` to incorrectly allow or deny access, compromising network security policies."},"relatedVulnerabilities":[{"id":"CVE-2026-45190","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"urls":["https://github.com/stigtsp/Net-CIDR-Lite/commit/ca9542adec87110556601d7ce48381ea8d13e692.patch","https://metacpan.org/release/STIGTSP/Net-CIDR-Lite-0.24/changes","https://www.cve.org/CVERecord?id=CVE-2026-45191"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-45190","description":"Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass.\n\nInputs containing a trailing newline or non-ASCII digit characters pass the validators but are then re-encoded by the parser to a different address than the input string spelled. find() and bin_find() can match or miss addresses as a result.\n\nExample:\n\n  my $cidr = Net::CIDR::Lite->new();\n  $cidr->add(\"::1\\n/128\");\n  $cidr->find(\"::1a\");  # incorrectly returns true\n\nSee also CVE-2026-45191."}]},{"artifact":{"id":"0ee020f622eb09ee","cpes":["cpe:2.3:a:perl-DynaLoader:perl-DynaLoader:0\\:1.47-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-DynaLoader:perl_DynaLoader:0\\:1.47-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_DynaLoader:perl-DynaLoader:0\\:1.47-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_DynaLoader:perl_DynaLoader:0\\:1.47-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-DynaLoader:0\\:1.47-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_DynaLoader:0\\:1.47-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-DynaLoader:0\\:1.47-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_DynaLoader:0\\:1.47-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-DynaLoader","purl":"pkg:rpm/redhat/perl-DynaLoader@1.47-484.el9_8?arch=x86_64&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.47-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-45190","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-45190","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"risk":0.27829999999999994,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-45190","description":"A flaw was found in Net::CIDR::Lite, a Perl module for handling IP address ranges. This vulnerability allows a remote attacker to bypass IP Access Control Lists (ACLs) due to improper validation of IP address and CIDR (Classless Inter-Domain Routing) mask inputs. Specifically, inputs containing trailing newlines or non-ASCII digit characters are incorrectly processed, leading to a mismatch between the intended and actual IP addresses. This can cause functions like `find()` and `bin_find()` to incorrectly allow or deny access, compromising network security policies."},"relatedVulnerabilities":[{"id":"CVE-2026-45190","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"urls":["https://github.com/stigtsp/Net-CIDR-Lite/commit/ca9542adec87110556601d7ce48381ea8d13e692.patch","https://metacpan.org/release/STIGTSP/Net-CIDR-Lite-0.24/changes","https://www.cve.org/CVERecord?id=CVE-2026-45191"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-45190","description":"Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass.\n\nInputs containing a trailing newline or non-ASCII digit characters pass the validators but are then re-encoded by the parser to a different address than the input string spelled. find() and bin_find() can match or miss addresses as a result.\n\nExample:\n\n  my $cidr = Net::CIDR::Lite->new();\n  $cidr->add(\"::1\\n/128\");\n  $cidr->find(\"::1a\");  # incorrectly returns true\n\nSee also CVE-2026-45191."}]},{"artifact":{"id":"2c29c58595b13830","cpes":["cpe:2.3:a:perl-Errno:perl-Errno:0\\:1.30-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-Errno:perl_Errno:0\\:1.30-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Errno:perl-Errno:0\\:1.30-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Errno:perl_Errno:0\\:1.30-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-Errno:0\\:1.30-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_Errno:0\\:1.30-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-Errno:0\\:1.30-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_Errno:0\\:1.30-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-Errno","purl":"pkg:rpm/redhat/perl-Errno@1.30-484.el9_8?arch=x86_64&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.30-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-45190","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-45190","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"risk":0.27829999999999994,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-45190","description":"A flaw was found in Net::CIDR::Lite, a Perl module for handling IP address ranges. This vulnerability allows a remote attacker to bypass IP Access Control Lists (ACLs) due to improper validation of IP address and CIDR (Classless Inter-Domain Routing) mask inputs. Specifically, inputs containing trailing newlines or non-ASCII digit characters are incorrectly processed, leading to a mismatch between the intended and actual IP addresses. This can cause functions like `find()` and `bin_find()` to incorrectly allow or deny access, compromising network security policies."},"relatedVulnerabilities":[{"id":"CVE-2026-45190","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"urls":["https://github.com/stigtsp/Net-CIDR-Lite/commit/ca9542adec87110556601d7ce48381ea8d13e692.patch","https://metacpan.org/release/STIGTSP/Net-CIDR-Lite-0.24/changes","https://www.cve.org/CVERecord?id=CVE-2026-45191"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-45190","description":"Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass.\n\nInputs containing a trailing newline or non-ASCII digit characters pass the validators but are then re-encoded by the parser to a different address than the input string spelled. find() and bin_find() can match or miss addresses as a result.\n\nExample:\n\n  my $cidr = Net::CIDR::Lite->new();\n  $cidr->add(\"::1\\n/128\");\n  $cidr->find(\"::1a\");  # incorrectly returns true\n\nSee also CVE-2026-45191."}]},{"artifact":{"id":"9a350f67e34cc0a6","cpes":["cpe:2.3:a:perl-Fcntl:perl-Fcntl:0\\:1.13-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-Fcntl:perl_Fcntl:0\\:1.13-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Fcntl:perl-Fcntl:0\\:1.13-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Fcntl:perl_Fcntl:0\\:1.13-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-Fcntl:0\\:1.13-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_Fcntl:0\\:1.13-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-Fcntl:0\\:1.13-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_Fcntl:0\\:1.13-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-Fcntl","purl":"pkg:rpm/redhat/perl-Fcntl@1.13-484.el9_8?arch=x86_64&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.13-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-45190","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-45190","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"risk":0.27829999999999994,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-45190","description":"A flaw was found in Net::CIDR::Lite, a Perl module for handling IP address ranges. This vulnerability allows a remote attacker to bypass IP Access Control Lists (ACLs) due to improper validation of IP address and CIDR (Classless Inter-Domain Routing) mask inputs. Specifically, inputs containing trailing newlines or non-ASCII digit characters are incorrectly processed, leading to a mismatch between the intended and actual IP addresses. This can cause functions like `find()` and `bin_find()` to incorrectly allow or deny access, compromising network security policies."},"relatedVulnerabilities":[{"id":"CVE-2026-45190","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"urls":["https://github.com/stigtsp/Net-CIDR-Lite/commit/ca9542adec87110556601d7ce48381ea8d13e692.patch","https://metacpan.org/release/STIGTSP/Net-CIDR-Lite-0.24/changes","https://www.cve.org/CVERecord?id=CVE-2026-45191"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-45190","description":"Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass.\n\nInputs containing a trailing newline or non-ASCII digit characters pass the validators but are then re-encoded by the parser to a different address than the input string spelled. find() and bin_find() can match or miss addresses as a result.\n\nExample:\n\n  my $cidr = Net::CIDR::Lite->new();\n  $cidr->add(\"::1\\n/128\");\n  $cidr->find(\"::1a\");  # incorrectly returns true\n\nSee also CVE-2026-45191."}]},{"artifact":{"id":"ccc96546d7bf7925","cpes":["cpe:2.3:a:perl-File-Basename:perl-File-Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-File-Basename:perl_File_Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_File_Basename:perl-File-Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_File_Basename:perl_File_Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-File:perl-File-Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-File:perl_File_Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_File:perl-File-Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_File:perl_File_Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-File-Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_File_Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-File-Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_File_Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-File-Basename","purl":"pkg:rpm/redhat/perl-File-Basename@2.85-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:2.85-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-45190","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-45190","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"risk":0.27829999999999994,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-45190","description":"A flaw was found in Net::CIDR::Lite, a Perl module for handling IP address ranges. This vulnerability allows a remote attacker to bypass IP Access Control Lists (ACLs) due to improper validation of IP address and CIDR (Classless Inter-Domain Routing) mask inputs. Specifically, inputs containing trailing newlines or non-ASCII digit characters are incorrectly processed, leading to a mismatch between the intended and actual IP addresses. This can cause functions like `find()` and `bin_find()` to incorrectly allow or deny access, compromising network security policies."},"relatedVulnerabilities":[{"id":"CVE-2026-45190","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"urls":["https://github.com/stigtsp/Net-CIDR-Lite/commit/ca9542adec87110556601d7ce48381ea8d13e692.patch","https://metacpan.org/release/STIGTSP/Net-CIDR-Lite-0.24/changes","https://www.cve.org/CVERecord?id=CVE-2026-45191"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-45190","description":"Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass.\n\nInputs containing a trailing newline or non-ASCII digit characters pass the validators but are then re-encoded by the parser to a different address than the input string spelled. find() and bin_find() can match or miss addresses as a result.\n\nExample:\n\n  my $cidr = Net::CIDR::Lite->new();\n  $cidr->add(\"::1\\n/128\");\n  $cidr->find(\"::1a\");  # incorrectly returns true\n\nSee also CVE-2026-45191."}]},{"artifact":{"id":"2c4e8249c7be919b","cpes":["cpe:2.3:a:perl-File-stat:perl-File-stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-File-stat:perl_File_stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_File_stat:perl-File-stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_File_stat:perl_File_stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-File:perl-File-stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-File:perl_File_stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_File:perl-File-stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_File:perl_File_stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-File-stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_File_stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-File-stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_File_stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-File-stat","purl":"pkg:rpm/redhat/perl-File-stat@1.09-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.09-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-45190","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-45190","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"risk":0.27829999999999994,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-45190","description":"A flaw was found in Net::CIDR::Lite, a Perl module for handling IP address ranges. This vulnerability allows a remote attacker to bypass IP Access Control Lists (ACLs) due to improper validation of IP address and CIDR (Classless Inter-Domain Routing) mask inputs. Specifically, inputs containing trailing newlines or non-ASCII digit characters are incorrectly processed, leading to a mismatch between the intended and actual IP addresses. This can cause functions like `find()` and `bin_find()` to incorrectly allow or deny access, compromising network security policies."},"relatedVulnerabilities":[{"id":"CVE-2026-45190","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"urls":["https://github.com/stigtsp/Net-CIDR-Lite/commit/ca9542adec87110556601d7ce48381ea8d13e692.patch","https://metacpan.org/release/STIGTSP/Net-CIDR-Lite-0.24/changes","https://www.cve.org/CVERecord?id=CVE-2026-45191"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-45190","description":"Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass.\n\nInputs containing a trailing newline or non-ASCII digit characters pass the validators but are then re-encoded by the parser to a different address than the input string spelled. find() and bin_find() can match or miss addresses as a result.\n\nExample:\n\n  my $cidr = Net::CIDR::Lite->new();\n  $cidr->add(\"::1\\n/128\");\n  $cidr->find(\"::1a\");  # incorrectly returns true\n\nSee also CVE-2026-45191."}]},{"artifact":{"id":"4afdea7b02a85f83","cpes":["cpe:2.3:a:perl-FileHandle:perl-FileHandle:0\\:2.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-FileHandle:perl_FileHandle:0\\:2.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_FileHandle:perl-FileHandle:0\\:2.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_FileHandle:perl_FileHandle:0\\:2.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-FileHandle:0\\:2.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_FileHandle:0\\:2.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-FileHandle:0\\:2.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_FileHandle:0\\:2.03-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-FileHandle","purl":"pkg:rpm/redhat/perl-FileHandle@2.03-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:2.03-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-45190","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-45190","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"risk":0.27829999999999994,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-45190","description":"A flaw was found in Net::CIDR::Lite, a Perl module for handling IP address ranges. This vulnerability allows a remote attacker to bypass IP Access Control Lists (ACLs) due to improper validation of IP address and CIDR (Classless Inter-Domain Routing) mask inputs. Specifically, inputs containing trailing newlines or non-ASCII digit characters are incorrectly processed, leading to a mismatch between the intended and actual IP addresses. This can cause functions like `find()` and `bin_find()` to incorrectly allow or deny access, compromising network security policies."},"relatedVulnerabilities":[{"id":"CVE-2026-45190","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"urls":["https://github.com/stigtsp/Net-CIDR-Lite/commit/ca9542adec87110556601d7ce48381ea8d13e692.patch","https://metacpan.org/release/STIGTSP/Net-CIDR-Lite-0.24/changes","https://www.cve.org/CVERecord?id=CVE-2026-45191"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-45190","description":"Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass.\n\nInputs containing a trailing newline or non-ASCII digit characters pass the validators but are then re-encoded by the parser to a different address than the input string spelled. find() and bin_find() can match or miss addresses as a result.\n\nExample:\n\n  my $cidr = Net::CIDR::Lite->new();\n  $cidr->add(\"::1\\n/128\");\n  $cidr->find(\"::1a\");  # incorrectly returns true\n\nSee also CVE-2026-45191."}]},{"artifact":{"id":"3e595c731988d8d7","cpes":["cpe:2.3:a:perl-Getopt-Std:perl-Getopt-Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-Getopt-Std:perl_Getopt_Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Getopt_Std:perl-Getopt-Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Getopt_Std:perl_Getopt_Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-Getopt:perl-Getopt-Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-Getopt:perl_Getopt_Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Getopt:perl-Getopt-Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Getopt:perl_Getopt_Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-Getopt-Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_Getopt_Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-Getopt-Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_Getopt_Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-Getopt-Std","purl":"pkg:rpm/redhat/perl-Getopt-Std@1.12-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.12-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-45190","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-45190","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"risk":0.27829999999999994,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-45190","description":"A flaw was found in Net::CIDR::Lite, a Perl module for handling IP address ranges. This vulnerability allows a remote attacker to bypass IP Access Control Lists (ACLs) due to improper validation of IP address and CIDR (Classless Inter-Domain Routing) mask inputs. Specifically, inputs containing trailing newlines or non-ASCII digit characters are incorrectly processed, leading to a mismatch between the intended and actual IP addresses. This can cause functions like `find()` and `bin_find()` to incorrectly allow or deny access, compromising network security policies."},"relatedVulnerabilities":[{"id":"CVE-2026-45190","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"urls":["https://github.com/stigtsp/Net-CIDR-Lite/commit/ca9542adec87110556601d7ce48381ea8d13e692.patch","https://metacpan.org/release/STIGTSP/Net-CIDR-Lite-0.24/changes","https://www.cve.org/CVERecord?id=CVE-2026-45191"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-45190","description":"Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass.\n\nInputs containing a trailing newline or non-ASCII digit characters pass the validators but are then re-encoded by the parser to a different address than the input string spelled. find() and bin_find() can match or miss addresses as a result.\n\nExample:\n\n  my $cidr = Net::CIDR::Lite->new();\n  $cidr->add(\"::1\\n/128\");\n  $cidr->find(\"::1a\");  # incorrectly returns true\n\nSee also CVE-2026-45191."}]},{"artifact":{"id":"8e1068a3ad769685","cpes":["cpe:2.3:a:perl-IO:perl-IO:0\\:1.43-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-IO:perl_IO:0\\:1.43-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_IO:perl-IO:0\\:1.43-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_IO:perl_IO:0\\:1.43-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-IO:0\\:1.43-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_IO:0\\:1.43-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-IO:0\\:1.43-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_IO:0\\:1.43-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-IO","purl":"pkg:rpm/redhat/perl-IO@1.43-484.el9_8?arch=x86_64&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.43-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-45190","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-45190","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"risk":0.27829999999999994,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-45190","description":"A flaw was found in Net::CIDR::Lite, a Perl module for handling IP address ranges. This vulnerability allows a remote attacker to bypass IP Access Control Lists (ACLs) due to improper validation of IP address and CIDR (Classless Inter-Domain Routing) mask inputs. Specifically, inputs containing trailing newlines or non-ASCII digit characters are incorrectly processed, leading to a mismatch between the intended and actual IP addresses. This can cause functions like `find()` and `bin_find()` to incorrectly allow or deny access, compromising network security policies."},"relatedVulnerabilities":[{"id":"CVE-2026-45190","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"urls":["https://github.com/stigtsp/Net-CIDR-Lite/commit/ca9542adec87110556601d7ce48381ea8d13e692.patch","https://metacpan.org/release/STIGTSP/Net-CIDR-Lite-0.24/changes","https://www.cve.org/CVERecord?id=CVE-2026-45191"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-45190","description":"Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass.\n\nInputs containing a trailing newline or non-ASCII digit characters pass the validators but are then re-encoded by the parser to a different address than the input string spelled. find() and bin_find() can match or miss addresses as a result.\n\nExample:\n\n  my $cidr = Net::CIDR::Lite->new();\n  $cidr->add(\"::1\\n/128\");\n  $cidr->find(\"::1a\");  # incorrectly returns true\n\nSee also CVE-2026-45191."}]},{"artifact":{"id":"fe624a2355bcc9a0","cpes":["cpe:2.3:a:perl-IPC-Open3:perl-IPC-Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-IPC-Open3:perl_IPC_Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_IPC_Open3:perl-IPC-Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_IPC_Open3:perl_IPC_Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-IPC:perl-IPC-Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-IPC:perl_IPC_Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_IPC:perl-IPC-Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_IPC:perl_IPC_Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-IPC-Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_IPC_Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-IPC-Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_IPC_Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-IPC-Open3","purl":"pkg:rpm/redhat/perl-IPC-Open3@1.21-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.21-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-45190","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-45190","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"risk":0.27829999999999994,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-45190","description":"A flaw was found in Net::CIDR::Lite, a Perl module for handling IP address ranges. This vulnerability allows a remote attacker to bypass IP Access Control Lists (ACLs) due to improper validation of IP address and CIDR (Classless Inter-Domain Routing) mask inputs. Specifically, inputs containing trailing newlines or non-ASCII digit characters are incorrectly processed, leading to a mismatch between the intended and actual IP addresses. This can cause functions like `find()` and `bin_find()` to incorrectly allow or deny access, compromising network security policies."},"relatedVulnerabilities":[{"id":"CVE-2026-45190","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"urls":["https://github.com/stigtsp/Net-CIDR-Lite/commit/ca9542adec87110556601d7ce48381ea8d13e692.patch","https://metacpan.org/release/STIGTSP/Net-CIDR-Lite-0.24/changes","https://www.cve.org/CVERecord?id=CVE-2026-45191"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-45190","description":"Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass.\n\nInputs containing a trailing newline or non-ASCII digit characters pass the validators but are then re-encoded by the parser to a different address than the input string spelled. find() and bin_find() can match or miss addresses as a result.\n\nExample:\n\n  my $cidr = Net::CIDR::Lite->new();\n  $cidr->add(\"::1\\n/128\");\n  $cidr->find(\"::1a\");  # incorrectly returns true\n\nSee also CVE-2026-45191."}]},{"artifact":{"id":"966429419a0c4e60","cpes":["cpe:2.3:a:perl-POSIX:perl-POSIX:0\\:1.94-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-POSIX:perl_POSIX:0\\:1.94-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_POSIX:perl-POSIX:0\\:1.94-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_POSIX:perl_POSIX:0\\:1.94-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-POSIX:0\\:1.94-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_POSIX:0\\:1.94-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-POSIX:0\\:1.94-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_POSIX:0\\:1.94-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-POSIX","purl":"pkg:rpm/redhat/perl-POSIX@1.94-484.el9_8?arch=x86_64&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.94-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-45190","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-45190","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"risk":0.27829999999999994,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-45190","description":"A flaw was found in Net::CIDR::Lite, a Perl module for handling IP address ranges. This vulnerability allows a remote attacker to bypass IP Access Control Lists (ACLs) due to improper validation of IP address and CIDR (Classless Inter-Domain Routing) mask inputs. Specifically, inputs containing trailing newlines or non-ASCII digit characters are incorrectly processed, leading to a mismatch between the intended and actual IP addresses. This can cause functions like `find()` and `bin_find()` to incorrectly allow or deny access, compromising network security policies."},"relatedVulnerabilities":[{"id":"CVE-2026-45190","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"urls":["https://github.com/stigtsp/Net-CIDR-Lite/commit/ca9542adec87110556601d7ce48381ea8d13e692.patch","https://metacpan.org/release/STIGTSP/Net-CIDR-Lite-0.24/changes","https://www.cve.org/CVERecord?id=CVE-2026-45191"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-45190","description":"Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass.\n\nInputs containing a trailing newline or non-ASCII digit characters pass the validators but are then re-encoded by the parser to a different address than the input string spelled. find() and bin_find() can match or miss addresses as a result.\n\nExample:\n\n  my $cidr = Net::CIDR::Lite->new();\n  $cidr->add(\"::1\\n/128\");\n  $cidr->find(\"::1a\");  # incorrectly returns true\n\nSee also CVE-2026-45191."}]},{"artifact":{"id":"ed8cd6cbedb5c087","cpes":["cpe:2.3:a:perl-SelectSaver:perl-SelectSaver:0\\:1.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-SelectSaver:perl_SelectSaver:0\\:1.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_SelectSaver:perl-SelectSaver:0\\:1.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_SelectSaver:perl_SelectSaver:0\\:1.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-SelectSaver:0\\:1.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_SelectSaver:0\\:1.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-SelectSaver:0\\:1.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_SelectSaver:0\\:1.02-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-SelectSaver","purl":"pkg:rpm/redhat/perl-SelectSaver@1.02-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.02-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-45190","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-45190","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"risk":0.27829999999999994,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-45190","description":"A flaw was found in Net::CIDR::Lite, a Perl module for handling IP address ranges. This vulnerability allows a remote attacker to bypass IP Access Control Lists (ACLs) due to improper validation of IP address and CIDR (Classless Inter-Domain Routing) mask inputs. Specifically, inputs containing trailing newlines or non-ASCII digit characters are incorrectly processed, leading to a mismatch between the intended and actual IP addresses. This can cause functions like `find()` and `bin_find()` to incorrectly allow or deny access, compromising network security policies."},"relatedVulnerabilities":[{"id":"CVE-2026-45190","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"urls":["https://github.com/stigtsp/Net-CIDR-Lite/commit/ca9542adec87110556601d7ce48381ea8d13e692.patch","https://metacpan.org/release/STIGTSP/Net-CIDR-Lite-0.24/changes","https://www.cve.org/CVERecord?id=CVE-2026-45191"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-45190","description":"Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass.\n\nInputs containing a trailing newline or non-ASCII digit characters pass the validators but are then re-encoded by the parser to a different address than the input string spelled. find() and bin_find() can match or miss addresses as a result.\n\nExample:\n\n  my $cidr = Net::CIDR::Lite->new();\n  $cidr->add(\"::1\\n/128\");\n  $cidr->find(\"::1a\");  # incorrectly returns true\n\nSee also CVE-2026-45191."}]},{"artifact":{"id":"9bf020807c3348c1","cpes":["cpe:2.3:a:perl-Symbol:perl-Symbol:0\\:1.08-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-Symbol:perl_Symbol:0\\:1.08-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Symbol:perl-Symbol:0\\:1.08-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Symbol:perl_Symbol:0\\:1.08-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-Symbol:0\\:1.08-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_Symbol:0\\:1.08-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-Symbol:0\\:1.08-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_Symbol:0\\:1.08-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-Symbol","purl":"pkg:rpm/redhat/perl-Symbol@1.08-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.08-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-45190","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-45190","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"risk":0.27829999999999994,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-45190","description":"A flaw was found in Net::CIDR::Lite, a Perl module for handling IP address ranges. This vulnerability allows a remote attacker to bypass IP Access Control Lists (ACLs) due to improper validation of IP address and CIDR (Classless Inter-Domain Routing) mask inputs. Specifically, inputs containing trailing newlines or non-ASCII digit characters are incorrectly processed, leading to a mismatch between the intended and actual IP addresses. This can cause functions like `find()` and `bin_find()` to incorrectly allow or deny access, compromising network security policies."},"relatedVulnerabilities":[{"id":"CVE-2026-45190","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"urls":["https://github.com/stigtsp/Net-CIDR-Lite/commit/ca9542adec87110556601d7ce48381ea8d13e692.patch","https://metacpan.org/release/STIGTSP/Net-CIDR-Lite-0.24/changes","https://www.cve.org/CVERecord?id=CVE-2026-45191"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-45190","description":"Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass.\n\nInputs containing a trailing newline or non-ASCII digit characters pass the validators but are then re-encoded by the parser to a different address than the input string spelled. find() and bin_find() can match or miss addresses as a result.\n\nExample:\n\n  my $cidr = Net::CIDR::Lite->new();\n  $cidr->add(\"::1\\n/128\");\n  $cidr->find(\"::1a\");  # incorrectly returns true\n\nSee also CVE-2026-45191."}]},{"artifact":{"id":"f7b1f706a4c8603f","cpes":["cpe:2.3:a:perl-base:perl-base:0\\:2.27-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-base:perl_base:0\\:2.27-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl-base:0\\:2.27-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl_base:0\\:2.27-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-base:0\\:2.27-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_base:0\\:2.27-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-base:0\\:2.27-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_base:0\\:2.27-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-base","purl":"pkg:rpm/redhat/perl-base@2.27-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:2.27-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-45190","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-45190","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"risk":0.27829999999999994,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-45190","description":"A flaw was found in Net::CIDR::Lite, a Perl module for handling IP address ranges. This vulnerability allows a remote attacker to bypass IP Access Control Lists (ACLs) due to improper validation of IP address and CIDR (Classless Inter-Domain Routing) mask inputs. Specifically, inputs containing trailing newlines or non-ASCII digit characters are incorrectly processed, leading to a mismatch between the intended and actual IP addresses. This can cause functions like `find()` and `bin_find()` to incorrectly allow or deny access, compromising network security policies."},"relatedVulnerabilities":[{"id":"CVE-2026-45190","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"urls":["https://github.com/stigtsp/Net-CIDR-Lite/commit/ca9542adec87110556601d7ce48381ea8d13e692.patch","https://metacpan.org/release/STIGTSP/Net-CIDR-Lite-0.24/changes","https://www.cve.org/CVERecord?id=CVE-2026-45191"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-45190","description":"Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass.\n\nInputs containing a trailing newline or non-ASCII digit characters pass the validators but are then re-encoded by the parser to a different address than the input string spelled. find() and bin_find() can match or miss addresses as a result.\n\nExample:\n\n  my $cidr = Net::CIDR::Lite->new();\n  $cidr->add(\"::1\\n/128\");\n  $cidr->find(\"::1a\");  # incorrectly returns true\n\nSee also CVE-2026-45191."}]},{"artifact":{"id":"51a4d5612497e394","cpes":["cpe:2.3:a:perl-if:perl-if:0\\:0.60.800-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-if:perl_if:0\\:0.60.800-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_if:perl-if:0\\:0.60.800-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_if:perl_if:0\\:0.60.800-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-if:0\\:0.60.800-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_if:0\\:0.60.800-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-if:0\\:0.60.800-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_if:0\\:0.60.800-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-if","purl":"pkg:rpm/redhat/perl-if@0.60.800-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:0.60.800-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-45190","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-45190","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"risk":0.27829999999999994,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-45190","description":"A flaw was found in Net::CIDR::Lite, a Perl module for handling IP address ranges. This vulnerability allows a remote attacker to bypass IP Access Control Lists (ACLs) due to improper validation of IP address and CIDR (Classless Inter-Domain Routing) mask inputs. Specifically, inputs containing trailing newlines or non-ASCII digit characters are incorrectly processed, leading to a mismatch between the intended and actual IP addresses. This can cause functions like `find()` and `bin_find()` to incorrectly allow or deny access, compromising network security policies."},"relatedVulnerabilities":[{"id":"CVE-2026-45190","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"urls":["https://github.com/stigtsp/Net-CIDR-Lite/commit/ca9542adec87110556601d7ce48381ea8d13e692.patch","https://metacpan.org/release/STIGTSP/Net-CIDR-Lite-0.24/changes","https://www.cve.org/CVERecord?id=CVE-2026-45191"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-45190","description":"Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass.\n\nInputs containing a trailing newline or non-ASCII digit characters pass the validators but are then re-encoded by the parser to a different address than the input string spelled. find() and bin_find() can match or miss addresses as a result.\n\nExample:\n\n  my $cidr = Net::CIDR::Lite->new();\n  $cidr->add(\"::1\\n/128\");\n  $cidr->find(\"::1a\");  # incorrectly returns true\n\nSee also CVE-2026-45191."}]},{"artifact":{"id":"aa8ec3d3a0c8cb51","cpes":["cpe:2.3:a:perl-interpreter:perl-interpreter:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-interpreter:perl_interpreter:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_interpreter:perl-interpreter:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_interpreter:perl_interpreter:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-interpreter:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_interpreter:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-interpreter:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_interpreter:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-interpreter","purl":"pkg:rpm/redhat/perl-interpreter@5.32.1-484.el9_8?arch=x86_64&distro=rhel-9.8&epoch=4&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"4:5.32.1-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":4,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-45190","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-45190","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"risk":0.27829999999999994,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-45190","description":"A flaw was found in Net::CIDR::Lite, a Perl module for handling IP address ranges. This vulnerability allows a remote attacker to bypass IP Access Control Lists (ACLs) due to improper validation of IP address and CIDR (Classless Inter-Domain Routing) mask inputs. Specifically, inputs containing trailing newlines or non-ASCII digit characters are incorrectly processed, leading to a mismatch between the intended and actual IP addresses. This can cause functions like `find()` and `bin_find()` to incorrectly allow or deny access, compromising network security policies."},"relatedVulnerabilities":[{"id":"CVE-2026-45190","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"urls":["https://github.com/stigtsp/Net-CIDR-Lite/commit/ca9542adec87110556601d7ce48381ea8d13e692.patch","https://metacpan.org/release/STIGTSP/Net-CIDR-Lite-0.24/changes","https://www.cve.org/CVERecord?id=CVE-2026-45191"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-45190","description":"Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass.\n\nInputs containing a trailing newline or non-ASCII digit characters pass the validators but are then re-encoded by the parser to a different address than the input string spelled. find() and bin_find() can match or miss addresses as a result.\n\nExample:\n\n  my $cidr = Net::CIDR::Lite->new();\n  $cidr->add(\"::1\\n/128\");\n  $cidr->find(\"::1a\");  # incorrectly returns true\n\nSee also CVE-2026-45191."}]},{"artifact":{"id":"767f57c8ab68452b","cpes":["cpe:2.3:a:perl-lib:perl-lib:0\\:0.65-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-lib:perl_lib:0\\:0.65-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_lib:perl-lib:0\\:0.65-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_lib:perl_lib:0\\:0.65-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-lib:0\\:0.65-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_lib:0\\:0.65-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-lib:0\\:0.65-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_lib:0\\:0.65-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-lib","purl":"pkg:rpm/redhat/perl-lib@0.65-484.el9_8?arch=x86_64&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:0.65-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-45190","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-45190","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"risk":0.27829999999999994,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-45190","description":"A flaw was found in Net::CIDR::Lite, a Perl module for handling IP address ranges. This vulnerability allows a remote attacker to bypass IP Access Control Lists (ACLs) due to improper validation of IP address and CIDR (Classless Inter-Domain Routing) mask inputs. Specifically, inputs containing trailing newlines or non-ASCII digit characters are incorrectly processed, leading to a mismatch between the intended and actual IP addresses. This can cause functions like `find()` and `bin_find()` to incorrectly allow or deny access, compromising network security policies."},"relatedVulnerabilities":[{"id":"CVE-2026-45190","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"urls":["https://github.com/stigtsp/Net-CIDR-Lite/commit/ca9542adec87110556601d7ce48381ea8d13e692.patch","https://metacpan.org/release/STIGTSP/Net-CIDR-Lite-0.24/changes","https://www.cve.org/CVERecord?id=CVE-2026-45191"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-45190","description":"Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass.\n\nInputs containing a trailing newline or non-ASCII digit characters pass the validators but are then re-encoded by the parser to a different address than the input string spelled. find() and bin_find() can match or miss addresses as a result.\n\nExample:\n\n  my $cidr = Net::CIDR::Lite->new();\n  $cidr->add(\"::1\\n/128\");\n  $cidr->find(\"::1a\");  # incorrectly returns true\n\nSee also CVE-2026-45191."}]},{"artifact":{"id":"afda1e38bc7344c3","cpes":["cpe:2.3:a:perl-libs:perl-libs:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-libs:perl_libs:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_libs:perl-libs:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_libs:perl_libs:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-libs:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_libs:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-libs:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_libs:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-libs","purl":"pkg:rpm/redhat/perl-libs@5.32.1-484.el9_8?arch=x86_64&distro=rhel-9.8&epoch=4&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"4:5.32.1-484.el9_8","language":"","licenses":["(GPL+ or Artistic) and BSD and HSRL and MIT and UCD and Public domain"],"metadata":{"epoch":4,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-45190","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-45190","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"risk":0.27829999999999994,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-45190","description":"A flaw was found in Net::CIDR::Lite, a Perl module for handling IP address ranges. This vulnerability allows a remote attacker to bypass IP Access Control Lists (ACLs) due to improper validation of IP address and CIDR (Classless Inter-Domain Routing) mask inputs. Specifically, inputs containing trailing newlines or non-ASCII digit characters are incorrectly processed, leading to a mismatch between the intended and actual IP addresses. This can cause functions like `find()` and `bin_find()` to incorrectly allow or deny access, compromising network security policies."},"relatedVulnerabilities":[{"id":"CVE-2026-45190","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"urls":["https://github.com/stigtsp/Net-CIDR-Lite/commit/ca9542adec87110556601d7ce48381ea8d13e692.patch","https://metacpan.org/release/STIGTSP/Net-CIDR-Lite-0.24/changes","https://www.cve.org/CVERecord?id=CVE-2026-45191"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-45190","description":"Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass.\n\nInputs containing a trailing newline or non-ASCII digit characters pass the validators but are then re-encoded by the parser to a different address than the input string spelled. find() and bin_find() can match or miss addresses as a result.\n\nExample:\n\n  my $cidr = Net::CIDR::Lite->new();\n  $cidr->add(\"::1\\n/128\");\n  $cidr->find(\"::1a\");  # incorrectly returns true\n\nSee also CVE-2026-45191."}]},{"artifact":{"id":"84662c3c03211d25","cpes":["cpe:2.3:a:perl-mro:perl-mro:0\\:1.23-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-mro:perl_mro:0\\:1.23-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_mro:perl-mro:0\\:1.23-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_mro:perl_mro:0\\:1.23-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-mro:0\\:1.23-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_mro:0\\:1.23-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-mro:0\\:1.23-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_mro:0\\:1.23-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-mro","purl":"pkg:rpm/redhat/perl-mro@1.23-484.el9_8?arch=x86_64&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.23-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-45190","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-45190","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"risk":0.27829999999999994,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-45190","description":"A flaw was found in Net::CIDR::Lite, a Perl module for handling IP address ranges. This vulnerability allows a remote attacker to bypass IP Access Control Lists (ACLs) due to improper validation of IP address and CIDR (Classless Inter-Domain Routing) mask inputs. Specifically, inputs containing trailing newlines or non-ASCII digit characters are incorrectly processed, leading to a mismatch between the intended and actual IP addresses. This can cause functions like `find()` and `bin_find()` to incorrectly allow or deny access, compromising network security policies."},"relatedVulnerabilities":[{"id":"CVE-2026-45190","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"urls":["https://github.com/stigtsp/Net-CIDR-Lite/commit/ca9542adec87110556601d7ce48381ea8d13e692.patch","https://metacpan.org/release/STIGTSP/Net-CIDR-Lite-0.24/changes","https://www.cve.org/CVERecord?id=CVE-2026-45191"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-45190","description":"Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass.\n\nInputs containing a trailing newline or non-ASCII digit characters pass the validators but are then re-encoded by the parser to a different address than the input string spelled. find() and bin_find() can match or miss addresses as a result.\n\nExample:\n\n  my $cidr = Net::CIDR::Lite->new();\n  $cidr->add(\"::1\\n/128\");\n  $cidr->find(\"::1a\");  # incorrectly returns true\n\nSee also CVE-2026-45191."}]},{"artifact":{"id":"cfd33bba5b1551d2","cpes":["cpe:2.3:a:perl-overload:perl-overload:0\\:1.31-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-overload:perl_overload:0\\:1.31-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_overload:perl-overload:0\\:1.31-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_overload:perl_overload:0\\:1.31-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-overload:0\\:1.31-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_overload:0\\:1.31-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-overload:0\\:1.31-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_overload:0\\:1.31-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-overload","purl":"pkg:rpm/redhat/perl-overload@1.31-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.31-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-45190","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-45190","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"risk":0.27829999999999994,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-45190","description":"A flaw was found in Net::CIDR::Lite, a Perl module for handling IP address ranges. This vulnerability allows a remote attacker to bypass IP Access Control Lists (ACLs) due to improper validation of IP address and CIDR (Classless Inter-Domain Routing) mask inputs. Specifically, inputs containing trailing newlines or non-ASCII digit characters are incorrectly processed, leading to a mismatch between the intended and actual IP addresses. This can cause functions like `find()` and `bin_find()` to incorrectly allow or deny access, compromising network security policies."},"relatedVulnerabilities":[{"id":"CVE-2026-45190","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"urls":["https://github.com/stigtsp/Net-CIDR-Lite/commit/ca9542adec87110556601d7ce48381ea8d13e692.patch","https://metacpan.org/release/STIGTSP/Net-CIDR-Lite-0.24/changes","https://www.cve.org/CVERecord?id=CVE-2026-45191"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-45190","description":"Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass.\n\nInputs containing a trailing newline or non-ASCII digit characters pass the validators but are then re-encoded by the parser to a different address than the input string spelled. find() and bin_find() can match or miss addresses as a result.\n\nExample:\n\n  my $cidr = Net::CIDR::Lite->new();\n  $cidr->add(\"::1\\n/128\");\n  $cidr->find(\"::1a\");  # incorrectly returns true\n\nSee also CVE-2026-45191."}]},{"artifact":{"id":"15c2c34f0c45d893","cpes":["cpe:2.3:a:perl-overloading:perl-overloading:0\\:0.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-overloading:perl_overloading:0\\:0.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_overloading:perl-overloading:0\\:0.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_overloading:perl_overloading:0\\:0.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-overloading:0\\:0.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_overloading:0\\:0.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-overloading:0\\:0.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_overloading:0\\:0.02-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-overloading","purl":"pkg:rpm/redhat/perl-overloading@0.02-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:0.02-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-45190","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-45190","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"risk":0.27829999999999994,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-45190","description":"A flaw was found in Net::CIDR::Lite, a Perl module for handling IP address ranges. This vulnerability allows a remote attacker to bypass IP Access Control Lists (ACLs) due to improper validation of IP address and CIDR (Classless Inter-Domain Routing) mask inputs. Specifically, inputs containing trailing newlines or non-ASCII digit characters are incorrectly processed, leading to a mismatch between the intended and actual IP addresses. This can cause functions like `find()` and `bin_find()` to incorrectly allow or deny access, compromising network security policies."},"relatedVulnerabilities":[{"id":"CVE-2026-45190","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"urls":["https://github.com/stigtsp/Net-CIDR-Lite/commit/ca9542adec87110556601d7ce48381ea8d13e692.patch","https://metacpan.org/release/STIGTSP/Net-CIDR-Lite-0.24/changes","https://www.cve.org/CVERecord?id=CVE-2026-45191"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-45190","description":"Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass.\n\nInputs containing a trailing newline or non-ASCII digit characters pass the validators but are then re-encoded by the parser to a different address than the input string spelled. find() and bin_find() can match or miss addresses as a result.\n\nExample:\n\n  my $cidr = Net::CIDR::Lite->new();\n  $cidr->add(\"::1\\n/128\");\n  $cidr->find(\"::1a\");  # incorrectly returns true\n\nSee also CVE-2026-45191."}]},{"artifact":{"id":"84db60c0f6c9abcf","cpes":["cpe:2.3:a:perl-subs:perl-subs:0\\:1.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-subs:perl_subs:0\\:1.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_subs:perl-subs:0\\:1.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_subs:perl_subs:0\\:1.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-subs:0\\:1.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_subs:0\\:1.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-subs:0\\:1.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_subs:0\\:1.03-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-subs","purl":"pkg:rpm/redhat/perl-subs@1.03-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.03-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-45190","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-45190","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"risk":0.27829999999999994,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-45190","description":"A flaw was found in Net::CIDR::Lite, a Perl module for handling IP address ranges. This vulnerability allows a remote attacker to bypass IP Access Control Lists (ACLs) due to improper validation of IP address and CIDR (Classless Inter-Domain Routing) mask inputs. Specifically, inputs containing trailing newlines or non-ASCII digit characters are incorrectly processed, leading to a mismatch between the intended and actual IP addresses. This can cause functions like `find()` and `bin_find()` to incorrectly allow or deny access, compromising network security policies."},"relatedVulnerabilities":[{"id":"CVE-2026-45190","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"urls":["https://github.com/stigtsp/Net-CIDR-Lite/commit/ca9542adec87110556601d7ce48381ea8d13e692.patch","https://metacpan.org/release/STIGTSP/Net-CIDR-Lite-0.24/changes","https://www.cve.org/CVERecord?id=CVE-2026-45191"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-45190","description":"Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass.\n\nInputs containing a trailing newline or non-ASCII digit characters pass the validators but are then re-encoded by the parser to a different address than the input string spelled. find() and bin_find() can match or miss addresses as a result.\n\nExample:\n\n  my $cidr = Net::CIDR::Lite->new();\n  $cidr->add(\"::1\\n/128\");\n  $cidr->find(\"::1a\");  # incorrectly returns true\n\nSee also CVE-2026-45191."}]},{"artifact":{"id":"0ad1840c208a6594","cpes":["cpe:2.3:a:perl-vars:perl-vars:0\\:1.05-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-vars:perl_vars:0\\:1.05-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_vars:perl-vars:0\\:1.05-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_vars:perl_vars:0\\:1.05-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-vars:0\\:1.05-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_vars:0\\:1.05-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-vars:0\\:1.05-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_vars:0\\:1.05-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-vars","purl":"pkg:rpm/redhat/perl-vars@1.05-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.05-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-45190","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-45190","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"risk":0.27829999999999994,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-45190","description":"A flaw was found in Net::CIDR::Lite, a Perl module for handling IP address ranges. This vulnerability allows a remote attacker to bypass IP Access Control Lists (ACLs) due to improper validation of IP address and CIDR (Classless Inter-Domain Routing) mask inputs. Specifically, inputs containing trailing newlines or non-ASCII digit characters are incorrectly processed, leading to a mismatch between the intended and actual IP addresses. This can cause functions like `find()` and `bin_find()` to incorrectly allow or deny access, compromising network security policies."},"relatedVulnerabilities":[{"id":"CVE-2026-45190","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45190","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-45190","date":"2026-10-10","epss":0.00484,"percentile":0.39827}],"urls":["https://github.com/stigtsp/Net-CIDR-Lite/commit/ca9542adec87110556601d7ce48381ea8d13e692.patch","https://metacpan.org/release/STIGTSP/Net-CIDR-Lite-0.24/changes","https://www.cve.org/CVERecord?id=CVE-2026-45191"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-45190","description":"Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass.\n\nInputs containing a trailing newline or non-ASCII digit characters pass the validators but are then re-encoded by the parser to a different address than the input string spelled. find() and bin_find() can match or miss addresses as a result.\n\nExample:\n\n  my $cidr = Net::CIDR::Lite->new();\n  $cidr->add(\"::1\\n/128\");\n  $cidr->find(\"::1a\");  # incorrectly returns true\n\nSee also CVE-2026-45191."}]},{"artifact":{"id":"406b3abfffe1d292","cpes":["cpe:2.3:a:git-lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git-lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*"],"name":"git-lfs","purl":"pkg:rpm/redhat/git-lfs@3.7.1-4.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=git-lfs-3.7.1-4.el9_8.3.src.rpm","type":"rpm","version":"3.7.1-4.el9_8.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-33810","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"git-lfs","version":"0:3.7.1-4.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-33810","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L","metrics":{"baseScore":8.8,"impactScore":5.3,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-33810","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2026-33810","cwe":"CWE-1289","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-33810","date":"2026-10-10","epss":0.0034,"percentile":0.25486}],"risk":0.2771,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-33810","description":"A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains."},"relatedVulnerabilities":[{"id":"CVE-2026-33810","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L","metrics":{"baseScore":8.8,"impactScore":5.3,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-33810","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2026-33810","cwe":"CWE-1289","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-33810","date":"2026-10-10","epss":0.0034,"percentile":0.25486}],"urls":["https://go.dev/cl/763763","https://go.dev/issue/78332","https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU","https://pkg.go.dev/vuln/GO-2026-4866","http://www.openwall.com/lists/oss-security/2026/04/19/4","http://www.openwall.com/lists/oss-security/2026/04/20/1","https://access.redhat.com/errata/RHSA-2026:10155","https://access.redhat.com/errata/RHSA-2026:10158","https://access.redhat.com/errata/RHSA-2026:13545","https://access.redhat.com/errata/RHSA-2026:14391","https://access.redhat.com/errata/RHSA-2026:19135","https://access.redhat.com/errata/RHSA-2026:19144","https://access.redhat.com/errata/RHSA-2026:19353","https://access.redhat.com/errata/RHSA-2026:19714","https://access.redhat.com/errata/RHSA-2026:19719","https://access.redhat.com/errata/RHSA-2026:19720","https://access.redhat.com/errata/RHSA-2026:19721","https://access.redhat.com/errata/RHSA-2026:21769","https://access.redhat.com/errata/RHSA-2026:21772","https://access.redhat.com/errata/RHSA-2026:22347","https://access.redhat.com/errata/RHSA-2026:22485","https://access.redhat.com/errata/RHSA-2026:22862","https://access.redhat.com/errata/RHSA-2026:22958","https://access.redhat.com/errata/RHSA-2026:22959","https://access.redhat.com/errata/RHSA-2026:22960","https://access.redhat.com/errata/RHSA-2026:22961","https://access.redhat.com/errata/RHSA-2026:22962","https://access.redhat.com/errata/RHSA-2026:23345","https://access.redhat.com/errata/RHSA-2026:24478","https://access.redhat.com/errata/RHSA-2026:25089","https://access.redhat.com/errata/RHSA-2026:26568","https://access.redhat.com/errata/RHSA-2026:26571","https://access.redhat.com/errata/RHSA-2026:26585","https://access.redhat.com/errata/RHSA-2026:28047","https://access.redhat.com/errata/RHSA-2026:29854","https://access.redhat.com/errata/RHSA-2026:34192","https://access.redhat.com/errata/RHSA-2026:34196","https://access.redhat.com/errata/RHSA-2026:34197","https://access.redhat.com/errata/RHSA-2026:34365","https://access.redhat.com/errata/RHSA-2026:36651","https://access.redhat.com/errata/RHSA-2026:36796","https://access.redhat.com/errata/RHSA-2026:39810","https://access.redhat.com/errata/RHSA-2026:40118","https://access.redhat.com/errata/RHSA-2026:40945","https://access.redhat.com/errata/RHSA-2026:41928","https://access.redhat.com/errata/RHSA-2026:42043","https://access.redhat.com/errata/RHSA-2026:42047","https://access.redhat.com/errata/RHSA-2026:42049","https://access.redhat.com/errata/RHSA-2026:42050","https://access.redhat.com/errata/RHSA-2026:42051","https://access.redhat.com/errata/RHSA-2026:47952","https://access.redhat.com/errata/RHSA-2026:49702","https://access.redhat.com/errata/RHSA-2026:49703","https://access.redhat.com/errata/RHSA-2026:49712","https://access.redhat.com/errata/RHSA-2026:51033","https://access.redhat.com/errata/RHSA-2026:51288","https://access.redhat.com/errata/RHSA-2026:54757","https://access.redhat.com/errata/RHSA-2026:56143","https://access.redhat.com/errata/RHSA-2026:56223","https://access.redhat.com/errata/RHSA-2026:57126","https://access.redhat.com/errata/RHSA-2026:57649","https://access.redhat.com/errata/RHSA-2026:59546","https://access.redhat.com/errata/RHSA-2026:61253","https://access.redhat.com/errata/RHSA-2026:61313","https://access.redhat.com/errata/RHSA-2026:61907","https://access.redhat.com/errata/RHSA-2026:62577","https://access.redhat.com/errata/RHSA-2026:62578","https://access.redhat.com/errata/RHSA-2026:63332","https://access.redhat.com/errata/RHSA-2026:65126","https://access.redhat.com/errata/RHSA-2026:65359","https://access.redhat.com/errata/RHSA-2026:65534","https://access.redhat.com/errata/RHSA-2026:65880","https://access.redhat.com/errata/RHSA-2026:65895","https://access.redhat.com/errata/RHSA-2026:66327","https://access.redhat.com/errata/RHSA-2026:67134","https://access.redhat.com/errata/RHSA-2026:67149","https://access.redhat.com/errata/RHSA-2026:67159","https://access.redhat.com/errata/RHSA-2026:67160","https://access.redhat.com/errata/RHSA-2026:67517","https://access.redhat.com/errata/RHSA-2026:67518","https://access.redhat.com/errata/RHSA-2026:68334","https://access.redhat.com/errata/RHSA-2026:68504","https://access.redhat.com/errata/RHSA-2026:7291","https://access.redhat.com/errata/RHSA-2026:9385","https://access.redhat.com/security/cve/CVE-2026-33810","https://bugzilla.redhat.com/show_bug.cgi?id=2456335","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33810.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-33810","description":"When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool."}]},{"artifact":{"id":"406b3abfffe1d292","cpes":["cpe:2.3:a:git-lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git-lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*"],"name":"git-lfs","purl":"pkg:rpm/redhat/git-lfs@3.7.1-4.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=git-lfs-3.7.1-4.el9_8.3.src.rpm","type":"rpm","version":"3.7.1-4.el9_8.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-6993","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"git-lfs","version":"0:3.7.1-4.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-6993","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6993","cwe":"CWE-441","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-6993","date":"2026-10-10","epss":0.00537,"percentile":0.43545}],"risk":0.276555,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-6993","description":"A flaw was found in go-kratos kratos. A remote attacker could exploit a vulnerability in the HTTP server's `NewServer` function, specifically within the `http.DefaultServeMux Fallback Handler`. This manipulation creates an unintended intermediary, which can lead to the disclosure of sensitive information."},"relatedVulnerabilities":[{"id":"CVE-2026-6993","cvss":[{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6993","cwe":"CWE-441","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-6993","date":"2026-10-10","epss":0.00537,"percentile":0.43545}],"urls":["https://github.com/Yanhu007/kratos/commit/0284a5bcf92b5a7ee015300ce3051baf7ae4718d","https://github.com/go-kratos/kratos/","https://github.com/go-kratos/kratos/issues/3810","https://github.com/go-kratos/kratos/pull/3814","https://vuldb.com/submit/797099","https://vuldb.com/vuln/359545","https://vuldb.com/vuln/359545/cti"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6993","description":"A security flaw has been discovered in go-kratos kratos up to 2.9.2. This impacts the function NewServer of the file transport/http/server.go of the component http.DefaultServeMux Fallback Handler. The manipulation results in unintended intermediary. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. The patch is identified as 0284a5bcf92b5a7ee015300ce3051baf7ae4718d. Applying a patch is advised to resolve this issue."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-48233","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2023-48233","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-48233","cwe":"CWE-190","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-48233","date":"2026-10-10","epss":0.00755,"percentile":0.53785}],"risk":0.275575,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-48233","description":"A flaw was found in Vim, an open source command line text editor. If the count after the :s command is larger than what fits into a signed long variable, abort with e_value_too_large. The impact is low because user interaction is required and a crash may not happen in all situations."},"relatedVulnerabilities":[{"id":"CVE-2023-48233","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.8,"impactScore":1.5,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-48233","cwe":"CWE-190","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-48233","date":"2026-10-10","epss":0.00755,"percentile":0.53785}],"urls":["http://www.openwall.com/lists/oss-security/2023/11/16/1","https://github.com/vim/vim/commit/ac63787734fda2e294e477af52b3bd601517fa78","https://github.com/vim/vim/security/advisories/GHSA-3xx4-hcq6-r2vj","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4UJAK2W5S7G75ETDAEM3BDUCVSXCEGRD/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M3VQF7CL3V6FGSEW37WNDFBRRILR65AK/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VNRNYLWXZOGTYWE5HMFNQ5FVE3HBUHF6/","https://security.netapp.com/advisory/ntap-20231227-0003/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-48233","description":"Vim is an open source command line text editor. If the count after the :s command is larger than what fits into a (signed) long variable, abort with e_value_too_large. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue has been addressed in commit `ac6378773` which has been included in release version 9.0.2108. Users are advised to upgrade. There are no known workarounds for this vulnerability."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-48234","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2023-48234","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-48234","cwe":"CWE-190","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-48234","date":"2026-10-10","epss":0.00755,"percentile":0.53785}],"risk":0.275575,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-48234","description":"A flaw was found in Vim, an open source command line text editor. When getting the count for a normal mode z command, it may overflow if large counts are given. The impact is low because user interaction is required and a crash may not happen in all situations."},"relatedVulnerabilities":[{"id":"CVE-2023-48234","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.8,"impactScore":1.5,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-48234","cwe":"CWE-190","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-48234","date":"2026-10-10","epss":0.00755,"percentile":0.53785}],"urls":["http://www.openwall.com/lists/oss-security/2023/11/16/1","https://github.com/vim/vim/commit/58f9befca1fa172068effad7f2ea5a9d6a7b0cca","https://github.com/vim/vim/security/advisories/GHSA-59gw-c949-6phq","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4UJAK2W5S7G75ETDAEM3BDUCVSXCEGRD/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M3VQF7CL3V6FGSEW37WNDFBRRILR65AK/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VNRNYLWXZOGTYWE5HMFNQ5FVE3HBUHF6/","https://security.netapp.com/advisory/ntap-20231227-0004/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-48234","description":"Vim is an open source command line text editor. When getting the count for a normal mode z command, it may overflow for large counts given. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue has been addressed in commit `58f9befca1` which has been included in release version 9.0.2109. Users are advised to upgrade. There are no known workarounds for this vulnerability."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-48235","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2023-48235","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-48235","cwe":"CWE-190","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-48235","date":"2026-10-10","epss":0.00755,"percentile":0.53785}],"risk":0.275575,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-48235","description":"A flaw as found in Vim, an open source command line text editor. When parsing relative ex addresses, one may unintentionally cause an overflow. Ironically, this happens in the existing overflow check because the line number becomes negative and LONG_MAX - lnum will cause the overflow. The impact is low because user interaction is required and a crash may not happen in all situations."},"relatedVulnerabilities":[{"id":"CVE-2023-48235","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.8,"impactScore":1.5,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-48235","cwe":"CWE-190","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-48235","date":"2026-10-10","epss":0.00755,"percentile":0.53785}],"urls":["http://www.openwall.com/lists/oss-security/2023/11/16/1","https://github.com/vim/vim/commit/060623e4a3bc72b011e7cd92bedb3bfb64e06200","https://github.com/vim/vim/security/advisories/GHSA-6g74-hr6q-pr8g","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4UJAK2W5S7G75ETDAEM3BDUCVSXCEGRD/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M3VQF7CL3V6FGSEW37WNDFBRRILR65AK/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VNRNYLWXZOGTYWE5HMFNQ5FVE3HBUHF6/","https://security.netapp.com/advisory/ntap-20231227-0007/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-48235","description":"Vim is an open source command line text editor. When parsing relative ex addresses one may unintentionally cause an\noverflow. Ironically this happens in the existing overflow check, because the line number becomes negative and LONG_MAX - lnum will cause the overflow. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue has been addressed in commit `060623e` which has been included in release version 9.0.2110. Users are advised to upgrade. There are no known workarounds for this vulnerability."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-48237","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2023-48237","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-48237","cwe":"CWE-190","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-48237","date":"2026-10-10","epss":0.00755,"percentile":0.53784}],"risk":0.275575,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-48237","description":"A flaw was found in Vim, an open source command line text editor. In affected versions, when shifting lines in operator pending mode and using a large value, it may be possible to overflow the size of the integer. The impact is low because user interaction is required and a crash may not happen in all situations."},"relatedVulnerabilities":[{"id":"CVE-2023-48237","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.8,"impactScore":1.5,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-48237","cwe":"CWE-190","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-48237","date":"2026-10-10","epss":0.00755,"percentile":0.53784}],"urls":["http://www.openwall.com/lists/oss-security/2023/11/16/1","https://github.com/vim/vim/commit/6bf131888a3d1de62bbfa8a7ea03c0ddccfd496e","https://github.com/vim/vim/security/advisories/GHSA-f2m2-v387-gv87","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4UJAK2W5S7G75ETDAEM3BDUCVSXCEGRD/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M3VQF7CL3V6FGSEW37WNDFBRRILR65AK/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VNRNYLWXZOGTYWE5HMFNQ5FVE3HBUHF6/","https://security.netapp.com/advisory/ntap-20231227-0005/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-48237","description":"Vim is an open source command line text editor. In affected versions when shifting lines in operator pending mode and using a very large value, it may be possible to overflow the size of integer. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue has been addressed in commit `6bf131888` which has been included in version 9.0.2112. Users are advised to upgrade. There are no known workarounds for this vulnerability."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-3352","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-3352","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-3352","cwe":"CWE-416","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-3352","cwe":"CWE-416","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-3352","date":"2026-10-10","epss":0.00507,"percentile":0.41433}],"risk":0.27378,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-3352","description":"Use After Free in GitHub repository vim/vim prior to 9.0.0614."},"relatedVulnerabilities":[{"id":"CVE-2022-3352","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-3352","cwe":"CWE-416","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-3352","cwe":"CWE-416","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-3352","date":"2026-10-10","epss":0.00507,"percentile":0.41433}],"urls":["https://github.com/vim/vim/commit/ef976323e770315b5fca544efb6b2faa25674d15","https://huntr.dev/bounties/d058f182-a49b-40c7-9234-43d4c5a29f60","https://lists.debian.org/debian-lts-announce/2022/11/msg00032.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4QI7AETXBHPC7SGA77Q7O5IEGULWYET7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTBVD4J2SKVSWK4VBN5JP5OEVK6GDS3N/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LSSEWQLK55MCNT4Z2IIJEJYEI5HLCODI/","https://security.gentoo.org/glsa/202305-16"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-3352","description":"Use After Free in GitHub repository vim/vim prior to 9.0.0614."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-26269","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-26269","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-26269","cwe":"CWE-121","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-26269","date":"2026-10-10","epss":0.00521,"percentile":0.42481}],"risk":0.273525,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-26269","description":"A flaw was found in Vim. A stack-based buffer overflow in the NetBeans integration can be triggered in the special_keys function in the src/netbeans.c file via a malicious NetBeans server due to improper bounds checking, most likely resulting in a denial of service or in arbitrary command execution."},"relatedVulnerabilities":[{"id":"CVE-2026-26269","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-26269","cwe":"CWE-121","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-26269","date":"2026-10-10","epss":0.00521,"percentile":0.42481}],"urls":["https://github.com/vim/vim/commit/c5f312aad8e4179e437f81ad39a860cd0ef11970","https://github.com/vim/vim/releases/tag/v9.1.2148","https://github.com/vim/vim/security/advisories/GHSA-9w5c-hwr9-hc68","http://www.openwall.com/lists/oss-security/2026/02/13/2"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-26269","description":"Vim is an open source, command line text editor. Prior to 9.1.2148, a stack buffer overflow vulnerability exists in Vim's NetBeans integration when processing the specialKeys command, affecting Vim builds that enable and use the NetBeans feature. The Stack buffer overflow exists in special_keys() (in src/netbeans.c). The while (*tok) loop writes two bytes per iteration into a 64-byte stack buffer (keybuf) with no bounds check. A malicious NetBeans server can overflow keybuf with a single specialKeys command. The issue has been fixed as of Vim patch v9.1.2148."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-3235","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-3235","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-3235","cwe":"CWE-416","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-3235","cwe":"CWE-416","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-3235","date":"2026-10-10","epss":0.00505,"percentile":0.41319}],"risk":0.27270000000000005,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-3235","description":"A use after free vulnerability has been found in the vim package of the linux kernals such that Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code."},"relatedVulnerabilities":[{"id":"CVE-2022-3235","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-3235","cwe":"CWE-416","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-3235","cwe":"CWE-416","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-3235","date":"2026-10-10","epss":0.00505,"percentile":0.41319}],"urls":["https://github.com/vim/vim/commit/1c3dd8ddcba63c1af5112e567215b3cec2de11d0","https://huntr.dev/bounties/96d5f7a0-a834-4571-b73b-0fe523b941af","https://lists.debian.org/debian-lts-announce/2022/11/msg00032.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4QI7AETXBHPC7SGA77Q7O5IEGULWYET7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTBVD4J2SKVSWK4VBN5JP5OEVK6GDS3N/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LSSEWQLK55MCNT4Z2IIJEJYEI5HLCODI/","https://security.gentoo.org/glsa/202305-16"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-3235","description":"Use After Free in GitHub repository vim/vim prior to 9.0.0490."}]},{"artifact":{"id":"f5eb0651fec88df5","cpes":["cpe:2.3:a:com.fasterxml.jackson.core:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.20.1:*:*:*:*:*:*:*"],"name":"jackson-databind","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1","type":"java-archive","version":"2.20.1","language":"java","licenses":["The Apache Software License, Version 2.0"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/opt/jenkins-plugin-manager.jar:com.fasterxml.jackson.core:jackson-databind","manifestName":"","pomArtifactID":"jackson-databind","archiveDigests":null},"locations":[{"path":"/opt/jenkins-plugin-manager.jar","layerID":"sha256:1303dd889187d7e25ac68bf0fb8d636f5a922b6753d092bcae3924d569cb869a","accessPath":"/opt/jenkins-plugin-manager.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.21.6"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-wjgm-6hv5-3cvf","versionConstraint":">=2.19.0,<2.21.6 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-databind","version":"2.20.1"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-wjgm-6hv5-3cvf","fix":{"state":"fixed","versions":["2.21.6"],"available":[{"date":"2026-09-29","kind":"first-observed","version":"2.21.6"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19032","cwe":"CWE-470","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"},{"cve":"CVE-2026-19032","cwe":"CWE-610","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-19032","date":"2026-10-10","epss":0.00529,"percentile":0.43037}],"risk":0.27243500000000004,"urls":["https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.10","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.6","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.2","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.6","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.2"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-wjgm-6hv5-3cvf","description":"jackson-databind: Path Deserialization Missing Scheme Allowlist for FileSystemProvider Resolution"},"relatedVulnerabilities":[{"id":"CVE-2026-19032","cvss":[{"type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19032","cwe":"CWE-470","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"},{"cve":"CVE-2026-19032","cwe":"CWE-610","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-19032","date":"2026-10-10","epss":0.00529,"percentile":0.43037}],"urls":["https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19032","description":"jackson-databind's deserializer for java.nio.file.Path resolves an attacker-supplied URI without restricting the URI scheme. In JDKFromStringDeserializer.NioPathHelper.deserialize, a string bound from untrusted JSON is passed to new URI(value) and then to Path.of(uri). When that throws FileSystemNotFoundException, the code enumerates ServiceLoader<FileSystemProvider> and calls provider.getPath(uri) on the first provider whose scheme matches the attacker-chosen scheme. Untrusted JSON can therefore select and drive an arbitrary registered FileSystemProvider during readValue under a default JsonMapper, and forces provider class loading at the same time. With only the JDK built-in providers (file, jar/zipfs) present, the resolved path is inert and no mount or network I/O occurs; further impact requires a side-effecting third-party FileSystemProvider on the classpath. This affects com.fasterxml.jackson.core:jackson-databind from 2.8.0 before 2.18.10, from 2.19.0 before 2.21.6, and from 2.22.0 before 2.22.2, and tools.jackson.core:jackson-databind from 3.0.0 before 3.1.6 and from 3.2.0 before 3.2.2. Users should upgrade to 2.18.10, 2.21.6, 2.22.2, 3.1.6, or 3.2.2. Binding java.nio.file.Path from untrusted JSON should be avoided regardless of version."}]},{"artifact":{"id":"9eebaea2eda844dd","cpes":["cpe:2.3:a:curl-minimal:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl-minimal:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl_minimal:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl_minimal:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*"],"name":"curl-minimal","purl":"pkg:rpm/redhat/curl-minimal@7.76.1-40.el9_8.7?arch=x86_64&distro=rhel-9.8&upstream=curl-7.76.1-40.el9_8.7.src.rpm","type":"rpm","version":"7.76.1-40.el9_8.7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.76.1-40.el9_8.7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-3784","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"curl","version":"7.76.1-40.el9_8.7"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-3784","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-3784","cwe":"CWE-305","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-3784","cwe":"CWE-305","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-3784","date":"2026-10-10","epss":0.00469,"percentile":0.38702}],"risk":0.26967499999999994,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-3784","description":"A flaw was found in curl. This vulnerability allows curl to wrongly reuse an existing HTTP proxy connection when performing a CONNECT request to a server, even if the new request uses different authentication credentials for the HTTP proxy. This improper connection reuse could lead to an attacker gaining unauthorized access to resources or information intended for a different user."},"relatedVulnerabilities":[{"id":"CVE-2026-3784","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-3784","cwe":"CWE-305","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-3784","cwe":"CWE-305","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-3784","date":"2026-10-10","epss":0.00469,"percentile":0.38702}],"urls":["https://curl.se/docs/CVE-2026-3784.html","https://curl.se/docs/CVE-2026-3784.json","https://hackerone.com/reports/3584903","http://www.openwall.com/lists/oss-security/2026/03/11/3","https://cert-portal.siemens.com/productcert/html/ssa-253495.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-3784","description":"curl would wrongly reuse an existing HTTP proxy connection doing CONNECT to a\nserver, even if the new request uses different credentials for the HTTP proxy.\nThe proper behavior is to create or use a separate connection."}]},{"artifact":{"id":"b685606a6baf0f79","cpes":["cpe:2.3:a:libcurl-minimal:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl-minimal:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl_minimal:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl_minimal:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*"],"name":"libcurl-minimal","purl":"pkg:rpm/redhat/libcurl-minimal@7.76.1-40.el9_8.7?arch=x86_64&distro=rhel-9.8&upstream=curl-7.76.1-40.el9_8.7.src.rpm","type":"rpm","version":"7.76.1-40.el9_8.7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.76.1-40.el9_8.7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-3784","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"curl","version":"7.76.1-40.el9_8.7"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-3784","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-3784","cwe":"CWE-305","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-3784","cwe":"CWE-305","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-3784","date":"2026-10-10","epss":0.00469,"percentile":0.38702}],"risk":0.26967499999999994,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-3784","description":"A flaw was found in curl. This vulnerability allows curl to wrongly reuse an existing HTTP proxy connection when performing a CONNECT request to a server, even if the new request uses different authentication credentials for the HTTP proxy. This improper connection reuse could lead to an attacker gaining unauthorized access to resources or information intended for a different user."},"relatedVulnerabilities":[{"id":"CVE-2026-3784","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-3784","cwe":"CWE-305","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-3784","cwe":"CWE-305","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-3784","date":"2026-10-10","epss":0.00469,"percentile":0.38702}],"urls":["https://curl.se/docs/CVE-2026-3784.html","https://curl.se/docs/CVE-2026-3784.json","https://hackerone.com/reports/3584903","http://www.openwall.com/lists/oss-security/2026/03/11/3","https://cert-portal.siemens.com/productcert/html/ssa-253495.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-3784","description":"curl would wrongly reuse an existing HTTP proxy connection doing CONNECT to a\nserver, even if the new request uses different credentials for the HTTP proxy.\nThe proper behavior is to create or use a separate connection."}]},{"artifact":{"id":"ea0f2a7e0eb5d962","cpes":["cpe:2.3:a:python3:python3:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3:3.9.25-7.el9_8.3:*:*:*:*:*:*:*"],"name":"python3","purl":"pkg:rpm/redhat/python3@3.9.25-7.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=python3.9-3.9.25-7.el9_8.3.src.rpm","type":"rpm","version":"3.9.25-7.el9_8.3","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python3.9","version":"3.9.25-7.el9_8.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-15282","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"python3.9","version":"3.9.25-7.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-15282","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.8,"impactScore":3.6,"exploitabilityScore":1.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-15282","cwe":"CWE-93","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2025-15282","date":"2026-10-10","epss":0.00545,"percentile":0.44085}],"risk":0.26705,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-15282","description":"Missing newline filtering has been discovered in Python. User-controlled data URLs parsed by urllib.request.DataHandler allow injecting headers through newlines in the data URL mediatype."},"relatedVulnerabilities":[{"id":"CVE-2025-15282","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-15282","cwe":"CWE-93","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2025-15282","date":"2026-10-10","epss":0.00545,"percentile":0.44085}],"urls":["https://github.com/python/cpython/commit/05356b1cc153108aaf27f3b72ce438af4aa218c0","https://github.com/python/cpython/commit/34d76b00dabde81a793bd06dd8ecb057838c4b38","https://github.com/python/cpython/commit/3f396ca9d7bbe2a50ea6b8c9b27c0082884d9f80","https://github.com/python/cpython/commit/4ed11d3cd288e6b90196a15c5a825a45d318fe47","https://github.com/python/cpython/commit/a35ca3be5842505dab74dc0b90b89cde0405017a","https://github.com/python/cpython/commit/f25509e78e8be6ea73c811ac2b8c928c28841b9f","https://github.com/python/cpython/issues/143925","https://github.com/python/cpython/pull/143926","https://mail.python.org/archives/list/security-announce@python.org/thread/X66HL7SISGJT33J53OHXMZT4DFLMHVKF/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-15282","description":"User-controlled data URLs parsed by urllib.request.DataHandler allow injecting headers through newlines in the data URL mediatype."}]},{"artifact":{"id":"0ed3c72bb9ee9391","cpes":["cpe:2.3:a:python3-libs:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3-libs:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3_libs:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3_libs:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*"],"name":"python3-libs","purl":"pkg:rpm/redhat/python3-libs@3.9.25-7.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=python3.9-3.9.25-7.el9_8.3.src.rpm","type":"rpm","version":"3.9.25-7.el9_8.3","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python3.9","version":"3.9.25-7.el9_8.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-15282","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"python3.9","version":"3.9.25-7.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-15282","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.8,"impactScore":3.6,"exploitabilityScore":1.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-15282","cwe":"CWE-93","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2025-15282","date":"2026-10-10","epss":0.00545,"percentile":0.44085}],"risk":0.26705,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-15282","description":"Missing newline filtering has been discovered in Python. User-controlled data URLs parsed by urllib.request.DataHandler allow injecting headers through newlines in the data URL mediatype."},"relatedVulnerabilities":[{"id":"CVE-2025-15282","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-15282","cwe":"CWE-93","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2025-15282","date":"2026-10-10","epss":0.00545,"percentile":0.44085}],"urls":["https://github.com/python/cpython/commit/05356b1cc153108aaf27f3b72ce438af4aa218c0","https://github.com/python/cpython/commit/34d76b00dabde81a793bd06dd8ecb057838c4b38","https://github.com/python/cpython/commit/3f396ca9d7bbe2a50ea6b8c9b27c0082884d9f80","https://github.com/python/cpython/commit/4ed11d3cd288e6b90196a15c5a825a45d318fe47","https://github.com/python/cpython/commit/a35ca3be5842505dab74dc0b90b89cde0405017a","https://github.com/python/cpython/commit/f25509e78e8be6ea73c811ac2b8c928c28841b9f","https://github.com/python/cpython/issues/143925","https://github.com/python/cpython/pull/143926","https://mail.python.org/archives/list/security-announce@python.org/thread/X66HL7SISGJT33J53OHXMZT4DFLMHVKF/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-15282","description":"User-controlled data URLs parsed by urllib.request.DataHandler allow injecting headers through newlines in the data URL mediatype."}]},{"artifact":{"id":"ea0f2a7e0eb5d962","cpes":["cpe:2.3:a:python3:python3:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3:3.9.25-7.el9_8.3:*:*:*:*:*:*:*"],"name":"python3","purl":"pkg:rpm/redhat/python3@3.9.25-7.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=python3.9-3.9.25-7.el9_8.3.src.rpm","type":"rpm","version":"3.9.25-7.el9_8.3","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python3.9","version":"3.9.25-7.el9_8.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-1502","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"python3.9","version":"3.9.25-7.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-1502","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.5,"impactScore":3.6,"exploitabilityScore":1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-1502","cwe":"CWE-93","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-1502","date":"2026-10-10","epss":0.00562,"percentile":0.45108}],"risk":0.26695,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-1502","description":"A flaw was found in Python. This vulnerability allows for the injection of extra information into HTTP communication. Specifically, the system does not properly prevent special characters (carriage return and line feed) from being included in HTTP client proxy tunnel headers or host fields."},"relatedVulnerabilities":[{"id":"CVE-2026-1502","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-1502","cwe":"CWE-93","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-1502","date":"2026-10-10","epss":0.00562,"percentile":0.45108}],"urls":["https://github.com/python/cpython/commit/05ed7ce7ae9e17c23a04085b2539fe6d6d3cef69","https://github.com/python/cpython/commit/56b7100b04e44ea27989242b176beb8f016b2c53","https://github.com/python/cpython/commit/58703ec1bdd1eb075e8b01a0c427683ce594dd3e","https://github.com/python/cpython/commit/9e071c9b28c17f347f81b388a003d4eeb3c7a8dd","https://github.com/python/cpython/commit/b1cf9016335cb637c5a425032e8274a224f4b2ed","https://github.com/python/cpython/commit/c00c386faa579ad71196d33408644478488e43ec","https://github.com/python/cpython/issues/146211","https://github.com/python/cpython/pull/146212","https://mail.python.org/archives/list/security-announce@python.org/thread/2IVPAEQWUJBCTQZEJEVTYCIKSMQPGRZ3/","http://www.openwall.com/lists/oss-security/2026/04/11/4"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-1502","description":"CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host."}]},{"artifact":{"id":"0ed3c72bb9ee9391","cpes":["cpe:2.3:a:python3-libs:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3-libs:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3_libs:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3_libs:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*"],"name":"python3-libs","purl":"pkg:rpm/redhat/python3-libs@3.9.25-7.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=python3.9-3.9.25-7.el9_8.3.src.rpm","type":"rpm","version":"3.9.25-7.el9_8.3","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python3.9","version":"3.9.25-7.el9_8.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-1502","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"python3.9","version":"3.9.25-7.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-1502","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.5,"impactScore":3.6,"exploitabilityScore":1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-1502","cwe":"CWE-93","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-1502","date":"2026-10-10","epss":0.00562,"percentile":0.45108}],"risk":0.26695,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-1502","description":"A flaw was found in Python. This vulnerability allows for the injection of extra information into HTTP communication. Specifically, the system does not properly prevent special characters (carriage return and line feed) from being included in HTTP client proxy tunnel headers or host fields."},"relatedVulnerabilities":[{"id":"CVE-2026-1502","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-1502","cwe":"CWE-93","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-1502","date":"2026-10-10","epss":0.00562,"percentile":0.45108}],"urls":["https://github.com/python/cpython/commit/05ed7ce7ae9e17c23a04085b2539fe6d6d3cef69","https://github.com/python/cpython/commit/56b7100b04e44ea27989242b176beb8f016b2c53","https://github.com/python/cpython/commit/58703ec1bdd1eb075e8b01a0c427683ce594dd3e","https://github.com/python/cpython/commit/9e071c9b28c17f347f81b388a003d4eeb3c7a8dd","https://github.com/python/cpython/commit/b1cf9016335cb637c5a425032e8274a224f4b2ed","https://github.com/python/cpython/commit/c00c386faa579ad71196d33408644478488e43ec","https://github.com/python/cpython/issues/146211","https://github.com/python/cpython/pull/146212","https://mail.python.org/archives/list/security-announce@python.org/thread/2IVPAEQWUJBCTQZEJEVTYCIKSMQPGRZ3/","http://www.openwall.com/lists/oss-security/2026/04/11/4"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-1502","description":"CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-3099","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-3099","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-3099","cwe":"CWE-416","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-3099","cwe":"CWE-416","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-3099","date":"2026-10-10","epss":0.00493,"percentile":0.40514}],"risk":0.26622000000000007,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-3099","description":"A use-after-free vulnerability was found in vim's do_cmdline() function of the src/ex_docmd.c file. The issue triggers when an invalid line number on :for is ignored. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering use-after-free that causes an application to crash, possibly executing code and corrupting memory."},"relatedVulnerabilities":[{"id":"CVE-2022-3099","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-3099","cwe":"CWE-416","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-3099","cwe":"CWE-416","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-3099","date":"2026-10-10","epss":0.00493,"percentile":0.40514}],"urls":["https://github.com/vim/vim/commit/35d21c6830fc2d68aca838424a0e786821c5891c","https://huntr.dev/bounties/403210c7-6cc7-4874-8934-b57f88bd4f5e","https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DVWBI4BVTBUMNW4NMB3WZZDQJBKIGXI3/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LLK2RMZEECKKWUQK7J46D2FQZOXFQLTC/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWOJOA7PZZAMBI5GFTL6PWHXMWSDLUXL/","https://security.gentoo.org/glsa/202305-16","https://lists.debian.org/debian-lts-announce/2025/03/msg00023.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-3099","description":"Use After Free in GitHub repository vim/vim prior to 9.0.0360."}]},{"artifact":{"id":"b900134ce800c270","cpes":["cpe:2.3:a:redhat:expat:2.5.0-6.el9_8.5:*:*:*:*:*:*:*","cpe:2.3:a:expat:expat:2.5.0-6.el9_8.5:*:*:*:*:*:*:*"],"name":"expat","purl":"pkg:rpm/redhat/expat@2.5.0-6.el9_8.5?arch=x86_64&distro=rhel-9.8&upstream=expat-2.5.0-6.el9_8.5.src.rpm","type":"rpm","version":"2.5.0-6.el9_8.5","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-76641","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"expat","version":"0:2.5.0-6.el9_8.5"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-76641","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-76641","cwe":"CWE-125","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-76641","date":"2026-10-10","epss":0.00353,"percentile":0.26999}],"risk":0.26475,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-76641","description":"A flaw was found in Expat. Attackers can exploit an out-of-bounds read vulnerability by processing XML with external entity parsers created via XML_ExternalEntityParserCreate. This can lead to memory corruption. Specifically, a mismatch in struct sizes can cause a read past memory boundaries, potentially resulting in a denial of service (DoS) due to a segfault or incorrect handling of XML attributes."},"relatedVulnerabilities":[{"id":"CVE-2026-76641","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-76641","cwe":"CWE-125","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-76641","date":"2026-10-10","epss":0.00353,"percentile":0.26999}],"urls":["https://github.com/libexpat/libexpat/commit/98599f6dcc2b460410881fe420f5f55d6bec63bf","https://github.com/libexpat/libexpat/pull/1331","https://www.vulncheck.com/advisories/expat-out-of-bounds-read-via-dtdcopy"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-76641","description":"Expat through 2.8.3 contains an out-of-bounds read vulnerability that allows attackers to trigger memory corruption by processing XML with external entity parsers created via XML_ExternalEntityParserCreate. A struct size mismatch between ELEMENT_TYPE members causes storeAtts to read the attIndex member past allocated memory boundaries, resulting in failure to normalize whitespace in non-CDATA attributes or a wild pointer dereference causing a segfault. This vulnerability was introduced by the fix for CVE-2026-66046."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-0512","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2023-0512","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-0512","cwe":"CWE-369","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2023-0512","date":"2026-10-10","epss":0.0049,"percentile":0.40266}],"risk":0.2646,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-0512","description":"A divide-by-zero flaw was found in Vim's adjust_skipcol() function in the move.c file. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a floating point exception error and causing an application to crash, eventually leading to a denial of service."},"relatedVulnerabilities":[{"id":"CVE-2023-0512","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.3,"impactScore":5.9,"exploitabilityScore":1.4},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-0512","cwe":"CWE-369","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2023-0512","date":"2026-10-10","epss":0.0049,"percentile":0.40266}],"urls":["http://seclists.org/fulldisclosure/2023/Mar/17","http://seclists.org/fulldisclosure/2023/Mar/18","http://seclists.org/fulldisclosure/2023/Mar/21","https://github.com/vim/vim/commit/870219c58c0804bdc55419b2e455c06ac715a835","https://huntr.dev/bounties/de83736a-1936-4872-830b-f1e9b0ad2a74","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/","https://support.apple.com/kb/HT213670","https://support.apple.com/kb/HT213675","https://support.apple.com/kb/HT213677"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-0512","description":"Divide By Zero in GitHub repository vim/vim prior to 9.0.1247."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-3256","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-3256","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-3256","cwe":"CWE-416","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-3256","cwe":"CWE-416","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-3256","date":"2026-10-10","epss":0.00489,"percentile":0.40242}],"risk":0.26406,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-3256","description":"A heap use-after-free vulnerability was found in vim's movemark() function of the src/mark.c file. This issue occurs because vim uses freed memory when 'autocmd' changes the mark. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a heap use-after-free that causes an application to crash, possibly executing code and corrupting memory."},"relatedVulnerabilities":[{"id":"CVE-2022-3256","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-3256","cwe":"CWE-416","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-3256","cwe":"CWE-416","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-3256","date":"2026-10-10","epss":0.00489,"percentile":0.40242}],"urls":["https://github.com/vim/vim/commit/8ecfa2c56b4992c7f067b92488aa9acea5a454ad","https://huntr.dev/bounties/8336a3df-212a-4f8d-ae34-76ef1f936bb3","https://lists.debian.org/debian-lts-announce/2022/11/msg00032.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4QI7AETXBHPC7SGA77Q7O5IEGULWYET7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTBVD4J2SKVSWK4VBN5JP5OEVK6GDS3N/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LSSEWQLK55MCNT4Z2IIJEJYEI5HLCODI/","https://security.gentoo.org/glsa/202305-16"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-3256","description":"Use After Free in GitHub repository vim/vim prior to 9.0.0530."}]},{"artifact":{"id":"c0b424c4c915f6c5","cpes":["cpe:2.3:a:redhat:tar:2\\:1.34-13.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:tar:tar:2\\:1.34-13.el9_8:*:*:*:*:*:*:*"],"name":"tar","purl":"pkg:rpm/redhat/tar@1.34-13.el9_8?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=tar-1.34-13.el9_8.src.rpm","type":"rpm","version":"2:1.34-13.el9_8","language":"","licenses":["GPLv3+"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-59875","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"tar","version":"2:1.34-13.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-59875","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59875","cwe":"CWE-248","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59875","date":"2026-10-10","epss":0.00507,"percentile":0.41414}],"risk":0.26110500000000003,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-59875","description":"A flaw was found in node-tar, a library for manipulating tar archives in Node.js. A remote attacker could craft a malicious archive containing null characters (NUL bytes) in its metadata. When this archive is processed, the unstripped null characters can cause the application to terminate unexpectedly, leading to a Denial of Service (DoS)."},"relatedVulnerabilities":[{"id":"CVE-2026-59875","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59875","cwe":"CWE-248","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59875","date":"2026-10-10","epss":0.00507,"percentile":0.41414}],"urls":["https://github.com/isaacs/node-tar/commit/7a635c29f5edbf083557374d43984273ecfed5b3","https://github.com/isaacs/node-tar/releases/tag/v7.5.17","https://github.com/isaacs/node-tar/security/advisories/GHSA-gvwx-54wh-qm9j"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-59875","description":"node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.17, node-tar does not strip NUL bytes from PAX path and linkpath records in src/pax.ts, allowing a crafted archive with values to reach fs.lstat or fs.open and terminate the process with an uncaught exception. This issue is fixed in version 7.5.17."}]},{"artifact":{"id":"7e23f8149f581507","cpes":["cpe:2.3:a:krb5-libs:krb5-libs:1.21.1-10.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:krb5-libs:krb5_libs:1.21.1-10.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:krb5_libs:krb5-libs:1.21.1-10.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:krb5_libs:krb5_libs:1.21.1-10.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:krb5-libs:1.21.1-10.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:krb5_libs:1.21.1-10.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5-libs:1.21.1-10.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5_libs:1.21.1-10.el9_8:*:*:*:*:*:*:*"],"name":"krb5-libs","purl":"pkg:rpm/redhat/krb5-libs@1.21.1-10.el9_8?arch=x86_64&distro=rhel-9.8&upstream=krb5-1.21.1-10.el9_8.src.rpm","type":"rpm","version":"1.21.1-10.el9_8","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"krb5","version":"1.21.1-10.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107708","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"krb5","version":"1.21.1-10.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-107708","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.9,"impactScore":3.6,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107708","cwe":"CWE-476","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107708","date":"2026-10-10","epss":0.00521,"percentile":0.4249}],"risk":0.257895,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-107708","description":"A flaw was found in krb5. This vulnerability allows a compromised or malicious cross-realm trusted Key Distribution Center (KDC) to cause a Denial of Service (DoS). By sending an S4U2Proxy delegation request containing a malformed client name within a Privilege Attribute Certificate (PAC), an attacker can trigger a NULL pointer dereference that crashes the KDC daemon, interrupting authentication services."},"relatedVulnerabilities":[{"id":"CVE-2026-107708","cvss":[{"type":"Primary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.9,"impactScore":3.6,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107708","cwe":"CWE-476","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107708","date":"2026-10-10","epss":0.00521,"percentile":0.4249}],"urls":["https://github.com/krb5/krb5","https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/kdc/kdc_util.c#L639-L676","https://github.com/krb5/krb5/commit/a88a18cafa1040a0c4f9c8d08288fc98831ec86d","https://github.com/krb5/krb5/commit/f6e2c397ceda6467ebbaab8ed66d4895c9f1d6a7","https://github.com/krb5/krb5/pull/1510","https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-kdc-null-pointer-dereference-via-s4u2proxy-pac"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107708","description":"MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_realm() that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a malformed client name to crash krb5kdc and deny authentication."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-48236","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2023-48236","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-48236","cwe":"CWE-190","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-48236","date":"2026-10-10","epss":0.00694,"percentile":0.51553}],"risk":0.25331,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-48236","description":"A flaw was found in Vim, an open source command line text editor. When using the z= command, the user may overflow the count with values larger than MAX_INT. The impact is low because user interaction is required and a crash may not happen in all situations."},"relatedVulnerabilities":[{"id":"CVE-2023-48236","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","metrics":{"baseScore":2.8,"impactScore":1.5,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-48236","cwe":"CWE-190","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-48236","date":"2026-10-10","epss":0.00694,"percentile":0.51553}],"urls":["http://www.openwall.com/lists/oss-security/2023/11/16/1","https://github.com/vim/vim/commit/73b2d3790cad5694fc0ed0db2926e4220c48d968","https://github.com/vim/vim/security/advisories/GHSA-pr4c-932v-8hx5","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4UJAK2W5S7G75ETDAEM3BDUCVSXCEGRD/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M3VQF7CL3V6FGSEW37WNDFBRRILR65AK/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VNRNYLWXZOGTYWE5HMFNQ5FVE3HBUHF6/","https://security.netapp.com/advisory/ntap-20231227-0002/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-48236","description":"Vim is an open source command line text editor. When using the z= command, the user may overflow the count with values larger\nthan MAX_INT. Impact is low, user interaction is required and a crash may not even happen in all situations. This vulnerability has been addressed in commit `73b2d379` which has been included in release version 9.0.2111. Users are advised to upgrade. There are no known workarounds for this vulnerability."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-0054","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2023-0054","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-0054","cwe":"CWE-787","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2023-0054","date":"2026-10-10","epss":0.00469,"percentile":0.38692}],"risk":0.25326,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-0054","description":"An out-of-bounds write flaw was found in Vim, in the do_string_sub function in the eval.c file. The issue occurs because of an invalid memory access due to a missing check of the return value of the vim_regsub function when a specially crafted input is processed. This flaw allows an attacker who can trick a user into opening a specially crafted file to trigger the out-of-bounds write, causing the application to crash."},"relatedVulnerabilities":[{"id":"CVE-2023-0054","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.3,"impactScore":5.9,"exploitabilityScore":1.4},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-0054","cwe":"CWE-787","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2023-0054","date":"2026-10-10","epss":0.00469,"percentile":0.38692}],"urls":["http://seclists.org/fulldisclosure/2023/Mar/17","https://github.com/vim/vim/commit/3ac1d97a1d9353490493d30088256360435f7731","https://huntr.dev/bounties/b289ee0f-fd16-4147-bd01-c6289c45e49d","https://lists.debian.org/debian-lts-announce/2023/06/msg00015.html","https://security.gentoo.org/glsa/202305-16","https://support.apple.com/kb/HT213670","https://lists.debian.org/debian-lts-announce/2025/03/msg00023.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-0054","description":"Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145."}]},{"artifact":{"id":"ea0f2a7e0eb5d962","cpes":["cpe:2.3:a:python3:python3:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3:3.9.25-7.el9_8.3:*:*:*:*:*:*:*"],"name":"python3","purl":"pkg:rpm/redhat/python3@3.9.25-7.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=python3.9-3.9.25-7.el9_8.3.src.rpm","type":"rpm","version":"3.9.25-7.el9_8.3","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python3.9","version":"3.9.25-7.el9_8.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-3276","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"python3.9","version":"3.9.25-7.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-3276","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-3276","cwe":"CWE-407","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-3276","date":"2026-10-10","epss":0.00486,"percentile":0.39991}],"risk":0.25028999999999996,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-3276","description":"A flaw was found in the `unicodedata.normalize()` function in Python. This vulnerability allows a remote attacker to cause excessive CPU consumption by providing specially crafted Unicode input. Successful exploitation can lead to a Denial of Service (DoS) on the affected system."},"relatedVulnerabilities":[{"id":"CVE-2026-3276","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-3276","cwe":"CWE-407","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-3276","date":"2026-10-10","epss":0.00486,"percentile":0.39991}],"urls":["https://github.com/python/cpython/commit/6b505d1f41f8f3ea0fe5a4786d3a8fff1875cfc0","https://github.com/python/cpython/commit/90748760d38ca3ac5fc6788a69becab905c95598","https://github.com/python/cpython/commit/991224b1e8311c85f198f6dd8208bf8cff7fc26f","https://github.com/python/cpython/commit/ba785b88add96acbf403d65cb157fb2743a33a32","https://github.com/python/cpython/commit/c5512bd7c1dc28055660565275012766941d3066","https://github.com/python/cpython/commit/d3ab945af25b28dfe13ac6cb40c124a01b33ce1f","https://github.com/python/cpython/commit/db744c0776c1d5dd11aaa70eff2a6993c408bacc","https://github.com/python/cpython/commit/e322a1857084d521f79f45181b776f62e6acfc2c","https://github.com/python/cpython/issues/149079","https://github.com/python/cpython/pull/149080","https://mail.python.org/archives/list/security-announce@python.org/thread/PP5HB4K7727OBBM76KA2ILID76K3OZGZ/","http://www.openwall.com/lists/oss-security/2026/06/03/15"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-3276","description":"unicodedata.normalize() can take excessive CPU time when processing\nspecially crafted Unicode input containing long runs of combining characters\nwith alternating Canonical Combining Class values.\nThis affects all normalization forms."}]},{"artifact":{"id":"0ed3c72bb9ee9391","cpes":["cpe:2.3:a:python3-libs:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3-libs:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3_libs:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3_libs:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*"],"name":"python3-libs","purl":"pkg:rpm/redhat/python3-libs@3.9.25-7.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=python3.9-3.9.25-7.el9_8.3.src.rpm","type":"rpm","version":"3.9.25-7.el9_8.3","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python3.9","version":"3.9.25-7.el9_8.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-3276","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"python3.9","version":"3.9.25-7.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-3276","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-3276","cwe":"CWE-407","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-3276","date":"2026-10-10","epss":0.00486,"percentile":0.39991}],"risk":0.25028999999999996,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-3276","description":"A flaw was found in the `unicodedata.normalize()` function in Python. This vulnerability allows a remote attacker to cause excessive CPU consumption by providing specially crafted Unicode input. Successful exploitation can lead to a Denial of Service (DoS) on the affected system."},"relatedVulnerabilities":[{"id":"CVE-2026-3276","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-3276","cwe":"CWE-407","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-3276","date":"2026-10-10","epss":0.00486,"percentile":0.39991}],"urls":["https://github.com/python/cpython/commit/6b505d1f41f8f3ea0fe5a4786d3a8fff1875cfc0","https://github.com/python/cpython/commit/90748760d38ca3ac5fc6788a69becab905c95598","https://github.com/python/cpython/commit/991224b1e8311c85f198f6dd8208bf8cff7fc26f","https://github.com/python/cpython/commit/ba785b88add96acbf403d65cb157fb2743a33a32","https://github.com/python/cpython/commit/c5512bd7c1dc28055660565275012766941d3066","https://github.com/python/cpython/commit/d3ab945af25b28dfe13ac6cb40c124a01b33ce1f","https://github.com/python/cpython/commit/db744c0776c1d5dd11aaa70eff2a6993c408bacc","https://github.com/python/cpython/commit/e322a1857084d521f79f45181b776f62e6acfc2c","https://github.com/python/cpython/issues/149079","https://github.com/python/cpython/pull/149080","https://mail.python.org/archives/list/security-announce@python.org/thread/PP5HB4K7727OBBM76KA2ILID76K3OZGZ/","http://www.openwall.com/lists/oss-security/2026/06/03/15"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-3276","description":"unicodedata.normalize() can take excessive CPU time when processing\nspecially crafted Unicode input containing long runs of combining characters\nwith alternating Canonical Combining Class values.\nThis affects all normalization forms."}]},{"artifact":{"id":"1c27b1fc065b3d30","cpes":["cpe:2.3:a:python3-pip-wheel:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip-wheel:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip_wheel:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip_wheel:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*"],"name":"python3-pip-wheel","purl":"pkg:rpm/redhat/python3-pip-wheel@21.3.1-2.el9_8?arch=noarch&distro=rhel-9.8&upstream=python-pip-21.3.1-2.el9_8.src.rpm","type":"rpm","version":"21.3.1-2.el9_8","language":"","licenses":["MIT and Python and ASL 2.0 and BSD and ISC and LGPLv2 and MPLv2.0 and (ASL 2.0 or BSD)"],"metadata":{"epoch":null,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python-pip","version":"21.3.1-2.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-45803","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"python-pip","version":"21.3.1-2.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2023-45803","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":4.2,"impactScore":3.6,"exploitabilityScore":0.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-45803","cwe":"CWE-200","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-45803","date":"2026-10-10","epss":0.00544,"percentile":0.43987}],"risk":0.25024,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-45803","description":"A flaw was found in urllib3, an HTTP client library for Python. urllib3 doesn't remove the HTTP request body when an HTTP redirect response using status 301, 302, or 303, after changing the method in a request from one that could accept a request body such as `POST` to `GET`, as is required by HTTP RFCs. This issue requires a previously trusted service to become compromised in order to have an impact on confidentiality, therefore, the exploitability of this vulnerability is low. Additionally, many users aren't putting sensitive data in HTTP request bodies; if this is the case, this vulnerability isn't exploitable."},"relatedVulnerabilities":[{"id":"CVE-2023-45803","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":4.2,"impactScore":3.6,"exploitabilityScore":0.6},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":4.2,"impactScore":3.6,"exploitabilityScore":0.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-45803","cwe":"CWE-200","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-45803","date":"2026-10-10","epss":0.00544,"percentile":0.43987}],"urls":["https://github.com/urllib3/urllib3/commit/4e98d57809dacab1cbe625fddeec1a290c478ea9","https://github.com/urllib3/urllib3/security/advisories/GHSA-g4mx-q9vg-27p4","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4R2Y5XK3WALSR3FNAGN7JBYV2B343ZKB/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5F5CUBAN5XMEBVBZPHFITBLMJV5FIJJ5/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PPDPLM6UUMN55ESPQWJFLLIZY4ZKCNRX/","https://www.rfc-editor.org/rfc/rfc9110.html#name-get","https://lists.debian.org/debian-lts-announce/2024/12/msg00020.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-45803","description":"urllib3 is a user-friendly HTTP client library for Python. urllib3 previously wouldn't remove the HTTP request body when an HTTP redirect response using status 301, 302, or 303 after the request had its method changed from one that could accept a request body (like `POST`) to `GET` as is required by HTTP RFCs. Although this behavior is not specified in the section for redirects, it can be inferred by piecing together information from different sections and we have observed the behavior in other major HTTP client implementations like curl and web browsers. Because the vulnerability requires a previously trusted service to become compromised in order to have an impact on confidentiality we believe the exploitability of this vulnerability is low. Additionally, many users aren't putting sensitive data in HTTP request bodies, if this is the case then this vulnerability isn't exploitable. Both of the following conditions must be true to be affected by this vulnerability: 1. Using urllib3 and submitting sensitive information in the HTTP request body (such as form data or JSON) and 2. The origin service is compromised and starts redirecting using 301, 302, or 303 to a malicious peer or the redirected-to service becomes compromised. This issue has been addressed in versions 1.26.18 and 2.0.7 and users are advised to update to resolve this issue. Users unable to update should disable redirects for services that aren't expecting to respond with redirects with `redirects=False` and disable automatic redirects with `redirects=False` and handle 301, 302, and 303 redirects manually by stripping the HTTP request body."}]},{"artifact":{"id":"ea0f2a7e0eb5d962","cpes":["cpe:2.3:a:python3:python3:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3:3.9.25-7.el9_8.3:*:*:*:*:*:*:*"],"name":"python3","purl":"pkg:rpm/redhat/python3@3.9.25-7.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=python3.9-3.9.25-7.el9_8.3.src.rpm","type":"rpm","version":"3.9.25-7.el9_8.3","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python3.9","version":"3.9.25-7.el9_8.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-3644","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"python3.9","version":"3.9.25-7.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-3644","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-3644","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-3644","cwe":"CWE-116","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-3644","date":"2026-10-10","epss":0.00478,"percentile":0.39413}],"risk":0.24856,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-3644","description":"A control character validation flaw has been discovered in the Python http.cookie module. The Morsel.update(), |= operator, and unpickling paths were not patched to resolve  CVE-2026-0672, allowing control characters to bypass input validation. Additionally, BaseCookie.js_output() lacked the output validation applied to BaseCookie.output()."},"relatedVulnerabilities":[{"id":"CVE-2026-3644","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-3644","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-3644","cwe":"CWE-116","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-3644","date":"2026-10-10","epss":0.00478,"percentile":0.39413}],"urls":["https://github.com/python/cpython/commit/3974092b037f9a3b000fb15b48ea61ce3b25d330","https://github.com/python/cpython/commit/556aa098e738b127c714866f819b4abe2f7593d8","https://github.com/python/cpython/commit/57e88c1cf95e1481b94ae57abe1010469d47a6b4","https://github.com/python/cpython/commit/62ceb396fcbe69da1ded3702de586f4072b590dd","https://github.com/python/cpython/commit/d16ecc6c3626f0e2cc8f08c309c83934e8a979dd","https://github.com/python/cpython/commit/dae4b1a21f8df4570e30986affd61bbe4ade4cef","https://github.com/python/cpython/issues/145599","https://github.com/python/cpython/pull/145600","https://mail.python.org/archives/list/security-announce@python.org/thread/H6CADMBCDRFGWCMOXWUIHFJNV43GABJ7/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-3644","description":"The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update(), |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.js_output() lacked the output validation applied to BaseCookie.output()."}]},{"artifact":{"id":"0ed3c72bb9ee9391","cpes":["cpe:2.3:a:python3-libs:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3-libs:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3_libs:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3_libs:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*"],"name":"python3-libs","purl":"pkg:rpm/redhat/python3-libs@3.9.25-7.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=python3.9-3.9.25-7.el9_8.3.src.rpm","type":"rpm","version":"3.9.25-7.el9_8.3","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python3.9","version":"3.9.25-7.el9_8.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-3644","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"python3.9","version":"3.9.25-7.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-3644","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-3644","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-3644","cwe":"CWE-116","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-3644","date":"2026-10-10","epss":0.00478,"percentile":0.39413}],"risk":0.24856,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-3644","description":"A control character validation flaw has been discovered in the Python http.cookie module. The Morsel.update(), |= operator, and unpickling paths were not patched to resolve  CVE-2026-0672, allowing control characters to bypass input validation. Additionally, BaseCookie.js_output() lacked the output validation applied to BaseCookie.output()."},"relatedVulnerabilities":[{"id":"CVE-2026-3644","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-3644","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-3644","cwe":"CWE-116","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-3644","date":"2026-10-10","epss":0.00478,"percentile":0.39413}],"urls":["https://github.com/python/cpython/commit/3974092b037f9a3b000fb15b48ea61ce3b25d330","https://github.com/python/cpython/commit/556aa098e738b127c714866f819b4abe2f7593d8","https://github.com/python/cpython/commit/57e88c1cf95e1481b94ae57abe1010469d47a6b4","https://github.com/python/cpython/commit/62ceb396fcbe69da1ded3702de586f4072b590dd","https://github.com/python/cpython/commit/d16ecc6c3626f0e2cc8f08c309c83934e8a979dd","https://github.com/python/cpython/commit/dae4b1a21f8df4570e30986affd61bbe4ade4cef","https://github.com/python/cpython/issues/145599","https://github.com/python/cpython/pull/145600","https://mail.python.org/archives/list/security-announce@python.org/thread/H6CADMBCDRFGWCMOXWUIHFJNV43GABJ7/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-3644","description":"The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update(), |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.js_output() lacked the output validation applied to BaseCookie.output()."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-0288","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2023-0288","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.3,"impactScore":5.9,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-0288","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2023-0288","date":"2026-10-10","epss":0.00481,"percentile":0.39631}],"risk":0.247715,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-0288","description":"Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189."},"relatedVulnerabilities":[{"id":"CVE-2023-0288","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.3,"impactScore":5.9,"exploitabilityScore":1.4},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-0288","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2023-0288","date":"2026-10-10","epss":0.00481,"percentile":0.39631}],"urls":["http://seclists.org/fulldisclosure/2023/Mar/17","https://github.com/vim/vim/commit/232bdaaca98c34a99ffadf27bf6ee08be6cc8f6a","https://huntr.dev/bounties/550a0852-9be0-4abe-906c-f803b34e41d3","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WYC22GGZ6QA66HLNLHCTAJU265TT3O33/","https://support.apple.com/kb/HT213670"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-0288","description":"Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189."}]},{"artifact":{"id":"9eebaea2eda844dd","cpes":["cpe:2.3:a:curl-minimal:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl-minimal:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl_minimal:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl_minimal:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*"],"name":"curl-minimal","purl":"pkg:rpm/redhat/curl-minimal@7.76.1-40.el9_8.7?arch=x86_64&distro=rhel-9.8&upstream=curl-7.76.1-40.el9_8.7.src.rpm","type":"rpm","version":"7.76.1-40.el9_8.7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.76.1-40.el9_8.7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-8932","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"curl","version":"7.76.1-40.el9_8.7"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-8932","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-8932","cwe":"CWE-305","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-8932","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-8932","date":"2026-10-10","epss":0.00396,"percentile":0.31814}],"risk":0.24749999999999997,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-8932","description":"A flaw was found in curl. The libcurl library, used for transferring data with URLs, could improperly reuse existing network connections. This occurred even when changes to mutual Transport Layer Security (mTLS) settings, particularly those for client certificates, should have prevented such reuse. This issue could lead to a security feature bypass, where a client might use a connection with an unintended or weaker security configuration, potentially compromising the integrity or confidentiality of data."},"relatedVulnerabilities":[{"id":"CVE-2026-8932","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-8932","cwe":"CWE-305","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-8932","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-8932","date":"2026-10-10","epss":0.00396,"percentile":0.31814}],"urls":["https://curl.se/docs/CVE-2026-8932.html","https://curl.se/docs/CVE-2026-8932.json","https://hackerone.com/reports/3733910"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-8932","description":"libcurl would reuse a previously created connection even when some mTLS config\nrelated option had been changed that should have prohibited reuse.\n\nlibcurl keeps previously used connections in a connection pool for subsequent\ntransfers to reuse if one of them matches the setup. However, some TLS\nsettings related to client certificates were left out from the configuration\nmatch checks, making them match too easily. In particular options related to\nthe private key."}]},{"artifact":{"id":"b685606a6baf0f79","cpes":["cpe:2.3:a:libcurl-minimal:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl-minimal:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl_minimal:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl_minimal:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*"],"name":"libcurl-minimal","purl":"pkg:rpm/redhat/libcurl-minimal@7.76.1-40.el9_8.7?arch=x86_64&distro=rhel-9.8&upstream=curl-7.76.1-40.el9_8.7.src.rpm","type":"rpm","version":"7.76.1-40.el9_8.7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.76.1-40.el9_8.7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-8932","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"curl","version":"7.76.1-40.el9_8.7"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-8932","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-8932","cwe":"CWE-305","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-8932","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-8932","date":"2026-10-10","epss":0.00396,"percentile":0.31814}],"risk":0.24749999999999997,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-8932","description":"A flaw was found in curl. The libcurl library, used for transferring data with URLs, could improperly reuse existing network connections. This occurred even when changes to mutual Transport Layer Security (mTLS) settings, particularly those for client certificates, should have prevented such reuse. This issue could lead to a security feature bypass, where a client might use a connection with an unintended or weaker security configuration, potentially compromising the integrity or confidentiality of data."},"relatedVulnerabilities":[{"id":"CVE-2026-8932","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-8932","cwe":"CWE-305","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-8932","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-8932","date":"2026-10-10","epss":0.00396,"percentile":0.31814}],"urls":["https://curl.se/docs/CVE-2026-8932.html","https://curl.se/docs/CVE-2026-8932.json","https://hackerone.com/reports/3733910"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-8932","description":"libcurl would reuse a previously created connection even when some mTLS config\nrelated option had been changed that should have prohibited reuse.\n\nlibcurl keeps previously used connections in a connection pool for subsequent\ntransfers to reuse if one of them matches the setup. However, some TLS\nsettings related to client certificates were left out from the configuration\nmatch checks, making them match too easily. In particular options related to\nthe private key."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-48232","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2023-48232","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-48232","cwe":"CWE-755","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-48232","date":"2026-10-10","epss":0.00674,"percentile":0.50725}],"risk":0.24601000000000003,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-48232","description":"A flaw was found in Vim, an open source command line text editor. A floating point exception may occur when calculating the line offset for overlong lines when smooth scrolling is enabled and the cpo-settings include the 'n' flag. This issue may occur when a window border is present and when the wrapped line continues on the next physical line directly in the window border because the 'cpo' setting includes the 'n' flag. Only users with non-default settings are affected and the exception should only result in a crash."},"relatedVulnerabilities":[{"id":"CVE-2023-48232","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":3.9,"impactScore":2.6,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-48232","cwe":"CWE-755","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-48232","date":"2026-10-10","epss":0.00674,"percentile":0.50725}],"urls":["http://www.openwall.com/lists/oss-security/2023/11/16/1","https://github.com/vim/vim/commit/cb0b99f0672d8446585d26e998343dceca17d1ce","https://github.com/vim/vim/security/advisories/GHSA-f6cx-x634-hqpw","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4UJAK2W5S7G75ETDAEM3BDUCVSXCEGRD/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M3VQF7CL3V6FGSEW37WNDFBRRILR65AK/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VNRNYLWXZOGTYWE5HMFNQ5FVE3HBUHF6/","https://security.netapp.com/advisory/ntap-20231227-0006/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-48232","description":"Vim is an open source command line text editor. A floating point exception may occur when calculating the line offset for overlong lines and smooth scrolling is enabled and the cpo-settings include the 'n' flag. This may happen when a window border is present and when the wrapped line continues on the next physical line directly in the window border because the 'cpo' setting includes the 'n' flag. Only users with non-default settings are affected and the exception should only result in a crash. This issue has been addressed in commit `cb0b99f0` which has been included in release version 9.0.2107. Users are advised to upgrade. There are no known workarounds for this vulnerability."}]},{"artifact":{"id":"23e3d9feac1cb13c","cpes":["cpe:2.3:a:libgcc:libgcc:11.5.0-14.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libgcc:11.5.0-14.el9:*:*:*:*:*:*:*"],"name":"libgcc","purl":"pkg:rpm/redhat/libgcc@11.5.0-14.el9?arch=x86_64&distro=rhel-9.8&upstream=gcc-11.5.0-14.el9.src.rpm","type":"rpm","version":"11.5.0-14.el9","language":"","licenses":["GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"gcc","version":"11.5.0-14.el9"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-46195","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"gcc","version":"11.5.0-14.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2021-46195","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-46195","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-46195","date":"2026-10-10","epss":0.00779,"percentile":0.5459}],"risk":0.24538499999999996,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-46195","description":"A flaw was discovered in the GNU libiberty library within the demangle_path() function in rust-demangle.c, as distributed in the GNU Compiler Collection (GCC). This flaw allows a crafted symbol to cause stack memory to be exhausted, leading to a crash."},"relatedVulnerabilities":[{"id":"CVE-2021-46195","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-46195","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-46195","date":"2026-10-10","epss":0.00779,"percentile":0.5459}],"urls":["https://gcc.gnu.org/bugzilla/show_bug.cgi?id=103841"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-46195","description":"GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c. This vulnerability allows attackers to cause a Denial of Service (DoS) by consuming excessive CPU and memory resources."}]},{"artifact":{"id":"c43da072cb8484d1","cpes":["cpe:2.3:a:libgomp:libgomp:11.5.0-14.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libgomp:11.5.0-14.el9:*:*:*:*:*:*:*"],"name":"libgomp","purl":"pkg:rpm/redhat/libgomp@11.5.0-14.el9?arch=x86_64&distro=rhel-9.8&upstream=gcc-11.5.0-14.el9.src.rpm","type":"rpm","version":"11.5.0-14.el9","language":"","licenses":["GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"gcc","version":"11.5.0-14.el9"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-46195","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"gcc","version":"11.5.0-14.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2021-46195","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-46195","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-46195","date":"2026-10-10","epss":0.00779,"percentile":0.5459}],"risk":0.24538499999999996,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-46195","description":"A flaw was discovered in the GNU libiberty library within the demangle_path() function in rust-demangle.c, as distributed in the GNU Compiler Collection (GCC). This flaw allows a crafted symbol to cause stack memory to be exhausted, leading to a crash."},"relatedVulnerabilities":[{"id":"CVE-2021-46195","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-46195","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-46195","date":"2026-10-10","epss":0.00779,"percentile":0.5459}],"urls":["https://gcc.gnu.org/bugzilla/show_bug.cgi?id=103841"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-46195","description":"GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c. This vulnerability allows attackers to cause a Denial of Service (DoS) by consuming excessive CPU and memory resources."}]},{"artifact":{"id":"62a2970ccab3dd86","cpes":["cpe:2.3:a:libstdc\\+\\+:libstdc\\+\\+:11.5.0-14.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libstdc\\+\\+:11.5.0-14.el9:*:*:*:*:*:*:*"],"name":"libstdc++","purl":"pkg:rpm/redhat/libstdc%2B%2B@11.5.0-14.el9?arch=x86_64&distro=rhel-9.8&upstream=gcc-11.5.0-14.el9.src.rpm","type":"rpm","version":"11.5.0-14.el9","language":"","licenses":["GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"gcc","version":"11.5.0-14.el9"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-46195","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"gcc","version":"11.5.0-14.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2021-46195","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-46195","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-46195","date":"2026-10-10","epss":0.00779,"percentile":0.5459}],"risk":0.24538499999999996,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-46195","description":"A flaw was discovered in the GNU libiberty library within the demangle_path() function in rust-demangle.c, as distributed in the GNU Compiler Collection (GCC). This flaw allows a crafted symbol to cause stack memory to be exhausted, leading to a crash."},"relatedVulnerabilities":[{"id":"CVE-2021-46195","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-46195","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-46195","date":"2026-10-10","epss":0.00779,"percentile":0.5459}],"urls":["https://gcc.gnu.org/bugzilla/show_bug.cgi?id=103841"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-46195","description":"GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c. This vulnerability allows attackers to cause a Denial of Service (DoS) by consuming excessive CPU and memory resources."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-48231","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2023-48231","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-48231","cwe":"CWE-416","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-48231","date":"2026-10-10","epss":0.00672,"percentile":0.50619}],"risk":0.24528000000000003,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-48231","description":"A heap use-after-free flaw was found in the vim package. When executing a `:s` command for the first time and using a sub-replace-special atom inside the substitution, it is possible that the recursive `:s` call causes memory to be freed, which may later then be accessed by the initial `:s` command. This issue may result in Vim crashing."},"relatedVulnerabilities":[{"id":"CVE-2023-48231","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":3.9,"impactScore":2.6,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-48231","cwe":"CWE-416","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-48231","date":"2026-10-10","epss":0.00672,"percentile":0.50619}],"urls":["http://www.openwall.com/lists/oss-security/2023/11/16/1","https://github.com/vim/vim/commit/25aabc2b8ee1e19ced6f4da9d866cf9378fc4c5a","https://github.com/vim/vim/security/advisories/GHSA-8g46-v9ff-c765","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4UJAK2W5S7G75ETDAEM3BDUCVSXCEGRD/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M3VQF7CL3V6FGSEW37WNDFBRRILR65AK/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VNRNYLWXZOGTYWE5HMFNQ5FVE3HBUHF6/","https://security.netapp.com/advisory/ntap-20231227-0008/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-48231","description":"Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to be viable. This issue has been addressed in commit `25aabc2b` which has been included in release version 9.0.2106. Users are advised to upgrade. There are no known workarounds for this vulnerability."}]},{"artifact":{"id":"1c27b1fc065b3d30","cpes":["cpe:2.3:a:python3-pip-wheel:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip-wheel:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip_wheel:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip_wheel:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*"],"name":"python3-pip-wheel","purl":"pkg:rpm/redhat/python3-pip-wheel@21.3.1-2.el9_8?arch=noarch&distro=rhel-9.8&upstream=python-pip-21.3.1-2.el9_8.src.rpm","type":"rpm","version":"21.3.1-2.el9_8","language":"","licenses":["MIT and Python and ASL 2.0 and BSD and ISC and LGPLv2 and MPLv2.0 and (ASL 2.0 or BSD)"],"metadata":{"epoch":null,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python-pip","version":"21.3.1-2.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-50181","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"python-pip","version":"21.3.1-2.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-50181","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-50181","cwe":"CWE-601","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-50181","date":"2026-10-10","epss":0.00474,"percentile":0.39089}],"risk":0.24411000000000002,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-50181","description":"A flaw was found in urllib3. The `PoolManager` class allows redirects to be disabled by configuring retries in a specific manner, effectively bypassing intended HTTP redirection behavior. A network attacker can leverage this configuration to manipulate request flows and disrupt service. This bypass occurs through improper handling of retry parameters during PoolManager instantiation. This issue can reult in a denial of service or unintended data exposure due to altered request destinations."},"relatedVulnerabilities":[{"id":"CVE-2025-50181","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-50181","cwe":"CWE-601","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-50181","date":"2026-10-10","epss":0.00474,"percentile":0.39089}],"urls":["https://github.com/urllib3/urllib3/commit/f05b1329126d5be6de501f9d1e3e36738bc08857","https://github.com/urllib3/urllib3/releases/tag/2.5.0","https://github.com/urllib3/urllib3/security/advisories/GHSA-pq67-6m6q-mj2v"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-50181","description":"urllib3 is a user-friendly HTTP client library for Python. Prior to 2.5.0, it is possible to disable redirects for all requests by instantiating a PoolManager and specifying retries in a way that disable redirects. By default, requests and botocore users are not affected. An application attempting to mitigate SSRF or open redirect vulnerabilities by disabling redirects at the PoolManager level will remain vulnerable. This issue has been patched in version 2.5.0."}]},{"artifact":{"id":"7e23f8149f581507","cpes":["cpe:2.3:a:krb5-libs:krb5-libs:1.21.1-10.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:krb5-libs:krb5_libs:1.21.1-10.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:krb5_libs:krb5-libs:1.21.1-10.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:krb5_libs:krb5_libs:1.21.1-10.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:krb5-libs:1.21.1-10.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:krb5_libs:1.21.1-10.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5-libs:1.21.1-10.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5_libs:1.21.1-10.el9_8:*:*:*:*:*:*:*"],"name":"krb5-libs","purl":"pkg:rpm/redhat/krb5-libs@1.21.1-10.el9_8?arch=x86_64&distro=rhel-9.8&upstream=krb5-1.21.1-10.el9_8.src.rpm","type":"rpm","version":"1.21.1-10.el9_8","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"krb5","version":"1.21.1-10.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107778","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"krb5","version":"1.21.1-10.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-107778","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107778","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107778","date":"2026-10-10","epss":0.00424,"percentile":0.34751}],"risk":0.24379999999999996,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-107778","description":"A flaw was found in krb5. An authenticated remote attacker can cause a Denial of Service (DoS) by sending specially crafted forwarded credentials containing mismatched credential entries. This improper handling triggers a null pointer dereference, causing the service to crash and become unavailable."},"relatedVulnerabilities":[{"id":"CVE-2026-107778","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107778","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107778","date":"2026-10-10","epss":0.00424,"percentile":0.34751}],"urls":["https://github.com/krb5/krb5","https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/lib/krb5/krb/rd_cred.c#L77-L112","https://github.com/krb5/krb5/commit/48afa9abb89ab2176bb20624d87d010b9984fc08","https://github.com/krb5/krb5/commit/62196e2b269159a5465f5b8d0ed7cf6f29c3282a","https://github.com/krb5/krb5/pull/1511","https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-null-pointer-dereference-via-krb5-rd-cred"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107778","description":"MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticket_info entries through gss_accept_sec_context() to crash GSS-API acceptor services, causing denial of service."}]},{"artifact":{"id":"9cab38731edd6d44","cpes":["cpe:2.3:a:redhat:git:2.52.0-1.el9:*:*:*:*:*:*:*","cpe:2.3:a:git:git:2.52.0-1.el9:*:*:*:*:*:*:*"],"name":"git","purl":"pkg:rpm/redhat/git@2.52.0-1.el9?arch=x86_64&distro=rhel-9.8&upstream=git-2.52.0-1.el9.src.rpm","type":"rpm","version":"2.52.0-1.el9","language":"","licenses":["GPLv2"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-48386","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"git","version":"0:2.52.0-1.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-48386","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N","metrics":{"baseScore":6.3,"impactScore":4,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-48386","cwe":"CWE-120","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-48386","date":"2026-10-10","epss":0.00431,"percentile":0.35447}],"risk":0.24351499999999995,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-48386","description":"A credential handling flaw has been discovered in git. The wincred credential helper uses a static buffer (target) as a unique key for storing and comparing against internal storage. This credential helper does not properly bounds check the available space remaining in the buffer before appending to it with wcsncat(), which can lead to buffer overflows."},"relatedVulnerabilities":[{"id":"CVE-2025-48386","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N","metrics":{"baseScore":6.3,"impactScore":4,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-48386","cwe":"CWE-120","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-48386","date":"2026-10-10","epss":0.00431,"percentile":0.35447}],"urls":["https://github.com/git/git/security/advisories/GHSA-4v56-3xvj-xvfr","http://www.openwall.com/lists/oss-security/2025/07/08/4"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-48386","description":"Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. The wincred credential helper uses a static buffer (target) as a unique key for storing and comparing against internal storage. This credential helper does not properly bounds check the available space remaining in the buffer before appending to it with wcsncat(), leading to potential buffer overflows. This vulnerability is fixed in v2.43.7, v2.44.4, v2.45.4, v2.46.4, v2.47.3, v2.48.2, v2.49.1, and v2.50.1."}]},{"artifact":{"id":"305e06de13f59e11","cpes":["cpe:2.3:a:git-core:git-core:2.52.0-1.el9:*:*:*:*:*:*:*","cpe:2.3:a:git-core:git_core:2.52.0-1.el9:*:*:*:*:*:*:*","cpe:2.3:a:git_core:git-core:2.52.0-1.el9:*:*:*:*:*:*:*","cpe:2.3:a:git_core:git_core:2.52.0-1.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git-core:2.52.0-1.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git_core:2.52.0-1.el9:*:*:*:*:*:*:*","cpe:2.3:a:git:git-core:2.52.0-1.el9:*:*:*:*:*:*:*","cpe:2.3:a:git:git_core:2.52.0-1.el9:*:*:*:*:*:*:*"],"name":"git-core","purl":"pkg:rpm/redhat/git-core@2.52.0-1.el9?arch=x86_64&distro=rhel-9.8&upstream=git-2.52.0-1.el9.src.rpm","type":"rpm","version":"2.52.0-1.el9","language":"","licenses":["GPLv2"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"git","version":"2.52.0-1.el9"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-48386","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"git","version":"2.52.0-1.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-48386","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N","metrics":{"baseScore":6.3,"impactScore":4,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-48386","cwe":"CWE-120","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-48386","date":"2026-10-10","epss":0.00431,"percentile":0.35447}],"risk":0.24351499999999995,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-48386","description":"A credential handling flaw has been discovered in git. The wincred credential helper uses a static buffer (target) as a unique key for storing and comparing against internal storage. This credential helper does not properly bounds check the available space remaining in the buffer before appending to it with wcsncat(), which can lead to buffer overflows."},"relatedVulnerabilities":[{"id":"CVE-2025-48386","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N","metrics":{"baseScore":6.3,"impactScore":4,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-48386","cwe":"CWE-120","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-48386","date":"2026-10-10","epss":0.00431,"percentile":0.35447}],"urls":["https://github.com/git/git/security/advisories/GHSA-4v56-3xvj-xvfr","http://www.openwall.com/lists/oss-security/2025/07/08/4"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-48386","description":"Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. The wincred credential helper uses a static buffer (target) as a unique key for storing and comparing against internal storage. This credential helper does not properly bounds check the available space remaining in the buffer before appending to it with wcsncat(), leading to potential buffer overflows. This vulnerability is fixed in v2.43.7, v2.44.4, v2.45.4, v2.46.4, v2.47.3, v2.48.2, v2.49.1, and v2.50.1."}]},{"artifact":{"id":"378b79be5f8c5674","cpes":["cpe:2.3:a:git-core-doc:git-core-doc:2.52.0-1.el9:*:*:*:*:*:*:*","cpe:2.3:a:git-core-doc:git_core_doc:2.52.0-1.el9:*:*:*:*:*:*:*","cpe:2.3:a:git_core_doc:git-core-doc:2.52.0-1.el9:*:*:*:*:*:*:*","cpe:2.3:a:git_core_doc:git_core_doc:2.52.0-1.el9:*:*:*:*:*:*:*","cpe:2.3:a:git-core:git-core-doc:2.52.0-1.el9:*:*:*:*:*:*:*","cpe:2.3:a:git-core:git_core_doc:2.52.0-1.el9:*:*:*:*:*:*:*","cpe:2.3:a:git_core:git-core-doc:2.52.0-1.el9:*:*:*:*:*:*:*","cpe:2.3:a:git_core:git_core_doc:2.52.0-1.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git-core-doc:2.52.0-1.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git_core_doc:2.52.0-1.el9:*:*:*:*:*:*:*","cpe:2.3:a:git:git-core-doc:2.52.0-1.el9:*:*:*:*:*:*:*","cpe:2.3:a:git:git_core_doc:2.52.0-1.el9:*:*:*:*:*:*:*"],"name":"git-core-doc","purl":"pkg:rpm/redhat/git-core-doc@2.52.0-1.el9?arch=noarch&distro=rhel-9.8&upstream=git-2.52.0-1.el9.src.rpm","type":"rpm","version":"2.52.0-1.el9","language":"","licenses":["GPLv2"],"metadata":{"epoch":null,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"git","version":"2.52.0-1.el9"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-48386","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"git","version":"2.52.0-1.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-48386","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N","metrics":{"baseScore":6.3,"impactScore":4,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-48386","cwe":"CWE-120","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-48386","date":"2026-10-10","epss":0.00431,"percentile":0.35447}],"risk":0.24351499999999995,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-48386","description":"A credential handling flaw has been discovered in git. The wincred credential helper uses a static buffer (target) as a unique key for storing and comparing against internal storage. This credential helper does not properly bounds check the available space remaining in the buffer before appending to it with wcsncat(), which can lead to buffer overflows."},"relatedVulnerabilities":[{"id":"CVE-2025-48386","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N","metrics":{"baseScore":6.3,"impactScore":4,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-48386","cwe":"CWE-120","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-48386","date":"2026-10-10","epss":0.00431,"percentile":0.35447}],"urls":["https://github.com/git/git/security/advisories/GHSA-4v56-3xvj-xvfr","http://www.openwall.com/lists/oss-security/2025/07/08/4"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-48386","description":"Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. The wincred credential helper uses a static buffer (target) as a unique key for storing and comparing against internal storage. This credential helper does not properly bounds check the available space remaining in the buffer before appending to it with wcsncat(), leading to potential buffer overflows. This vulnerability is fixed in v2.43.7, v2.44.4, v2.45.4, v2.46.4, v2.47.3, v2.48.2, v2.49.1, and v2.50.1."}]},{"artifact":{"id":"6f790b53a3603485","cpes":["cpe:2.3:a:perl-Git:perl-Git:2.52.0-1.el9:*:*:*:*:*:*:*","cpe:2.3:a:perl-Git:perl_Git:2.52.0-1.el9:*:*:*:*:*:*:*","cpe:2.3:a:perl_Git:perl-Git:2.52.0-1.el9:*:*:*:*:*:*:*","cpe:2.3:a:perl_Git:perl_Git:2.52.0-1.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-Git:2.52.0-1.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_Git:2.52.0-1.el9:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-Git:2.52.0-1.el9:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_Git:2.52.0-1.el9:*:*:*:*:*:*:*"],"name":"perl-Git","purl":"pkg:rpm/redhat/perl-Git@2.52.0-1.el9?arch=noarch&distro=rhel-9.8&upstream=git-2.52.0-1.el9.src.rpm","type":"rpm","version":"2.52.0-1.el9","language":"","licenses":["GPLv2"],"metadata":{"epoch":null,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"git","version":"2.52.0-1.el9"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-48386","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"git","version":"2.52.0-1.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-48386","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N","metrics":{"baseScore":6.3,"impactScore":4,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-48386","cwe":"CWE-120","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-48386","date":"2026-10-10","epss":0.00431,"percentile":0.35447}],"risk":0.24351499999999995,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-48386","description":"A credential handling flaw has been discovered in git. The wincred credential helper uses a static buffer (target) as a unique key for storing and comparing against internal storage. This credential helper does not properly bounds check the available space remaining in the buffer before appending to it with wcsncat(), which can lead to buffer overflows."},"relatedVulnerabilities":[{"id":"CVE-2025-48386","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N","metrics":{"baseScore":6.3,"impactScore":4,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-48386","cwe":"CWE-120","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-48386","date":"2026-10-10","epss":0.00431,"percentile":0.35447}],"urls":["https://github.com/git/git/security/advisories/GHSA-4v56-3xvj-xvfr","http://www.openwall.com/lists/oss-security/2025/07/08/4"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-48386","description":"Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. The wincred credential helper uses a static buffer (target) as a unique key for storing and comparing against internal storage. This credential helper does not properly bounds check the available space remaining in the buffer before appending to it with wcsncat(), leading to potential buffer overflows. This vulnerability is fixed in v2.43.7, v2.44.4, v2.45.4, v2.46.4, v2.47.3, v2.48.2, v2.49.1, and v2.50.1."}]},{"artifact":{"id":"f5eb0651fec88df5","cpes":["cpe:2.3:a:com.fasterxml.jackson.core:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.20.1:*:*:*:*:*:*:*"],"name":"jackson-databind","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1","type":"java-archive","version":"2.20.1","language":"java","licenses":["The Apache Software License, Version 2.0"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/opt/jenkins-plugin-manager.jar:com.fasterxml.jackson.core:jackson-databind","manifestName":"","pomArtifactID":"jackson-databind","archiveDigests":null},"locations":[{"path":"/opt/jenkins-plugin-manager.jar","layerID":"sha256:1303dd889187d7e25ac68bf0fb8d636f5a922b6753d092bcae3924d569cb869a","accessPath":"/opt/jenkins-plugin-manager.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.21.4"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-3pjw-73gf-8qr5","versionConstraint":">=2.19.0,<2.21.4 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-databind","version":"2.20.1"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-3pjw-73gf-8qr5","fix":{"state":"fixed","versions":["2.21.4"],"available":[{"date":"2026-07-22","kind":"first-observed","version":"2.21.4"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59888","cwe":"CWE-915","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59888","date":"2026-10-10","epss":0.00423,"percentile":0.34704}],"risk":0.243225,"urls":["https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-3pjw-73gf-8qr5","https://nvd.nist.gov/vuln/detail/CVE-2026-59888","https://github.com/FasterXML/jackson-databind/pull/5974","https://github.com/FasterXML/jackson-databind/commit/baa2cdf5ca2b2717fbb88d91955d69d8651df3e4","https://github.com/FasterXML/jackson-databind/commit/c7c678360624da5bc7eed2152789fa522880db9d"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-3pjw-73gf-8qr5","description":"jackson-databind: @JsonIgnore on a Record property is bypassed with a PropertyNamingStrategy"},"relatedVulnerabilities":[{"id":"CVE-2026-59888","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59888","cwe":"CWE-915","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59888","date":"2026-10-10","epss":0.00423,"percentile":0.34704}],"urls":["https://github.com/FasterXML/jackson-databind/commit/baa2cdf5ca2b2717fbb88d91955d69d8651df3e4","https://github.com/FasterXML/jackson-databind/commit/c7c678360624da5bc7eed2152789fa522880db9d","https://github.com/FasterXML/jackson-databind/pull/5974","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-3pjw-73gf-8qr5"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-59888","description":"jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.15.0 until 2.18.8, 2.21.4, and 3.1.4, Java Records using a PropertyNamingStrategy can bypass @JsonIgnore because POJOPropertiesCollector._removeUnwantedIgnorals() records an ignored component under its original implicit name before _renameUsing() applies the naming strategy, allowing the renamed JSON key to be assigned to the Record constructor parameter. This issue is fixed in versions 2.18.8, 2.21.4, and 3.1.4."}]},{"artifact":{"id":"ea0f2a7e0eb5d962","cpes":["cpe:2.3:a:python3:python3:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3:3.9.25-7.el9_8.3:*:*:*:*:*:*:*"],"name":"python3","purl":"pkg:rpm/redhat/python3@3.9.25-7.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=python3.9-3.9.25-7.el9_8.3.src.rpm","type":"rpm","version":"3.9.25-7.el9_8.3","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python3.9","version":"3.9.25-7.el9_8.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19672","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"python3.9","version":"3.9.25-7.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-19672","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19672","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-19672","date":"2026-10-10","epss":0.00472,"percentile":0.38908}],"risk":0.24308000000000002,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-19672","description":"A flaw was found in the Python `tarfile` module. This vulnerability allows an attacker to create empty directories outside of the intended extraction destination on POSIX (Portable Operating System Interface) platforms. This occurs when processing a specially crafted archive containing member names that use directory traversal sequences (e.g., `../`) to leave and then re-enter the target directory. While only empty directories are created outside the destination, this can lead to unintended file system modifications."},"relatedVulnerabilities":[{"id":"CVE-2026-19672","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19672","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-19672","date":"2026-10-10","epss":0.00472,"percentile":0.38908}],"urls":["https://github.com/python/cpython/pull/156000","https://mail.python.org/archives/list/security-announce@python.org/thread/J2WT2ALRWEXQJOB3C7Q2HYWUXP3CINWO/","http://www.openwall.com/lists/oss-security/2026/08/25/10"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19672","description":"The tarfile module's tar and data\n extraction filters created directories outside the destination for \nmembers whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name as given.\n\nOnly\n empty directories are created outside the destination. Member contents \nare still extracted inside it. To return to the destination the member's\n name must contain the destination directory's own final component, so \nextraction into a secure randomised directory is not affected.\n\nThis affects POSIX platforms only. On Windows, .. components are collapsed before the path reaches the filesystem, so the directories outside the destination are never created."}]},{"artifact":{"id":"0ed3c72bb9ee9391","cpes":["cpe:2.3:a:python3-libs:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3-libs:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3_libs:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3_libs:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*"],"name":"python3-libs","purl":"pkg:rpm/redhat/python3-libs@3.9.25-7.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=python3.9-3.9.25-7.el9_8.3.src.rpm","type":"rpm","version":"3.9.25-7.el9_8.3","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python3.9","version":"3.9.25-7.el9_8.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19672","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"python3.9","version":"3.9.25-7.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-19672","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19672","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-19672","date":"2026-10-10","epss":0.00472,"percentile":0.38908}],"risk":0.24308000000000002,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-19672","description":"A flaw was found in the Python `tarfile` module. This vulnerability allows an attacker to create empty directories outside of the intended extraction destination on POSIX (Portable Operating System Interface) platforms. This occurs when processing a specially crafted archive containing member names that use directory traversal sequences (e.g., `../`) to leave and then re-enter the target directory. While only empty directories are created outside the destination, this can lead to unintended file system modifications."},"relatedVulnerabilities":[{"id":"CVE-2026-19672","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19672","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-19672","date":"2026-10-10","epss":0.00472,"percentile":0.38908}],"urls":["https://github.com/python/cpython/pull/156000","https://mail.python.org/archives/list/security-announce@python.org/thread/J2WT2ALRWEXQJOB3C7Q2HYWUXP3CINWO/","http://www.openwall.com/lists/oss-security/2026/08/25/10"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19672","description":"The tarfile module's tar and data\n extraction filters created directories outside the destination for \nmembers whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name as given.\n\nOnly\n empty directories are created outside the destination. Member contents \nare still extracted inside it. To return to the destination the member's\n name must contain the destination directory's own final component, so \nextraction into a secure randomised directory is not affected.\n\nThis affects POSIX platforms only. On Windows, .. components are collapsed before the path reaches the filesystem, so the directories outside the destination are never created."}]},{"artifact":{"id":"3c9ac883761ed4dd","cpes":["cpe:2.3:a:com.fasterxml.jackson.core:jackson-core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson-core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson_core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:jackson-core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:jackson_core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:jackson-core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:jackson_core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:core:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:core:2.20.1:*:*:*:*:*:*:*"],"name":"jackson-core","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1","type":"java-archive","version":"2.20.1","language":"java","licenses":["The Apache Software License, Version 2.0"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/opt/jenkins-plugin-manager.jar:com.fasterxml.jackson.core:jackson-core","manifestName":"","pomArtifactID":"jackson-core","archiveDigests":null},"locations":[{"path":"/opt/jenkins-plugin-manager.jar","layerID":"sha256:1303dd889187d7e25ac68bf0fb8d636f5a922b6753d092bcae3924d569cb869a","accessPath":"/opt/jenkins-plugin-manager.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.21.1"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-72hv-8253-57qq","versionConstraint":">=2.19.0,<2.21.1 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-core","version":"2.20.1"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-72hv-8253-57qq","fix":{"state":"fixed","versions":["2.21.1"],"available":[{"date":"2026-02-28","kind":"first-observed","version":"2.21.1"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-18401","cwe":"CWE-770","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-18401","date":"2026-10-10","epss":0.00408,"percentile":0.33065}],"risk":0.24276000000000003,"urls":["https://github.com/FasterXML/jackson-core/security/advisories/GHSA-72hv-8253-57qq","https://github.com/FasterXML/jackson-core/pull/1555","https://github.com/FasterXML/jackson-core/commit/b0c428e6f993e1b5ece5c1c3cb2523e887cd52cf","https://nvd.nist.gov/vuln/detail/CVE-2026-18401"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-72hv-8253-57qq","description":"jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition"},"relatedVulnerabilities":[{"id":"CVE-2026-18401","cvss":[{"type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-18401","cwe":"CWE-770","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-18401","date":"2026-10-10","epss":0.00408,"percentile":0.33065}],"urls":["https://github.com/FasterXML/jackson-core/commit/b0c428e6f993e1b5ece5c1c3cb2523e887cd52cf","https://github.com/FasterXML/jackson-core/pull/1555","https://github.com/FasterXML/jackson-core/security/advisories/GHSA-72hv-8253-57qq"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-18401","description":"The non-blocking (asynchronous) JSON parser in jackson-core does not enforce the maxNumberLength constraint defined in StreamReadConstraints (default: 1000 characters). An attacker able to submit JSON to an application that uses the async parser API can supply a number token of arbitrary length, leading to excessive memory allocation and potential CPU exhaustion, resulting in a denial of service.\n\n\n\nThe synchronous parser enforces this limit correctly, so the constraint is applied inconsistently depending on which parsing API the application uses.\n\n\n\nRoot cause: the async parsing path in NonBlockingUtf8JsonParserBase and related classes never invokes the number length validation methods. Number parsing methods such as _finishNumberIntegralPart() accumulate digits into the TextBuffer without any length check, then call _valueComplete() to finalize the token. _valueComplete() does not call resetInt() or resetFloat(), which are the methods in ParserBase where validateIntegerLength() and validateFPLength() are performed. Because that validation step is skipped, maxNumberLength is never enforced on the async code path.\n\n\n\nImpact: an attacker sending a JSON document containing an arbitrarily long number to an application using the async parser (for example a Spring WebFlux or other reactive application) can cause unbounded allocation in the TextBuffer and an OutOfMemoryError. If the application subsequently calls getBigIntegerValue() or getDecimalValue(), the JVM may additionally be tied up in O(n^2) BigInteger parsing, causing CPU-based denial of service.\n\n\n\nNo privileges or user interaction beyond the ability to submit data for parsing are required.\n\n\n\nThis issue affects com.fasterxml.jackson.core:jackson-core from version 2.15.0 through 2.18.5 and from 2.19.0 through 2.21.0, and tools.jackson.core:jackson-core from 3.0.0 through 3.0.x.\n\n\n\nVersions prior to 2.15.0 are not affected, because StreamReadConstraints -- which defines the maxNumberLength setting -- was first introduced in jackson-core 2.15.0, so no such constraint exists to be bypassed in earlier releases. Note that GHSA-72hv-8253-57qq records the lower bound of the affected 2.x range as 2.0.0."}]},{"artifact":{"id":"406b3abfffe1d292","cpes":["cpe:2.3:a:git-lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git-lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*"],"name":"git-lfs","purl":"pkg:rpm/redhat/git-lfs@3.7.1-4.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=git-lfs-3.7.1-4.el9_8.3.src.rpm","type":"rpm","version":"3.7.1-4.el9_8.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-58189","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"git-lfs","version":"0:3.7.1-4.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-58189","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-58189","cwe":"CWE-532","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-58189","date":"2026-10-10","epss":0.00468,"percentile":0.38597}],"risk":0.24101999999999998,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-58189","description":"The crypto/tls conn.Handshake method returns an error on the server-side when ALPN negotation fails which can contain arbitrary attacker controlled information provided by the client-side of the connection which is not escaped. This affects programs which log these errors without any additional form of sanitization, and may allow injection of attacker controlled information into logs."},"relatedVulnerabilities":[{"id":"CVE-2025-58189","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-58189","cwe":"CWE-532","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-58189","date":"2026-10-10","epss":0.00468,"percentile":0.38597}],"urls":["https://go.dev/cl/707776","https://go.dev/issue/75652","https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI","https://pkg.go.dev/vuln/GO-2025-4008","http://www.openwall.com/lists/oss-security/2025/10/08/1"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-58189","description":"When Conn.Handshake fails during ALPN negotiation the error contains attacker controlled information (the ALPN protocols sent by the client) which is not escaped."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-4141","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-4141","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-4141","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-4141","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-4141","date":"2026-10-10","epss":0.00446,"percentile":0.3689}],"risk":0.24084000000000003,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-4141","description":"A heap-based buffer overflow vulnerability was found in Vim due to invalid memory access. This issue could allow an attacker to trick a user into opening a specially crafted file, triggering an out-of-bounds write that causes an application to crash, possibly executing code and corrupting memory."},"relatedVulnerabilities":[{"id":"CVE-2022-4141","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.3,"impactScore":5.9,"exploitabilityScore":1.4},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-4141","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-4141","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-4141","date":"2026-10-10","epss":0.00446,"percentile":0.3689}],"urls":["https://github.com/vim/vim/commit/cc762a48d42b579fb7bdec2c614636b830342dd5","https://huntr.dev/bounties/20ece512-c600-45ac-8a84-d0931e05541f","https://lists.debian.org/debian-lts-announce/2023/06/msg00015.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AZ3JMSUCR6Y7626RDWQ2HNSUFIQOJ33G/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6ZNKVN4GICORTVFKVCM4MSOXCYWNHUC/","https://security.gentoo.org/glsa/202305-16","https://lists.debian.org/debian-lts-announce/2025/03/msg00023.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-4141","description":"Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command."}]},{"artifact":{"id":"ea0f2a7e0eb5d962","cpes":["cpe:2.3:a:python3:python3:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3:3.9.25-7.el9_8.3:*:*:*:*:*:*:*"],"name":"python3","purl":"pkg:rpm/redhat/python3@3.9.25-7.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=python3.9-3.9.25-7.el9_8.3.src.rpm","type":"rpm","version":"3.9.25-7.el9_8.3","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python3.9","version":"3.9.25-7.el9_8.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-4360","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"python3.9","version":"3.9.25-7.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-4360","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":5,"impactScore":3.6,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4360","cwe":"CWE-281","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-4360","date":"2026-10-10","epss":0.00481,"percentile":0.39579}],"risk":0.2405,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-4360","description":"A flaw was found in the Python `Tarfile.extract()` function. This vulnerability occurs when processing untrusted tar files containing hardlinks, as the `filter` parameter is not correctly enforced. An attacker could exploit this to write files with unintended user or group ownership, potentially leading to unauthorized modifications or privilege issues on the system."},"relatedVulnerabilities":[{"id":"CVE-2026-4360","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4360","cwe":"CWE-281","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-4360","date":"2026-10-10","epss":0.00481,"percentile":0.39579}],"urls":["https://github.com/python/cpython/commit/0367912be336348b30572f8029cec4a282782d92","https://github.com/python/cpython/commit/5e0ef3f1afe892e4f64eb83368db57ac4c40cba0","https://github.com/python/cpython/commit/7b57e8d51446297b8c7c482d224bc5f1938e4301","https://github.com/python/cpython/commit/7ccdbaba2c54250a70d7f25632152df7655a5e0a","https://github.com/python/cpython/commit/cf23b9153181062150d061468b6d24af33fe214f","https://github.com/python/cpython/commit/d2b2f5eacab4dd48446b63340613b05dcbbf0b44","https://github.com/python/cpython/commit/eee3ddf0ca10283cc7fea724aae9cd8665f8d15e","https://github.com/python/cpython/issues/151987","https://github.com/python/cpython/pull/151988","https://mail.python.org/archives/list/security-announce@python.org/thread/TWZW2PC2AZOV6FENIHFSRC63OM7MBGSB/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-4360","description":"In the Tarfile.extract() function, the filter parameter is not passed properly when extracting hardlinks. An affected system that extracts content from untrusted tar files could end up writing files with an unexpected uid/gid despite the user passing filter='data' to the extract() function."}]},{"artifact":{"id":"0ed3c72bb9ee9391","cpes":["cpe:2.3:a:python3-libs:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3-libs:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3_libs:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3_libs:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*"],"name":"python3-libs","purl":"pkg:rpm/redhat/python3-libs@3.9.25-7.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=python3.9-3.9.25-7.el9_8.3.src.rpm","type":"rpm","version":"3.9.25-7.el9_8.3","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python3.9","version":"3.9.25-7.el9_8.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-4360","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"python3.9","version":"3.9.25-7.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-4360","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":5,"impactScore":3.6,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4360","cwe":"CWE-281","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-4360","date":"2026-10-10","epss":0.00481,"percentile":0.39579}],"risk":0.2405,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-4360","description":"A flaw was found in the Python `Tarfile.extract()` function. This vulnerability occurs when processing untrusted tar files containing hardlinks, as the `filter` parameter is not correctly enforced. An attacker could exploit this to write files with unintended user or group ownership, potentially leading to unauthorized modifications or privilege issues on the system."},"relatedVulnerabilities":[{"id":"CVE-2026-4360","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4360","cwe":"CWE-281","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-4360","date":"2026-10-10","epss":0.00481,"percentile":0.39579}],"urls":["https://github.com/python/cpython/commit/0367912be336348b30572f8029cec4a282782d92","https://github.com/python/cpython/commit/5e0ef3f1afe892e4f64eb83368db57ac4c40cba0","https://github.com/python/cpython/commit/7b57e8d51446297b8c7c482d224bc5f1938e4301","https://github.com/python/cpython/commit/7ccdbaba2c54250a70d7f25632152df7655a5e0a","https://github.com/python/cpython/commit/cf23b9153181062150d061468b6d24af33fe214f","https://github.com/python/cpython/commit/d2b2f5eacab4dd48446b63340613b05dcbbf0b44","https://github.com/python/cpython/commit/eee3ddf0ca10283cc7fea724aae9cd8665f8d15e","https://github.com/python/cpython/issues/151987","https://github.com/python/cpython/pull/151988","https://mail.python.org/archives/list/security-announce@python.org/thread/TWZW2PC2AZOV6FENIHFSRC63OM7MBGSB/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-4360","description":"In the Tarfile.extract() function, the filter parameter is not passed properly when extracting hardlinks. An affected system that extracts content from untrusted tar files could end up writing files with an unexpected uid/gid despite the user passing filter='data' to the extract() function."}]},{"artifact":{"id":"6a400801b03158c5","cpes":["cpe:2.3:a:perl-AutoLoader:perl-AutoLoader:0\\:5.74-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-AutoLoader:perl_AutoLoader:0\\:5.74-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_AutoLoader:perl-AutoLoader:0\\:5.74-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_AutoLoader:perl_AutoLoader:0\\:5.74-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-AutoLoader:0\\:5.74-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_AutoLoader:0\\:5.74-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-AutoLoader:0\\:5.74-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_AutoLoader:0\\:5.74-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-AutoLoader","purl":"pkg:rpm/redhat/perl-AutoLoader@5.74-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:5.74-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19487","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-19487","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"risk":0.24034999999999998,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-19487","description":"A flaw was found in Perl. The regular expression engine may produce incorrect match results due to a stale failure flag in the Aho-Corasick prescan, which causes it to end prematurely. This can lead to the engine missing valid matches or matching on the wrong branch. As a result, applications that use regular expressions for critical functions like access control or data filtering could make erroneous decisions, potentially leading to security bypasses or unintended information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-19487","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"urls":["https://github.com/Perl/perl5/commit/1a21abacaf6f684928bae8baaa153733c8c238eb.patch","https://github.com/Perl/perl5/issues/22892","http://www.openwall.com/lists/oss-security/2026/08/13/8"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19487","description":"Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass.\n\nThe prescan walks the subject for positions where the full pattern could match, and the engine tries it from the leftmost one recorded. A failing transition sets the failed flag, and a later successful transition does not clear it, so the prescan reads the stale flag as a failure and stops before it can record a candidate that starts earlier. It takes a subject where one candidate is recorded and a later character then forces a fallback through a fail link that succeeds.\n\nExample:\n\n  \"ABCDE\" =~ m/ABCF|BCDE|C/;    # matches C at offset 2, not BCDE\n  \"ABCDE\" =~ m/ABCF|BCDE|C(G)/; # no match, BCDE missed\n\nAn alternation like this can miss input it should match, or match it on the wrong branch, so an access or filtering decision made from the result can be wrong."}]},{"artifact":{"id":"aae7e303a752a1c7","cpes":["cpe:2.3:a:perl-B:perl-B:0\\:1.80-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-B:perl_B:0\\:1.80-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_B:perl-B:0\\:1.80-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_B:perl_B:0\\:1.80-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-B:0\\:1.80-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_B:0\\:1.80-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-B:0\\:1.80-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_B:0\\:1.80-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-B","purl":"pkg:rpm/redhat/perl-B@1.80-484.el9_8?arch=x86_64&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.80-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19487","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-19487","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"risk":0.24034999999999998,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-19487","description":"A flaw was found in Perl. The regular expression engine may produce incorrect match results due to a stale failure flag in the Aho-Corasick prescan, which causes it to end prematurely. This can lead to the engine missing valid matches or matching on the wrong branch. As a result, applications that use regular expressions for critical functions like access control or data filtering could make erroneous decisions, potentially leading to security bypasses or unintended information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-19487","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"urls":["https://github.com/Perl/perl5/commit/1a21abacaf6f684928bae8baaa153733c8c238eb.patch","https://github.com/Perl/perl5/issues/22892","http://www.openwall.com/lists/oss-security/2026/08/13/8"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19487","description":"Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass.\n\nThe prescan walks the subject for positions where the full pattern could match, and the engine tries it from the leftmost one recorded. A failing transition sets the failed flag, and a later successful transition does not clear it, so the prescan reads the stale flag as a failure and stops before it can record a candidate that starts earlier. It takes a subject where one candidate is recorded and a later character then forces a fallback through a fail link that succeeds.\n\nExample:\n\n  \"ABCDE\" =~ m/ABCF|BCDE|C/;    # matches C at offset 2, not BCDE\n  \"ABCDE\" =~ m/ABCF|BCDE|C(G)/; # no match, BCDE missed\n\nAn alternation like this can miss input it should match, or match it on the wrong branch, so an access or filtering decision made from the result can be wrong."}]},{"artifact":{"id":"64f2bf74d87051e4","cpes":["cpe:2.3:a:perl-Class-Struct:perl-Class-Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-Class-Struct:perl_Class_Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Class_Struct:perl-Class-Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Class_Struct:perl_Class_Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-Class:perl-Class-Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-Class:perl_Class_Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Class:perl-Class-Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Class:perl_Class_Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-Class-Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_Class_Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-Class-Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_Class_Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-Class-Struct","purl":"pkg:rpm/redhat/perl-Class-Struct@0.66-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:0.66-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19487","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-19487","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"risk":0.24034999999999998,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-19487","description":"A flaw was found in Perl. The regular expression engine may produce incorrect match results due to a stale failure flag in the Aho-Corasick prescan, which causes it to end prematurely. This can lead to the engine missing valid matches or matching on the wrong branch. As a result, applications that use regular expressions for critical functions like access control or data filtering could make erroneous decisions, potentially leading to security bypasses or unintended information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-19487","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"urls":["https://github.com/Perl/perl5/commit/1a21abacaf6f684928bae8baaa153733c8c238eb.patch","https://github.com/Perl/perl5/issues/22892","http://www.openwall.com/lists/oss-security/2026/08/13/8"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19487","description":"Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass.\n\nThe prescan walks the subject for positions where the full pattern could match, and the engine tries it from the leftmost one recorded. A failing transition sets the failed flag, and a later successful transition does not clear it, so the prescan reads the stale flag as a failure and stops before it can record a candidate that starts earlier. It takes a subject where one candidate is recorded and a later character then forces a fallback through a fail link that succeeds.\n\nExample:\n\n  \"ABCDE\" =~ m/ABCF|BCDE|C/;    # matches C at offset 2, not BCDE\n  \"ABCDE\" =~ m/ABCF|BCDE|C(G)/; # no match, BCDE missed\n\nAn alternation like this can miss input it should match, or match it on the wrong branch, so an access or filtering decision made from the result can be wrong."}]},{"artifact":{"id":"0ee020f622eb09ee","cpes":["cpe:2.3:a:perl-DynaLoader:perl-DynaLoader:0\\:1.47-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-DynaLoader:perl_DynaLoader:0\\:1.47-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_DynaLoader:perl-DynaLoader:0\\:1.47-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_DynaLoader:perl_DynaLoader:0\\:1.47-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-DynaLoader:0\\:1.47-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_DynaLoader:0\\:1.47-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-DynaLoader:0\\:1.47-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_DynaLoader:0\\:1.47-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-DynaLoader","purl":"pkg:rpm/redhat/perl-DynaLoader@1.47-484.el9_8?arch=x86_64&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.47-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19487","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-19487","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"risk":0.24034999999999998,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-19487","description":"A flaw was found in Perl. The regular expression engine may produce incorrect match results due to a stale failure flag in the Aho-Corasick prescan, which causes it to end prematurely. This can lead to the engine missing valid matches or matching on the wrong branch. As a result, applications that use regular expressions for critical functions like access control or data filtering could make erroneous decisions, potentially leading to security bypasses or unintended information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-19487","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"urls":["https://github.com/Perl/perl5/commit/1a21abacaf6f684928bae8baaa153733c8c238eb.patch","https://github.com/Perl/perl5/issues/22892","http://www.openwall.com/lists/oss-security/2026/08/13/8"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19487","description":"Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass.\n\nThe prescan walks the subject for positions where the full pattern could match, and the engine tries it from the leftmost one recorded. A failing transition sets the failed flag, and a later successful transition does not clear it, so the prescan reads the stale flag as a failure and stops before it can record a candidate that starts earlier. It takes a subject where one candidate is recorded and a later character then forces a fallback through a fail link that succeeds.\n\nExample:\n\n  \"ABCDE\" =~ m/ABCF|BCDE|C/;    # matches C at offset 2, not BCDE\n  \"ABCDE\" =~ m/ABCF|BCDE|C(G)/; # no match, BCDE missed\n\nAn alternation like this can miss input it should match, or match it on the wrong branch, so an access or filtering decision made from the result can be wrong."}]},{"artifact":{"id":"2c29c58595b13830","cpes":["cpe:2.3:a:perl-Errno:perl-Errno:0\\:1.30-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-Errno:perl_Errno:0\\:1.30-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Errno:perl-Errno:0\\:1.30-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Errno:perl_Errno:0\\:1.30-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-Errno:0\\:1.30-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_Errno:0\\:1.30-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-Errno:0\\:1.30-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_Errno:0\\:1.30-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-Errno","purl":"pkg:rpm/redhat/perl-Errno@1.30-484.el9_8?arch=x86_64&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.30-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19487","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-19487","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"risk":0.24034999999999998,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-19487","description":"A flaw was found in Perl. The regular expression engine may produce incorrect match results due to a stale failure flag in the Aho-Corasick prescan, which causes it to end prematurely. This can lead to the engine missing valid matches or matching on the wrong branch. As a result, applications that use regular expressions for critical functions like access control or data filtering could make erroneous decisions, potentially leading to security bypasses or unintended information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-19487","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"urls":["https://github.com/Perl/perl5/commit/1a21abacaf6f684928bae8baaa153733c8c238eb.patch","https://github.com/Perl/perl5/issues/22892","http://www.openwall.com/lists/oss-security/2026/08/13/8"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19487","description":"Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass.\n\nThe prescan walks the subject for positions where the full pattern could match, and the engine tries it from the leftmost one recorded. A failing transition sets the failed flag, and a later successful transition does not clear it, so the prescan reads the stale flag as a failure and stops before it can record a candidate that starts earlier. It takes a subject where one candidate is recorded and a later character then forces a fallback through a fail link that succeeds.\n\nExample:\n\n  \"ABCDE\" =~ m/ABCF|BCDE|C/;    # matches C at offset 2, not BCDE\n  \"ABCDE\" =~ m/ABCF|BCDE|C(G)/; # no match, BCDE missed\n\nAn alternation like this can miss input it should match, or match it on the wrong branch, so an access or filtering decision made from the result can be wrong."}]},{"artifact":{"id":"9a350f67e34cc0a6","cpes":["cpe:2.3:a:perl-Fcntl:perl-Fcntl:0\\:1.13-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-Fcntl:perl_Fcntl:0\\:1.13-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Fcntl:perl-Fcntl:0\\:1.13-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Fcntl:perl_Fcntl:0\\:1.13-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-Fcntl:0\\:1.13-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_Fcntl:0\\:1.13-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-Fcntl:0\\:1.13-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_Fcntl:0\\:1.13-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-Fcntl","purl":"pkg:rpm/redhat/perl-Fcntl@1.13-484.el9_8?arch=x86_64&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.13-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19487","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-19487","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"risk":0.24034999999999998,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-19487","description":"A flaw was found in Perl. The regular expression engine may produce incorrect match results due to a stale failure flag in the Aho-Corasick prescan, which causes it to end prematurely. This can lead to the engine missing valid matches or matching on the wrong branch. As a result, applications that use regular expressions for critical functions like access control or data filtering could make erroneous decisions, potentially leading to security bypasses or unintended information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-19487","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"urls":["https://github.com/Perl/perl5/commit/1a21abacaf6f684928bae8baaa153733c8c238eb.patch","https://github.com/Perl/perl5/issues/22892","http://www.openwall.com/lists/oss-security/2026/08/13/8"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19487","description":"Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass.\n\nThe prescan walks the subject for positions where the full pattern could match, and the engine tries it from the leftmost one recorded. A failing transition sets the failed flag, and a later successful transition does not clear it, so the prescan reads the stale flag as a failure and stops before it can record a candidate that starts earlier. It takes a subject where one candidate is recorded and a later character then forces a fallback through a fail link that succeeds.\n\nExample:\n\n  \"ABCDE\" =~ m/ABCF|BCDE|C/;    # matches C at offset 2, not BCDE\n  \"ABCDE\" =~ m/ABCF|BCDE|C(G)/; # no match, BCDE missed\n\nAn alternation like this can miss input it should match, or match it on the wrong branch, so an access or filtering decision made from the result can be wrong."}]},{"artifact":{"id":"ccc96546d7bf7925","cpes":["cpe:2.3:a:perl-File-Basename:perl-File-Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-File-Basename:perl_File_Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_File_Basename:perl-File-Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_File_Basename:perl_File_Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-File:perl-File-Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-File:perl_File_Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_File:perl-File-Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_File:perl_File_Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-File-Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_File_Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-File-Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_File_Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-File-Basename","purl":"pkg:rpm/redhat/perl-File-Basename@2.85-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:2.85-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19487","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-19487","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"risk":0.24034999999999998,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-19487","description":"A flaw was found in Perl. The regular expression engine may produce incorrect match results due to a stale failure flag in the Aho-Corasick prescan, which causes it to end prematurely. This can lead to the engine missing valid matches or matching on the wrong branch. As a result, applications that use regular expressions for critical functions like access control or data filtering could make erroneous decisions, potentially leading to security bypasses or unintended information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-19487","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"urls":["https://github.com/Perl/perl5/commit/1a21abacaf6f684928bae8baaa153733c8c238eb.patch","https://github.com/Perl/perl5/issues/22892","http://www.openwall.com/lists/oss-security/2026/08/13/8"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19487","description":"Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass.\n\nThe prescan walks the subject for positions where the full pattern could match, and the engine tries it from the leftmost one recorded. A failing transition sets the failed flag, and a later successful transition does not clear it, so the prescan reads the stale flag as a failure and stops before it can record a candidate that starts earlier. It takes a subject where one candidate is recorded and a later character then forces a fallback through a fail link that succeeds.\n\nExample:\n\n  \"ABCDE\" =~ m/ABCF|BCDE|C/;    # matches C at offset 2, not BCDE\n  \"ABCDE\" =~ m/ABCF|BCDE|C(G)/; # no match, BCDE missed\n\nAn alternation like this can miss input it should match, or match it on the wrong branch, so an access or filtering decision made from the result can be wrong."}]},{"artifact":{"id":"2c4e8249c7be919b","cpes":["cpe:2.3:a:perl-File-stat:perl-File-stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-File-stat:perl_File_stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_File_stat:perl-File-stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_File_stat:perl_File_stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-File:perl-File-stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-File:perl_File_stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_File:perl-File-stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_File:perl_File_stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-File-stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_File_stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-File-stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_File_stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-File-stat","purl":"pkg:rpm/redhat/perl-File-stat@1.09-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.09-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19487","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-19487","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"risk":0.24034999999999998,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-19487","description":"A flaw was found in Perl. The regular expression engine may produce incorrect match results due to a stale failure flag in the Aho-Corasick prescan, which causes it to end prematurely. This can lead to the engine missing valid matches or matching on the wrong branch. As a result, applications that use regular expressions for critical functions like access control or data filtering could make erroneous decisions, potentially leading to security bypasses or unintended information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-19487","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"urls":["https://github.com/Perl/perl5/commit/1a21abacaf6f684928bae8baaa153733c8c238eb.patch","https://github.com/Perl/perl5/issues/22892","http://www.openwall.com/lists/oss-security/2026/08/13/8"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19487","description":"Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass.\n\nThe prescan walks the subject for positions where the full pattern could match, and the engine tries it from the leftmost one recorded. A failing transition sets the failed flag, and a later successful transition does not clear it, so the prescan reads the stale flag as a failure and stops before it can record a candidate that starts earlier. It takes a subject where one candidate is recorded and a later character then forces a fallback through a fail link that succeeds.\n\nExample:\n\n  \"ABCDE\" =~ m/ABCF|BCDE|C/;    # matches C at offset 2, not BCDE\n  \"ABCDE\" =~ m/ABCF|BCDE|C(G)/; # no match, BCDE missed\n\nAn alternation like this can miss input it should match, or match it on the wrong branch, so an access or filtering decision made from the result can be wrong."}]},{"artifact":{"id":"4afdea7b02a85f83","cpes":["cpe:2.3:a:perl-FileHandle:perl-FileHandle:0\\:2.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-FileHandle:perl_FileHandle:0\\:2.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_FileHandle:perl-FileHandle:0\\:2.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_FileHandle:perl_FileHandle:0\\:2.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-FileHandle:0\\:2.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_FileHandle:0\\:2.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-FileHandle:0\\:2.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_FileHandle:0\\:2.03-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-FileHandle","purl":"pkg:rpm/redhat/perl-FileHandle@2.03-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:2.03-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19487","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-19487","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"risk":0.24034999999999998,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-19487","description":"A flaw was found in Perl. The regular expression engine may produce incorrect match results due to a stale failure flag in the Aho-Corasick prescan, which causes it to end prematurely. This can lead to the engine missing valid matches or matching on the wrong branch. As a result, applications that use regular expressions for critical functions like access control or data filtering could make erroneous decisions, potentially leading to security bypasses or unintended information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-19487","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"urls":["https://github.com/Perl/perl5/commit/1a21abacaf6f684928bae8baaa153733c8c238eb.patch","https://github.com/Perl/perl5/issues/22892","http://www.openwall.com/lists/oss-security/2026/08/13/8"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19487","description":"Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass.\n\nThe prescan walks the subject for positions where the full pattern could match, and the engine tries it from the leftmost one recorded. A failing transition sets the failed flag, and a later successful transition does not clear it, so the prescan reads the stale flag as a failure and stops before it can record a candidate that starts earlier. It takes a subject where one candidate is recorded and a later character then forces a fallback through a fail link that succeeds.\n\nExample:\n\n  \"ABCDE\" =~ m/ABCF|BCDE|C/;    # matches C at offset 2, not BCDE\n  \"ABCDE\" =~ m/ABCF|BCDE|C(G)/; # no match, BCDE missed\n\nAn alternation like this can miss input it should match, or match it on the wrong branch, so an access or filtering decision made from the result can be wrong."}]},{"artifact":{"id":"3e595c731988d8d7","cpes":["cpe:2.3:a:perl-Getopt-Std:perl-Getopt-Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-Getopt-Std:perl_Getopt_Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Getopt_Std:perl-Getopt-Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Getopt_Std:perl_Getopt_Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-Getopt:perl-Getopt-Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-Getopt:perl_Getopt_Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Getopt:perl-Getopt-Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Getopt:perl_Getopt_Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-Getopt-Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_Getopt_Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-Getopt-Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_Getopt_Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-Getopt-Std","purl":"pkg:rpm/redhat/perl-Getopt-Std@1.12-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.12-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19487","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-19487","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"risk":0.24034999999999998,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-19487","description":"A flaw was found in Perl. The regular expression engine may produce incorrect match results due to a stale failure flag in the Aho-Corasick prescan, which causes it to end prematurely. This can lead to the engine missing valid matches or matching on the wrong branch. As a result, applications that use regular expressions for critical functions like access control or data filtering could make erroneous decisions, potentially leading to security bypasses or unintended information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-19487","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"urls":["https://github.com/Perl/perl5/commit/1a21abacaf6f684928bae8baaa153733c8c238eb.patch","https://github.com/Perl/perl5/issues/22892","http://www.openwall.com/lists/oss-security/2026/08/13/8"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19487","description":"Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass.\n\nThe prescan walks the subject for positions where the full pattern could match, and the engine tries it from the leftmost one recorded. A failing transition sets the failed flag, and a later successful transition does not clear it, so the prescan reads the stale flag as a failure and stops before it can record a candidate that starts earlier. It takes a subject where one candidate is recorded and a later character then forces a fallback through a fail link that succeeds.\n\nExample:\n\n  \"ABCDE\" =~ m/ABCF|BCDE|C/;    # matches C at offset 2, not BCDE\n  \"ABCDE\" =~ m/ABCF|BCDE|C(G)/; # no match, BCDE missed\n\nAn alternation like this can miss input it should match, or match it on the wrong branch, so an access or filtering decision made from the result can be wrong."}]},{"artifact":{"id":"8e1068a3ad769685","cpes":["cpe:2.3:a:perl-IO:perl-IO:0\\:1.43-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-IO:perl_IO:0\\:1.43-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_IO:perl-IO:0\\:1.43-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_IO:perl_IO:0\\:1.43-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-IO:0\\:1.43-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_IO:0\\:1.43-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-IO:0\\:1.43-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_IO:0\\:1.43-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-IO","purl":"pkg:rpm/redhat/perl-IO@1.43-484.el9_8?arch=x86_64&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.43-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19487","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-19487","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"risk":0.24034999999999998,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-19487","description":"A flaw was found in Perl. The regular expression engine may produce incorrect match results due to a stale failure flag in the Aho-Corasick prescan, which causes it to end prematurely. This can lead to the engine missing valid matches or matching on the wrong branch. As a result, applications that use regular expressions for critical functions like access control or data filtering could make erroneous decisions, potentially leading to security bypasses or unintended information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-19487","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"urls":["https://github.com/Perl/perl5/commit/1a21abacaf6f684928bae8baaa153733c8c238eb.patch","https://github.com/Perl/perl5/issues/22892","http://www.openwall.com/lists/oss-security/2026/08/13/8"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19487","description":"Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass.\n\nThe prescan walks the subject for positions where the full pattern could match, and the engine tries it from the leftmost one recorded. A failing transition sets the failed flag, and a later successful transition does not clear it, so the prescan reads the stale flag as a failure and stops before it can record a candidate that starts earlier. It takes a subject where one candidate is recorded and a later character then forces a fallback through a fail link that succeeds.\n\nExample:\n\n  \"ABCDE\" =~ m/ABCF|BCDE|C/;    # matches C at offset 2, not BCDE\n  \"ABCDE\" =~ m/ABCF|BCDE|C(G)/; # no match, BCDE missed\n\nAn alternation like this can miss input it should match, or match it on the wrong branch, so an access or filtering decision made from the result can be wrong."}]},{"artifact":{"id":"fe624a2355bcc9a0","cpes":["cpe:2.3:a:perl-IPC-Open3:perl-IPC-Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-IPC-Open3:perl_IPC_Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_IPC_Open3:perl-IPC-Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_IPC_Open3:perl_IPC_Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-IPC:perl-IPC-Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-IPC:perl_IPC_Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_IPC:perl-IPC-Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_IPC:perl_IPC_Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-IPC-Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_IPC_Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-IPC-Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_IPC_Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-IPC-Open3","purl":"pkg:rpm/redhat/perl-IPC-Open3@1.21-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.21-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19487","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-19487","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"risk":0.24034999999999998,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-19487","description":"A flaw was found in Perl. The regular expression engine may produce incorrect match results due to a stale failure flag in the Aho-Corasick prescan, which causes it to end prematurely. This can lead to the engine missing valid matches or matching on the wrong branch. As a result, applications that use regular expressions for critical functions like access control or data filtering could make erroneous decisions, potentially leading to security bypasses or unintended information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-19487","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"urls":["https://github.com/Perl/perl5/commit/1a21abacaf6f684928bae8baaa153733c8c238eb.patch","https://github.com/Perl/perl5/issues/22892","http://www.openwall.com/lists/oss-security/2026/08/13/8"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19487","description":"Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass.\n\nThe prescan walks the subject for positions where the full pattern could match, and the engine tries it from the leftmost one recorded. A failing transition sets the failed flag, and a later successful transition does not clear it, so the prescan reads the stale flag as a failure and stops before it can record a candidate that starts earlier. It takes a subject where one candidate is recorded and a later character then forces a fallback through a fail link that succeeds.\n\nExample:\n\n  \"ABCDE\" =~ m/ABCF|BCDE|C/;    # matches C at offset 2, not BCDE\n  \"ABCDE\" =~ m/ABCF|BCDE|C(G)/; # no match, BCDE missed\n\nAn alternation like this can miss input it should match, or match it on the wrong branch, so an access or filtering decision made from the result can be wrong."}]},{"artifact":{"id":"966429419a0c4e60","cpes":["cpe:2.3:a:perl-POSIX:perl-POSIX:0\\:1.94-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-POSIX:perl_POSIX:0\\:1.94-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_POSIX:perl-POSIX:0\\:1.94-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_POSIX:perl_POSIX:0\\:1.94-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-POSIX:0\\:1.94-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_POSIX:0\\:1.94-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-POSIX:0\\:1.94-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_POSIX:0\\:1.94-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-POSIX","purl":"pkg:rpm/redhat/perl-POSIX@1.94-484.el9_8?arch=x86_64&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.94-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19487","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-19487","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"risk":0.24034999999999998,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-19487","description":"A flaw was found in Perl. The regular expression engine may produce incorrect match results due to a stale failure flag in the Aho-Corasick prescan, which causes it to end prematurely. This can lead to the engine missing valid matches or matching on the wrong branch. As a result, applications that use regular expressions for critical functions like access control or data filtering could make erroneous decisions, potentially leading to security bypasses or unintended information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-19487","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"urls":["https://github.com/Perl/perl5/commit/1a21abacaf6f684928bae8baaa153733c8c238eb.patch","https://github.com/Perl/perl5/issues/22892","http://www.openwall.com/lists/oss-security/2026/08/13/8"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19487","description":"Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass.\n\nThe prescan walks the subject for positions where the full pattern could match, and the engine tries it from the leftmost one recorded. A failing transition sets the failed flag, and a later successful transition does not clear it, so the prescan reads the stale flag as a failure and stops before it can record a candidate that starts earlier. It takes a subject where one candidate is recorded and a later character then forces a fallback through a fail link that succeeds.\n\nExample:\n\n  \"ABCDE\" =~ m/ABCF|BCDE|C/;    # matches C at offset 2, not BCDE\n  \"ABCDE\" =~ m/ABCF|BCDE|C(G)/; # no match, BCDE missed\n\nAn alternation like this can miss input it should match, or match it on the wrong branch, so an access or filtering decision made from the result can be wrong."}]},{"artifact":{"id":"ed8cd6cbedb5c087","cpes":["cpe:2.3:a:perl-SelectSaver:perl-SelectSaver:0\\:1.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-SelectSaver:perl_SelectSaver:0\\:1.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_SelectSaver:perl-SelectSaver:0\\:1.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_SelectSaver:perl_SelectSaver:0\\:1.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-SelectSaver:0\\:1.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_SelectSaver:0\\:1.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-SelectSaver:0\\:1.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_SelectSaver:0\\:1.02-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-SelectSaver","purl":"pkg:rpm/redhat/perl-SelectSaver@1.02-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.02-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19487","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-19487","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"risk":0.24034999999999998,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-19487","description":"A flaw was found in Perl. The regular expression engine may produce incorrect match results due to a stale failure flag in the Aho-Corasick prescan, which causes it to end prematurely. This can lead to the engine missing valid matches or matching on the wrong branch. As a result, applications that use regular expressions for critical functions like access control or data filtering could make erroneous decisions, potentially leading to security bypasses or unintended information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-19487","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"urls":["https://github.com/Perl/perl5/commit/1a21abacaf6f684928bae8baaa153733c8c238eb.patch","https://github.com/Perl/perl5/issues/22892","http://www.openwall.com/lists/oss-security/2026/08/13/8"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19487","description":"Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass.\n\nThe prescan walks the subject for positions where the full pattern could match, and the engine tries it from the leftmost one recorded. A failing transition sets the failed flag, and a later successful transition does not clear it, so the prescan reads the stale flag as a failure and stops before it can record a candidate that starts earlier. It takes a subject where one candidate is recorded and a later character then forces a fallback through a fail link that succeeds.\n\nExample:\n\n  \"ABCDE\" =~ m/ABCF|BCDE|C/;    # matches C at offset 2, not BCDE\n  \"ABCDE\" =~ m/ABCF|BCDE|C(G)/; # no match, BCDE missed\n\nAn alternation like this can miss input it should match, or match it on the wrong branch, so an access or filtering decision made from the result can be wrong."}]},{"artifact":{"id":"9bf020807c3348c1","cpes":["cpe:2.3:a:perl-Symbol:perl-Symbol:0\\:1.08-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-Symbol:perl_Symbol:0\\:1.08-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Symbol:perl-Symbol:0\\:1.08-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Symbol:perl_Symbol:0\\:1.08-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-Symbol:0\\:1.08-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_Symbol:0\\:1.08-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-Symbol:0\\:1.08-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_Symbol:0\\:1.08-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-Symbol","purl":"pkg:rpm/redhat/perl-Symbol@1.08-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.08-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19487","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-19487","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"risk":0.24034999999999998,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-19487","description":"A flaw was found in Perl. The regular expression engine may produce incorrect match results due to a stale failure flag in the Aho-Corasick prescan, which causes it to end prematurely. This can lead to the engine missing valid matches or matching on the wrong branch. As a result, applications that use regular expressions for critical functions like access control or data filtering could make erroneous decisions, potentially leading to security bypasses or unintended information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-19487","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"urls":["https://github.com/Perl/perl5/commit/1a21abacaf6f684928bae8baaa153733c8c238eb.patch","https://github.com/Perl/perl5/issues/22892","http://www.openwall.com/lists/oss-security/2026/08/13/8"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19487","description":"Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass.\n\nThe prescan walks the subject for positions where the full pattern could match, and the engine tries it from the leftmost one recorded. A failing transition sets the failed flag, and a later successful transition does not clear it, so the prescan reads the stale flag as a failure and stops before it can record a candidate that starts earlier. It takes a subject where one candidate is recorded and a later character then forces a fallback through a fail link that succeeds.\n\nExample:\n\n  \"ABCDE\" =~ m/ABCF|BCDE|C/;    # matches C at offset 2, not BCDE\n  \"ABCDE\" =~ m/ABCF|BCDE|C(G)/; # no match, BCDE missed\n\nAn alternation like this can miss input it should match, or match it on the wrong branch, so an access or filtering decision made from the result can be wrong."}]},{"artifact":{"id":"f7b1f706a4c8603f","cpes":["cpe:2.3:a:perl-base:perl-base:0\\:2.27-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-base:perl_base:0\\:2.27-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl-base:0\\:2.27-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl_base:0\\:2.27-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-base:0\\:2.27-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_base:0\\:2.27-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-base:0\\:2.27-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_base:0\\:2.27-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-base","purl":"pkg:rpm/redhat/perl-base@2.27-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:2.27-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19487","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-19487","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"risk":0.24034999999999998,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-19487","description":"A flaw was found in Perl. The regular expression engine may produce incorrect match results due to a stale failure flag in the Aho-Corasick prescan, which causes it to end prematurely. This can lead to the engine missing valid matches or matching on the wrong branch. As a result, applications that use regular expressions for critical functions like access control or data filtering could make erroneous decisions, potentially leading to security bypasses or unintended information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-19487","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"urls":["https://github.com/Perl/perl5/commit/1a21abacaf6f684928bae8baaa153733c8c238eb.patch","https://github.com/Perl/perl5/issues/22892","http://www.openwall.com/lists/oss-security/2026/08/13/8"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19487","description":"Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass.\n\nThe prescan walks the subject for positions where the full pattern could match, and the engine tries it from the leftmost one recorded. A failing transition sets the failed flag, and a later successful transition does not clear it, so the prescan reads the stale flag as a failure and stops before it can record a candidate that starts earlier. It takes a subject where one candidate is recorded and a later character then forces a fallback through a fail link that succeeds.\n\nExample:\n\n  \"ABCDE\" =~ m/ABCF|BCDE|C/;    # matches C at offset 2, not BCDE\n  \"ABCDE\" =~ m/ABCF|BCDE|C(G)/; # no match, BCDE missed\n\nAn alternation like this can miss input it should match, or match it on the wrong branch, so an access or filtering decision made from the result can be wrong."}]},{"artifact":{"id":"51a4d5612497e394","cpes":["cpe:2.3:a:perl-if:perl-if:0\\:0.60.800-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-if:perl_if:0\\:0.60.800-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_if:perl-if:0\\:0.60.800-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_if:perl_if:0\\:0.60.800-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-if:0\\:0.60.800-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_if:0\\:0.60.800-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-if:0\\:0.60.800-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_if:0\\:0.60.800-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-if","purl":"pkg:rpm/redhat/perl-if@0.60.800-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:0.60.800-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19487","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-19487","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"risk":0.24034999999999998,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-19487","description":"A flaw was found in Perl. The regular expression engine may produce incorrect match results due to a stale failure flag in the Aho-Corasick prescan, which causes it to end prematurely. This can lead to the engine missing valid matches or matching on the wrong branch. As a result, applications that use regular expressions for critical functions like access control or data filtering could make erroneous decisions, potentially leading to security bypasses or unintended information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-19487","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"urls":["https://github.com/Perl/perl5/commit/1a21abacaf6f684928bae8baaa153733c8c238eb.patch","https://github.com/Perl/perl5/issues/22892","http://www.openwall.com/lists/oss-security/2026/08/13/8"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19487","description":"Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass.\n\nThe prescan walks the subject for positions where the full pattern could match, and the engine tries it from the leftmost one recorded. A failing transition sets the failed flag, and a later successful transition does not clear it, so the prescan reads the stale flag as a failure and stops before it can record a candidate that starts earlier. It takes a subject where one candidate is recorded and a later character then forces a fallback through a fail link that succeeds.\n\nExample:\n\n  \"ABCDE\" =~ m/ABCF|BCDE|C/;    # matches C at offset 2, not BCDE\n  \"ABCDE\" =~ m/ABCF|BCDE|C(G)/; # no match, BCDE missed\n\nAn alternation like this can miss input it should match, or match it on the wrong branch, so an access or filtering decision made from the result can be wrong."}]},{"artifact":{"id":"aa8ec3d3a0c8cb51","cpes":["cpe:2.3:a:perl-interpreter:perl-interpreter:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-interpreter:perl_interpreter:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_interpreter:perl-interpreter:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_interpreter:perl_interpreter:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-interpreter:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_interpreter:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-interpreter:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_interpreter:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-interpreter","purl":"pkg:rpm/redhat/perl-interpreter@5.32.1-484.el9_8?arch=x86_64&distro=rhel-9.8&epoch=4&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"4:5.32.1-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":4,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19487","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-19487","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"risk":0.24034999999999998,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-19487","description":"A flaw was found in Perl. The regular expression engine may produce incorrect match results due to a stale failure flag in the Aho-Corasick prescan, which causes it to end prematurely. This can lead to the engine missing valid matches or matching on the wrong branch. As a result, applications that use regular expressions for critical functions like access control or data filtering could make erroneous decisions, potentially leading to security bypasses or unintended information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-19487","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"urls":["https://github.com/Perl/perl5/commit/1a21abacaf6f684928bae8baaa153733c8c238eb.patch","https://github.com/Perl/perl5/issues/22892","http://www.openwall.com/lists/oss-security/2026/08/13/8"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19487","description":"Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass.\n\nThe prescan walks the subject for positions where the full pattern could match, and the engine tries it from the leftmost one recorded. A failing transition sets the failed flag, and a later successful transition does not clear it, so the prescan reads the stale flag as a failure and stops before it can record a candidate that starts earlier. It takes a subject where one candidate is recorded and a later character then forces a fallback through a fail link that succeeds.\n\nExample:\n\n  \"ABCDE\" =~ m/ABCF|BCDE|C/;    # matches C at offset 2, not BCDE\n  \"ABCDE\" =~ m/ABCF|BCDE|C(G)/; # no match, BCDE missed\n\nAn alternation like this can miss input it should match, or match it on the wrong branch, so an access or filtering decision made from the result can be wrong."}]},{"artifact":{"id":"767f57c8ab68452b","cpes":["cpe:2.3:a:perl-lib:perl-lib:0\\:0.65-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-lib:perl_lib:0\\:0.65-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_lib:perl-lib:0\\:0.65-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_lib:perl_lib:0\\:0.65-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-lib:0\\:0.65-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_lib:0\\:0.65-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-lib:0\\:0.65-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_lib:0\\:0.65-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-lib","purl":"pkg:rpm/redhat/perl-lib@0.65-484.el9_8?arch=x86_64&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:0.65-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19487","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-19487","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"risk":0.24034999999999998,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-19487","description":"A flaw was found in Perl. The regular expression engine may produce incorrect match results due to a stale failure flag in the Aho-Corasick prescan, which causes it to end prematurely. This can lead to the engine missing valid matches or matching on the wrong branch. As a result, applications that use regular expressions for critical functions like access control or data filtering could make erroneous decisions, potentially leading to security bypasses or unintended information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-19487","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"urls":["https://github.com/Perl/perl5/commit/1a21abacaf6f684928bae8baaa153733c8c238eb.patch","https://github.com/Perl/perl5/issues/22892","http://www.openwall.com/lists/oss-security/2026/08/13/8"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19487","description":"Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass.\n\nThe prescan walks the subject for positions where the full pattern could match, and the engine tries it from the leftmost one recorded. A failing transition sets the failed flag, and a later successful transition does not clear it, so the prescan reads the stale flag as a failure and stops before it can record a candidate that starts earlier. It takes a subject where one candidate is recorded and a later character then forces a fallback through a fail link that succeeds.\n\nExample:\n\n  \"ABCDE\" =~ m/ABCF|BCDE|C/;    # matches C at offset 2, not BCDE\n  \"ABCDE\" =~ m/ABCF|BCDE|C(G)/; # no match, BCDE missed\n\nAn alternation like this can miss input it should match, or match it on the wrong branch, so an access or filtering decision made from the result can be wrong."}]},{"artifact":{"id":"afda1e38bc7344c3","cpes":["cpe:2.3:a:perl-libs:perl-libs:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-libs:perl_libs:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_libs:perl-libs:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_libs:perl_libs:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-libs:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_libs:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-libs:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_libs:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-libs","purl":"pkg:rpm/redhat/perl-libs@5.32.1-484.el9_8?arch=x86_64&distro=rhel-9.8&epoch=4&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"4:5.32.1-484.el9_8","language":"","licenses":["(GPL+ or Artistic) and BSD and HSRL and MIT and UCD and Public domain"],"metadata":{"epoch":4,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19487","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-19487","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"risk":0.24034999999999998,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-19487","description":"A flaw was found in Perl. The regular expression engine may produce incorrect match results due to a stale failure flag in the Aho-Corasick prescan, which causes it to end prematurely. This can lead to the engine missing valid matches or matching on the wrong branch. As a result, applications that use regular expressions for critical functions like access control or data filtering could make erroneous decisions, potentially leading to security bypasses or unintended information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-19487","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"urls":["https://github.com/Perl/perl5/commit/1a21abacaf6f684928bae8baaa153733c8c238eb.patch","https://github.com/Perl/perl5/issues/22892","http://www.openwall.com/lists/oss-security/2026/08/13/8"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19487","description":"Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass.\n\nThe prescan walks the subject for positions where the full pattern could match, and the engine tries it from the leftmost one recorded. A failing transition sets the failed flag, and a later successful transition does not clear it, so the prescan reads the stale flag as a failure and stops before it can record a candidate that starts earlier. It takes a subject where one candidate is recorded and a later character then forces a fallback through a fail link that succeeds.\n\nExample:\n\n  \"ABCDE\" =~ m/ABCF|BCDE|C/;    # matches C at offset 2, not BCDE\n  \"ABCDE\" =~ m/ABCF|BCDE|C(G)/; # no match, BCDE missed\n\nAn alternation like this can miss input it should match, or match it on the wrong branch, so an access or filtering decision made from the result can be wrong."}]},{"artifact":{"id":"84662c3c03211d25","cpes":["cpe:2.3:a:perl-mro:perl-mro:0\\:1.23-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-mro:perl_mro:0\\:1.23-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_mro:perl-mro:0\\:1.23-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_mro:perl_mro:0\\:1.23-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-mro:0\\:1.23-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_mro:0\\:1.23-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-mro:0\\:1.23-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_mro:0\\:1.23-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-mro","purl":"pkg:rpm/redhat/perl-mro@1.23-484.el9_8?arch=x86_64&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.23-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19487","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-19487","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"risk":0.24034999999999998,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-19487","description":"A flaw was found in Perl. The regular expression engine may produce incorrect match results due to a stale failure flag in the Aho-Corasick prescan, which causes it to end prematurely. This can lead to the engine missing valid matches or matching on the wrong branch. As a result, applications that use regular expressions for critical functions like access control or data filtering could make erroneous decisions, potentially leading to security bypasses or unintended information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-19487","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"urls":["https://github.com/Perl/perl5/commit/1a21abacaf6f684928bae8baaa153733c8c238eb.patch","https://github.com/Perl/perl5/issues/22892","http://www.openwall.com/lists/oss-security/2026/08/13/8"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19487","description":"Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass.\n\nThe prescan walks the subject for positions where the full pattern could match, and the engine tries it from the leftmost one recorded. A failing transition sets the failed flag, and a later successful transition does not clear it, so the prescan reads the stale flag as a failure and stops before it can record a candidate that starts earlier. It takes a subject where one candidate is recorded and a later character then forces a fallback through a fail link that succeeds.\n\nExample:\n\n  \"ABCDE\" =~ m/ABCF|BCDE|C/;    # matches C at offset 2, not BCDE\n  \"ABCDE\" =~ m/ABCF|BCDE|C(G)/; # no match, BCDE missed\n\nAn alternation like this can miss input it should match, or match it on the wrong branch, so an access or filtering decision made from the result can be wrong."}]},{"artifact":{"id":"cfd33bba5b1551d2","cpes":["cpe:2.3:a:perl-overload:perl-overload:0\\:1.31-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-overload:perl_overload:0\\:1.31-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_overload:perl-overload:0\\:1.31-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_overload:perl_overload:0\\:1.31-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-overload:0\\:1.31-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_overload:0\\:1.31-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-overload:0\\:1.31-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_overload:0\\:1.31-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-overload","purl":"pkg:rpm/redhat/perl-overload@1.31-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.31-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19487","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-19487","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"risk":0.24034999999999998,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-19487","description":"A flaw was found in Perl. The regular expression engine may produce incorrect match results due to a stale failure flag in the Aho-Corasick prescan, which causes it to end prematurely. This can lead to the engine missing valid matches or matching on the wrong branch. As a result, applications that use regular expressions for critical functions like access control or data filtering could make erroneous decisions, potentially leading to security bypasses or unintended information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-19487","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"urls":["https://github.com/Perl/perl5/commit/1a21abacaf6f684928bae8baaa153733c8c238eb.patch","https://github.com/Perl/perl5/issues/22892","http://www.openwall.com/lists/oss-security/2026/08/13/8"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19487","description":"Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass.\n\nThe prescan walks the subject for positions where the full pattern could match, and the engine tries it from the leftmost one recorded. A failing transition sets the failed flag, and a later successful transition does not clear it, so the prescan reads the stale flag as a failure and stops before it can record a candidate that starts earlier. It takes a subject where one candidate is recorded and a later character then forces a fallback through a fail link that succeeds.\n\nExample:\n\n  \"ABCDE\" =~ m/ABCF|BCDE|C/;    # matches C at offset 2, not BCDE\n  \"ABCDE\" =~ m/ABCF|BCDE|C(G)/; # no match, BCDE missed\n\nAn alternation like this can miss input it should match, or match it on the wrong branch, so an access or filtering decision made from the result can be wrong."}]},{"artifact":{"id":"15c2c34f0c45d893","cpes":["cpe:2.3:a:perl-overloading:perl-overloading:0\\:0.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-overloading:perl_overloading:0\\:0.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_overloading:perl-overloading:0\\:0.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_overloading:perl_overloading:0\\:0.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-overloading:0\\:0.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_overloading:0\\:0.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-overloading:0\\:0.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_overloading:0\\:0.02-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-overloading","purl":"pkg:rpm/redhat/perl-overloading@0.02-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:0.02-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19487","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-19487","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"risk":0.24034999999999998,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-19487","description":"A flaw was found in Perl. The regular expression engine may produce incorrect match results due to a stale failure flag in the Aho-Corasick prescan, which causes it to end prematurely. This can lead to the engine missing valid matches or matching on the wrong branch. As a result, applications that use regular expressions for critical functions like access control or data filtering could make erroneous decisions, potentially leading to security bypasses or unintended information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-19487","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"urls":["https://github.com/Perl/perl5/commit/1a21abacaf6f684928bae8baaa153733c8c238eb.patch","https://github.com/Perl/perl5/issues/22892","http://www.openwall.com/lists/oss-security/2026/08/13/8"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19487","description":"Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass.\n\nThe prescan walks the subject for positions where the full pattern could match, and the engine tries it from the leftmost one recorded. A failing transition sets the failed flag, and a later successful transition does not clear it, so the prescan reads the stale flag as a failure and stops before it can record a candidate that starts earlier. It takes a subject where one candidate is recorded and a later character then forces a fallback through a fail link that succeeds.\n\nExample:\n\n  \"ABCDE\" =~ m/ABCF|BCDE|C/;    # matches C at offset 2, not BCDE\n  \"ABCDE\" =~ m/ABCF|BCDE|C(G)/; # no match, BCDE missed\n\nAn alternation like this can miss input it should match, or match it on the wrong branch, so an access or filtering decision made from the result can be wrong."}]},{"artifact":{"id":"84db60c0f6c9abcf","cpes":["cpe:2.3:a:perl-subs:perl-subs:0\\:1.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-subs:perl_subs:0\\:1.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_subs:perl-subs:0\\:1.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_subs:perl_subs:0\\:1.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-subs:0\\:1.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_subs:0\\:1.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-subs:0\\:1.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_subs:0\\:1.03-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-subs","purl":"pkg:rpm/redhat/perl-subs@1.03-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.03-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19487","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-19487","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"risk":0.24034999999999998,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-19487","description":"A flaw was found in Perl. The regular expression engine may produce incorrect match results due to a stale failure flag in the Aho-Corasick prescan, which causes it to end prematurely. This can lead to the engine missing valid matches or matching on the wrong branch. As a result, applications that use regular expressions for critical functions like access control or data filtering could make erroneous decisions, potentially leading to security bypasses or unintended information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-19487","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"urls":["https://github.com/Perl/perl5/commit/1a21abacaf6f684928bae8baaa153733c8c238eb.patch","https://github.com/Perl/perl5/issues/22892","http://www.openwall.com/lists/oss-security/2026/08/13/8"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19487","description":"Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass.\n\nThe prescan walks the subject for positions where the full pattern could match, and the engine tries it from the leftmost one recorded. A failing transition sets the failed flag, and a later successful transition does not clear it, so the prescan reads the stale flag as a failure and stops before it can record a candidate that starts earlier. It takes a subject where one candidate is recorded and a later character then forces a fallback through a fail link that succeeds.\n\nExample:\n\n  \"ABCDE\" =~ m/ABCF|BCDE|C/;    # matches C at offset 2, not BCDE\n  \"ABCDE\" =~ m/ABCF|BCDE|C(G)/; # no match, BCDE missed\n\nAn alternation like this can miss input it should match, or match it on the wrong branch, so an access or filtering decision made from the result can be wrong."}]},{"artifact":{"id":"0ad1840c208a6594","cpes":["cpe:2.3:a:perl-vars:perl-vars:0\\:1.05-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-vars:perl_vars:0\\:1.05-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_vars:perl-vars:0\\:1.05-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_vars:perl_vars:0\\:1.05-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-vars:0\\:1.05-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_vars:0\\:1.05-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-vars:0\\:1.05-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_vars:0\\:1.05-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-vars","purl":"pkg:rpm/redhat/perl-vars@1.05-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.05-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19487","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-19487","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"risk":0.24034999999999998,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-19487","description":"A flaw was found in Perl. The regular expression engine may produce incorrect match results due to a stale failure flag in the Aho-Corasick prescan, which causes it to end prematurely. This can lead to the engine missing valid matches or matching on the wrong branch. As a result, applications that use regular expressions for critical functions like access control or data filtering could make erroneous decisions, potentially leading to security bypasses or unintended information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-19487","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19487","cwe":"CWE-670","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19487","date":"2026-10-10","epss":0.00418,"percentile":0.34197}],"urls":["https://github.com/Perl/perl5/commit/1a21abacaf6f684928bae8baaa153733c8c238eb.patch","https://github.com/Perl/perl5/issues/22892","http://www.openwall.com/lists/oss-security/2026/08/13/8"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19487","description":"Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass.\n\nThe prescan walks the subject for positions where the full pattern could match, and the engine tries it from the leftmost one recorded. A failing transition sets the failed flag, and a later successful transition does not clear it, so the prescan reads the stale flag as a failure and stops before it can record a candidate that starts earlier. It takes a subject where one candidate is recorded and a later character then forces a fallback through a fail link that succeeds.\n\nExample:\n\n  \"ABCDE\" =~ m/ABCF|BCDE|C/;    # matches C at offset 2, not BCDE\n  \"ABCDE\" =~ m/ABCF|BCDE|C(G)/; # no match, BCDE missed\n\nAn alternation like this can miss input it should match, or match it on the wrong branch, so an access or filtering decision made from the result can be wrong."}]},{"artifact":{"id":"73ec63868795f316","cpes":["cpe:2.3:a:openssl:openssl:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:rpm/redhat/openssl@3.5.8-1.el9_8?arch=x86_64&distro=rhel-9.8&epoch=1&upstream=openssl-3.5.8-1.el9_8.src.rpm","type":"rpm","version":"1:3.5.8-1.el9_8","language":"","licenses":["Apache-2.0"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-54873","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"openssl","version":"1:3.5.8-1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-54873","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54873","cwe":"CWE-770","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-54873","date":"2026-10-10","epss":0.00462,"percentile":0.38181}],"risk":0.23793,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-54873","description":"A flaw was found in OpenSSL. A remote attacker can cause a Denial of Service (DoS) by sending specially crafted network packets to a QUIC protocol endpoint. Because the QUIC stack retains memory in packet buffers until the receiving application reads the stream data, an attacker can manipulate data transfers to keep these buffers allocated indefinitely. This behavior leads to excessive memory consumption and can exhaust available system resources."},"relatedVulnerabilities":[{"id":"CVE-2026-54873","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54873","cwe":"CWE-770","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-54873","date":"2026-10-10","epss":0.00462,"percentile":0.38181}],"urls":["https://github.com/openssl/openssl/commit/1f643b8bc735487b500a1f68a7fb3a22d5e38e23","https://github.com/openssl/openssl/commit/279e7ee1392af98785746788168749491c74bd53","https://github.com/openssl/openssl/commit/3ea6213e050e938ecbbf8c4eff32bec2736780eb","https://github.com/openssl/openssl/commit/7127fb10888b49711c63128a09e524c0d2d5d0b2","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-54873","description":"Issue summary: QUIC process may keep memory for QUIC packet\nbuffer for much longer period than necessary.\n\nImpact summary: Remote peer can exploit this vulnerability\nby sending maliciously crafted packets, making the local\nQUIC stack to keep the memory for packet buffers allocated.\nThe time for which the memory remains allocated is entirely\nunder the control of the potentially malicious remote peer.\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: To save copy operation from the packet buffer to the\nstream reassemble buffer the QUIC stack leaves the stream data\non the packet buffer waiting to be copied to a buffer provided\nby the local receiving application. The QUIC stack releases\na reference to the packet buffer only after the data are copied\nto the application buffer. This design is more efficient for\nlegitimate data transfers but enables an attacker to allocate a lot\nmore memory than actually required by the data kept in the receiving\nstream buffer.\n\nTo mitigate the vulnerability, the QUIC stack now calculates\nand monitors memory overhead for every stream. The memory overhead\nfor a single stream frame is calculated as a difference between the\nsize of the whole packet that carries the stream frame and the size\nof the stream frame itself. The memory overhead for a single stream\nframe is added to the total (cumulative) memory overhead QUIC stack\nkeeps for each stream. Once the cumulative memory overhead exceeds\n64kB, the QUIC stack moves the stream frame data from the packet\nbuffer to the stream buffer, starting with the next packet received.\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary."}]},{"artifact":{"id":"753337be7fe19d16","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/redhat/openssl-libs@3.5.8-1.el9_8?arch=x86_64&distro=rhel-9.8&epoch=1&upstream=openssl-3.5.8-1.el9_8.src.rpm","type":"rpm","version":"1:3.5.8-1.el9_8","language":"","licenses":["Apache-2.0"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"3.5.8-1.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-54873","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"openssl","version":"3.5.8-1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-54873","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54873","cwe":"CWE-770","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-54873","date":"2026-10-10","epss":0.00462,"percentile":0.38181}],"risk":0.23793,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-54873","description":"A flaw was found in OpenSSL. A remote attacker can cause a Denial of Service (DoS) by sending specially crafted network packets to a QUIC protocol endpoint. Because the QUIC stack retains memory in packet buffers until the receiving application reads the stream data, an attacker can manipulate data transfers to keep these buffers allocated indefinitely. This behavior leads to excessive memory consumption and can exhaust available system resources."},"relatedVulnerabilities":[{"id":"CVE-2026-54873","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54873","cwe":"CWE-770","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-54873","date":"2026-10-10","epss":0.00462,"percentile":0.38181}],"urls":["https://github.com/openssl/openssl/commit/1f643b8bc735487b500a1f68a7fb3a22d5e38e23","https://github.com/openssl/openssl/commit/279e7ee1392af98785746788168749491c74bd53","https://github.com/openssl/openssl/commit/3ea6213e050e938ecbbf8c4eff32bec2736780eb","https://github.com/openssl/openssl/commit/7127fb10888b49711c63128a09e524c0d2d5d0b2","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-54873","description":"Issue summary: QUIC process may keep memory for QUIC packet\nbuffer for much longer period than necessary.\n\nImpact summary: Remote peer can exploit this vulnerability\nby sending maliciously crafted packets, making the local\nQUIC stack to keep the memory for packet buffers allocated.\nThe time for which the memory remains allocated is entirely\nunder the control of the potentially malicious remote peer.\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: To save copy operation from the packet buffer to the\nstream reassemble buffer the QUIC stack leaves the stream data\non the packet buffer waiting to be copied to a buffer provided\nby the local receiving application. The QUIC stack releases\na reference to the packet buffer only after the data are copied\nto the application buffer. This design is more efficient for\nlegitimate data transfers but enables an attacker to allocate a lot\nmore memory than actually required by the data kept in the receiving\nstream buffer.\n\nTo mitigate the vulnerability, the QUIC stack now calculates\nand monitors memory overhead for every stream. The memory overhead\nfor a single stream frame is calculated as a difference between the\nsize of the whole packet that carries the stream frame and the size\nof the stream frame itself. The memory overhead for a single stream\nframe is added to the total (cumulative) memory overhead QUIC stack\nkeeps for each stream. Once the cumulative memory overhead exceeds\n64kB, the QUIC stack moves the stream frame data from the packet\nbuffer to the stream buffer, starting with the next packet received.\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary."}]},{"artifact":{"id":"751040f2dddec633","cpes":["cpe:2.3:a:golang:go:1.26.7:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.26.7","type":"go-module","version":"go1.26.7","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.26.7"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.26.9"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6613","versionConstraint":"<1.26.9||>=1.27.0-0,<1.27.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.26.7"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6613","fix":{"state":"fixed","versions":["1.26.9","1.27.2"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"},{"date":"2026-10-08","kind":"release","version":"1.27.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94439","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94439","date":"2026-10-10","epss":0.00315,"percentile":0.22501}],"risk":0.23625000000000002,"urls":["https://go.dev/issue/81744","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847311","description":"When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CONNECT converts the connection into a tunnel, the server should not treat the connection as continuing to contain HTTP.\n\nThe impact of this misbehavior is mostly limited to potential request smuggling, where an intermediate proxy considers the data on the connection to be tunneled and the server considers it to be HTTP."},"relatedVulnerabilities":[{"id":"CVE-2026-94439","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94439","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94439","date":"2026-10-10","epss":0.00315,"percentile":0.22501}],"urls":["https://go.dev/cl/847311","https://go.dev/issue/81744","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6613"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-94439","description":"When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CONNECT converts the connection into a tunnel, the server should not treat the connection as continuing to contain HTTP. The impact of this misbehavior is mostly limited to potential request smuggling, where an intermediate proxy considers the data on the connection to be tunneled and the server considers it to be HTTP."}]},{"artifact":{"id":"73ec63868795f316","cpes":["cpe:2.3:a:openssl:openssl:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:rpm/redhat/openssl@3.5.8-1.el9_8?arch=x86_64&distro=rhel-9.8&epoch=1&upstream=openssl-3.5.8-1.el9_8.src.rpm","type":"rpm","version":"1:3.5.8-1.el9_8","language":"","licenses":["Apache-2.0"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-13176","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"openssl","version":"1:3.5.8-1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2024-13176","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-13176","cwe":"CWE-385","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-13176","date":"2026-10-10","epss":0.00613,"percentile":0.47821}],"risk":0.23600500000000002,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2024-13176","description":"A timing side-channel vulnerability was found in OpenSSL. This vulnerability allows an attacker to recover the private key. However, measuring the timing would require local access to the signing application or a fast network connection with low latency. There is a timing signal of around 300 nanoseconds when the top word of the inverted ECDSA nonce value is zero. This issue can happen with significant probability only for some of the supported elliptic curves. In particular, the NIST P-521 curve is affected."},"relatedVulnerabilities":[{"id":"CVE-2024-13176","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":4.1,"impactScore":3.4,"exploitabilityScore":0.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-13176","cwe":"CWE-385","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-13176","date":"2026-10-10","epss":0.00613,"percentile":0.47821}],"urls":["https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844","https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467","https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902","https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65","https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f","https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded","https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86","https://openssl-library.org/news/secadv/20250120.txt","http://www.openwall.com/lists/oss-security/2025/01/20/2","https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html","https://security.netapp.com/advisory/ntap-20250124-0005/","https://security.netapp.com/advisory/ntap-20250418-0010/","https://security.netapp.com/advisory/ntap-20250502-0006/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-13176","description":"Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue."}]},{"artifact":{"id":"753337be7fe19d16","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/redhat/openssl-libs@3.5.8-1.el9_8?arch=x86_64&distro=rhel-9.8&epoch=1&upstream=openssl-3.5.8-1.el9_8.src.rpm","type":"rpm","version":"1:3.5.8-1.el9_8","language":"","licenses":["Apache-2.0"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"3.5.8-1.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-13176","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"openssl","version":"3.5.8-1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2024-13176","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-13176","cwe":"CWE-385","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-13176","date":"2026-10-10","epss":0.00613,"percentile":0.47821}],"risk":0.23600500000000002,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2024-13176","description":"A timing side-channel vulnerability was found in OpenSSL. This vulnerability allows an attacker to recover the private key. However, measuring the timing would require local access to the signing application or a fast network connection with low latency. There is a timing signal of around 300 nanoseconds when the top word of the inverted ECDSA nonce value is zero. This issue can happen with significant probability only for some of the supported elliptic curves. In particular, the NIST P-521 curve is affected."},"relatedVulnerabilities":[{"id":"CVE-2024-13176","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":4.1,"impactScore":3.4,"exploitabilityScore":0.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-13176","cwe":"CWE-385","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-13176","date":"2026-10-10","epss":0.00613,"percentile":0.47821}],"urls":["https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844","https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467","https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902","https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65","https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f","https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded","https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86","https://openssl-library.org/news/secadv/20250120.txt","http://www.openwall.com/lists/oss-security/2025/01/20/2","https://lists.debian.org/debian-lts-announce/2025/05/msg00028.html","https://security.netapp.com/advisory/ntap-20250124-0005/","https://security.netapp.com/advisory/ntap-20250418-0010/","https://security.netapp.com/advisory/ntap-20250502-0006/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-13176","description":"Issue summary: A timing side-channel which could potentially allow recovering\nthe private key exists in the ECDSA signature computation.\n\nImpact summary: A timing side-channel in ECDSA signature computations\ncould allow recovering the private key by an attacker. However, measuring\nthe timing would require either local access to the signing application or\na very fast network connection with low latency.\n\nThere is a timing signal of around 300 nanoseconds when the top word of\nthe inverted ECDSA nonce value is zero. This can happen with significant\nprobability only for some of the supported elliptic curves. In particular\nthe NIST P-521 curve is affected. To be able to measure this leak, the attacker\nprocess must either be located in the same physical computer or must\nhave a very fast network connection with low latency. For that reason\nthe severity of this vulnerability is Low.\n\nThe FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue."}]},{"artifact":{"id":"1c27b1fc065b3d30","cpes":["cpe:2.3:a:python3-pip-wheel:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip-wheel:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip_wheel:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip_wheel:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*"],"name":"python3-pip-wheel","purl":"pkg:rpm/redhat/python3-pip-wheel@21.3.1-2.el9_8?arch=noarch&distro=rhel-9.8&upstream=python-pip-21.3.1-2.el9_8.src.rpm","type":"rpm","version":"21.3.1-2.el9_8","language":"","licenses":["MIT and Python and ASL 2.0 and BSD and ISC and LGPLv2 and MPLv2.0 and (ASL 2.0 or BSD)"],"metadata":{"epoch":null,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python-pip","version":"21.3.1-2.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-45409","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"python-pip","version":"21.3.1-2.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-45409","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45409","cwe":"CWE-1333","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-45409","date":"2026-10-10","epss":0.00457,"percentile":0.37715}],"risk":0.23535500000000004,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-45409","description":"A flaw was found in the idna library, which handles Internationalized Domain Names in Python applications. A remote attacker could exploit this vulnerability by sending specially crafted, excessively long inputs to the library's encoding function. This could cause the system to consume significant resources, leading to a Denial of Service (DoS), where the affected application becomes unavailable to legitimate users. This issue stems from an incomplete fix for a previously identified vulnerability."},"relatedVulnerabilities":[{"id":"CVE-2026-45409","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45409","cwe":"CWE-1333","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-45409","date":"2026-10-10","epss":0.00457,"percentile":0.37715}],"urls":["https://github.com/kjd/idna/security/advisories/GHSA-65pc-fj4g-8rjx"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-45409","description":"Internationalized Domain Names in Applications (IDNA) for Python provides support for Internationalized Domain Names in Applications (IDNA) and Unicode IDNA Compatibility Processing. In versions prior to 3.15, payloads such as `\"\\u0660\" * N` or `\"\\u30fb\" * N + \"\\u6f22\"` utilize the `valid_contexto` function prior to length rejection, and for high values of `N` will take a long time to process. This is the same issue as CVE-2024-3651, however the original remediation in 2024 was not a complete fix. A specially crafted argument to the `idna.encode()` function could consume significant resources. This may lead to a denial-of-service. Starting in version 3.14, the function rejects long inputs as soon as practicable prior to any further processing to minimize resource consumption. In version 3.15, this approach was extended to lesser used alternate functions (i.e. per-label conversions and codec support). A workaround is available. Domain names cannot exceed 253 characters in length. If this length limit is enforced prior to passing the domain to the `idna.encode()` function, it should no longer consume significant resources. This is triggered by arbitrarily large inputs that would not occur in normal usage, but may be passed to the library assuming there is no preliminary input validation by the higher-level application."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-1127","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2023-1127","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.3,"impactScore":5.9,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-1127","cwe":"CWE-369","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2023-1127","date":"2026-10-10","epss":0.00455,"percentile":0.37624}],"risk":0.23432500000000003,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-1127","description":"A flaw was found in Vim. A division by zero in the scrolldown function may lead to a denial of service, modified memory, and possibly remote execution."},"relatedVulnerabilities":[{"id":"CVE-2023-1127","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.3,"impactScore":5.9,"exploitabilityScore":1.4},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-1127","cwe":"CWE-369","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2023-1127","date":"2026-10-10","epss":0.00455,"percentile":0.37624}],"urls":["https://github.com/vim/vim/commit/e0f869196930ef5f25a0ac41c9215b09c9ce2d3c","https://huntr.dev/bounties/2d4d309e-4c96-415f-9070-36d0815f1beb","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PDVN5HSWPNVP4QXBPCEGZDLZKURLJWTE/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJ6TMKKBXHGVUHWFGM4X46VIJO7ZAG2W/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-1127","description":"Divide By Zero in GitHub repository vim/vim prior to 9.0.1367."}]},{"artifact":{"id":"dd995e0ac7dd3a05","cpes":["cpe:2.3:a:harfbuzz:harfbuzz:2.7.4-10.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:harfbuzz:2.7.4-10.el9:*:*:*:*:*:*:*"],"name":"harfbuzz","purl":"pkg:rpm/redhat/harfbuzz@2.7.4-10.el9?arch=x86_64&distro=rhel-9.8&upstream=harfbuzz-2.7.4-10.el9.src.rpm","type":"rpm","version":"2.7.4-10.el9","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-22693","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"harfbuzz","version":"0:2.7.4-10.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-22693","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-22693","cwe":"CWE-476","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-22693","date":"2026-10-10","epss":0.00452,"percentile":0.37344}],"risk":0.23278000000000001,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-22693","description":"A null pointer dereference vector has been discovered in the harfbuzz package. A null pointer dereference vulnerability exists in the SubtableUnicodesCache::create function located in src/hb-ot-cmap-table.hh:1672-1673. The function fails to check if hb_malloc returns NULL before using placement new to construct an object at the returned pointer address. When hb_malloc fails to allocate memory (which can occur in low-memory conditions or when using custom allocators that simulate allocation failures), it returns NULL. The code then attempts to call the constructor on this null pointer using placement new syntax, resulting in undefined behavior and a Segmentation Fault."},"relatedVulnerabilities":[{"id":"CVE-2026-22693","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-22693","cwe":"CWE-476","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-22693","date":"2026-10-10","epss":0.00452,"percentile":0.37344}],"urls":["https://github.com/harfbuzz/harfbuzz/commit/1265ff8d990284f04d8768f35b0e20ae5f60daae","https://github.com/harfbuzz/harfbuzz/security/advisories/GHSA-xvjr-f2r9-c7ww","http://www.openwall.com/lists/oss-security/2026/01/11/1","http://www.openwall.com/lists/oss-security/2026/01/12/1"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-22693","description":"HarfBuzz is a text shaping engine. Prior to version 12.3.0, a null pointer dereference vulnerability exists in the SubtableUnicodesCache::create function located in src/hb-ot-cmap-table.hh. The function fails to check if hb_malloc returns NULL before using placement new to construct an object at the returned pointer address. When hb_malloc fails to allocate memory (which can occur in low-memory conditions or when using custom allocators that simulate allocation failures), it returns NULL. The code then attempts to call the constructor on this null pointer using placement new syntax, resulting in undefined behavior and a Segmentation Fault. This issue has been patched in version 12.3.0."}]},{"artifact":{"id":"751040f2dddec633","cpes":["cpe:2.3:a:golang:go:1.26.7:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.26.7","type":"go-module","version":"go1.26.7","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.26.7"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.26.9"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6605","versionConstraint":"<1.26.9||>=1.27.0-0,<1.27.2 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.26.7"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6605","fix":{"state":"fixed","versions":["1.26.9","1.27.2"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"},{"date":"2026-10-08","kind":"release","version":"1.27.2"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56866","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-56866","date":"2026-10-10","epss":0.00309,"percentile":0.2179}],"risk":0.23175,"urls":["https://go.dev/issue/81740","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/847306","description":"When http.Transport sends an HTTP/1 CONNECT request with a non-empty Request.Body, it writes the body directly to the connection without framing after the request headers. If the server rejects the CONNECT request with a non-2xx keep-alive response, Transport returns the connection to the idle pool. Because CONNECT requests do not have a request body, the server may interpret the trailing body bytes as a subsequent pipelined HTTP/1.1 request on the connection, leaving the pooled connection desynchronized and causing the next caller that reuses it to read the response to the injected request. In reverse proxies (including httputil.ReverseProxy) that forward CONNECT requests through a shared Transport, this can lead to cross-user response poisoning."},"relatedVulnerabilities":[{"id":"CVE-2026-56866","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56866","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-56866","date":"2026-10-10","epss":0.00309,"percentile":0.2179}],"urls":["https://go.dev/cl/847306","https://go.dev/issue/81740","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6605"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56866","description":"When http.Transport sends an HTTP/1 CONNECT request with a non-empty Request.Body, it writes the body directly to the connection without framing after the request headers. If the server rejects the CONNECT request with a non-2xx keep-alive response, Transport returns the connection to the idle pool. Because CONNECT requests do not have a request body, the server may interpret the trailing body bytes as a subsequent pipelined HTTP/1.1 request on the connection, leaving the pooled connection desynchronized and causing the next caller that reuses it to read the response to the injected request. In reverse proxies (including httputil.ReverseProxy) that forward CONNECT requests through a shared Transport, this can lead to cross-user response poisoning."}]},{"artifact":{"id":"23e3d9feac1cb13c","cpes":["cpe:2.3:a:libgcc:libgcc:11.5.0-14.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libgcc:11.5.0-14.el9:*:*:*:*:*:*:*"],"name":"libgcc","purl":"pkg:rpm/redhat/libgcc@11.5.0-14.el9?arch=x86_64&distro=rhel-9.8&upstream=gcc-11.5.0-14.el9.src.rpm","type":"rpm","version":"11.5.0-14.el9","language":"","licenses":["GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"gcc","version":"11.5.0-14.el9"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-95619","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"gcc","version":"11.5.0-14.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-95619","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-10-10","epss":0.00363,"percentile":0.28189}],"risk":0.230505,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."},"relatedVulnerabilities":[{"id":"CVE-2026-95619","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-10-10","epss":0.00363,"percentile":0.28189}],"urls":["https://access.redhat.com/errata/RHSA-2026:58503","https://access.redhat.com/errata/RHSA-2026:67275","https://access.redhat.com/security/cve/CVE-2026-95619","https://bugzilla.redhat.com/show_bug.cgi?id=2537811"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."}]},{"artifact":{"id":"c43da072cb8484d1","cpes":["cpe:2.3:a:libgomp:libgomp:11.5.0-14.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libgomp:11.5.0-14.el9:*:*:*:*:*:*:*"],"name":"libgomp","purl":"pkg:rpm/redhat/libgomp@11.5.0-14.el9?arch=x86_64&distro=rhel-9.8&upstream=gcc-11.5.0-14.el9.src.rpm","type":"rpm","version":"11.5.0-14.el9","language":"","licenses":["GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"gcc","version":"11.5.0-14.el9"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-95619","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"gcc","version":"11.5.0-14.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-95619","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-10-10","epss":0.00363,"percentile":0.28189}],"risk":0.230505,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."},"relatedVulnerabilities":[{"id":"CVE-2026-95619","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-10-10","epss":0.00363,"percentile":0.28189}],"urls":["https://access.redhat.com/errata/RHSA-2026:58503","https://access.redhat.com/errata/RHSA-2026:67275","https://access.redhat.com/security/cve/CVE-2026-95619","https://bugzilla.redhat.com/show_bug.cgi?id=2537811"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."}]},{"artifact":{"id":"62a2970ccab3dd86","cpes":["cpe:2.3:a:libstdc\\+\\+:libstdc\\+\\+:11.5.0-14.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libstdc\\+\\+:11.5.0-14.el9:*:*:*:*:*:*:*"],"name":"libstdc++","purl":"pkg:rpm/redhat/libstdc%2B%2B@11.5.0-14.el9?arch=x86_64&distro=rhel-9.8&upstream=gcc-11.5.0-14.el9.src.rpm","type":"rpm","version":"11.5.0-14.el9","language":"","licenses":["GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"gcc","version":"11.5.0-14.el9"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-95619","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"gcc","version":"11.5.0-14.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-95619","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-10-10","epss":0.00363,"percentile":0.28189}],"risk":0.230505,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."},"relatedVulnerabilities":[{"id":"CVE-2026-95619","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-10-10","epss":0.00363,"percentile":0.28189}],"urls":["https://access.redhat.com/errata/RHSA-2026:58503","https://access.redhat.com/errata/RHSA-2026:67275","https://access.redhat.com/security/cve/CVE-2026-95619","https://bugzilla.redhat.com/show_bug.cgi?id=2537811"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."}]},{"artifact":{"id":"ea0f2a7e0eb5d962","cpes":["cpe:2.3:a:python3:python3:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3:3.9.25-7.el9_8.3:*:*:*:*:*:*:*"],"name":"python3","purl":"pkg:rpm/redhat/python3@3.9.25-7.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=python3.9-3.9.25-7.el9_8.3.src.rpm","type":"rpm","version":"3.9.25-7.el9_8.3","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python3.9","version":"3.9.25-7.el9_8.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-0672","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"python3.9","version":"3.9.25-7.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-0672","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.8,"impactScore":3.6,"exploitabilityScore":1.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-0672","cwe":"CWE-93","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-0672","date":"2026-10-10","epss":0.00469,"percentile":0.38703}],"risk":0.22981,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-0672","description":"An injection flaw has been discovered in Python. When using http.cookies.Morsel, user-controlled cookie values and parameters can allow injecting HTTP headers into messages. Patch rejects all control characters within cookie names, values, and parameters."},"relatedVulnerabilities":[{"id":"CVE-2026-0672","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-0672","cwe":"CWE-93","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-0672","date":"2026-10-10","epss":0.00469,"percentile":0.38703}],"urls":["https://github.com/python/cpython/commit/62700107418eb2cca3fc88da036a243ea975f172","https://github.com/python/cpython/commit/712452e6f1d4b9f7f8c4c92ebfcaac1705faa440","https://github.com/python/cpython/commit/7852d72b653fea0199acf5fc2a84f6f8b84eba8d","https://github.com/python/cpython/commit/918387e4912d12ffc166c8f2a38df92b6ec756ca","https://github.com/python/cpython/commit/95746b3a13a985787ef53b977129041971ed7f70","https://github.com/python/cpython/commit/b1869ff648bbee0717221d09e6deff46617f3e85","https://github.com/python/cpython/issues/143919","https://github.com/python/cpython/pull/143920","https://mail.python.org/archives/list/security-announce@python.org/thread/6VFLQQEIX673KXKFUZXCUNE5AZOGZ45M/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-0672","description":"When using http.cookies.Morsel, user-controlled cookie values and parameters can allow injecting HTTP headers into messages. Patch rejects all control characters within cookie names, values, and parameters."}]},{"artifact":{"id":"0ed3c72bb9ee9391","cpes":["cpe:2.3:a:python3-libs:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3-libs:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3_libs:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3_libs:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*"],"name":"python3-libs","purl":"pkg:rpm/redhat/python3-libs@3.9.25-7.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=python3.9-3.9.25-7.el9_8.3.src.rpm","type":"rpm","version":"3.9.25-7.el9_8.3","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python3.9","version":"3.9.25-7.el9_8.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-0672","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"python3.9","version":"3.9.25-7.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-0672","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.8,"impactScore":3.6,"exploitabilityScore":1.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-0672","cwe":"CWE-93","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-0672","date":"2026-10-10","epss":0.00469,"percentile":0.38703}],"risk":0.22981,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-0672","description":"An injection flaw has been discovered in Python. When using http.cookies.Morsel, user-controlled cookie values and parameters can allow injecting HTTP headers into messages. Patch rejects all control characters within cookie names, values, and parameters."},"relatedVulnerabilities":[{"id":"CVE-2026-0672","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-0672","cwe":"CWE-93","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-0672","date":"2026-10-10","epss":0.00469,"percentile":0.38703}],"urls":["https://github.com/python/cpython/commit/62700107418eb2cca3fc88da036a243ea975f172","https://github.com/python/cpython/commit/712452e6f1d4b9f7f8c4c92ebfcaac1705faa440","https://github.com/python/cpython/commit/7852d72b653fea0199acf5fc2a84f6f8b84eba8d","https://github.com/python/cpython/commit/918387e4912d12ffc166c8f2a38df92b6ec756ca","https://github.com/python/cpython/commit/95746b3a13a985787ef53b977129041971ed7f70","https://github.com/python/cpython/commit/b1869ff648bbee0717221d09e6deff46617f3e85","https://github.com/python/cpython/issues/143919","https://github.com/python/cpython/pull/143920","https://mail.python.org/archives/list/security-announce@python.org/thread/6VFLQQEIX673KXKFUZXCUNE5AZOGZ45M/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-0672","description":"When using http.cookies.Morsel, user-controlled cookie values and parameters can allow injecting HTTP headers into messages. Patch rejects all control characters within cookie names, values, and parameters."}]},{"artifact":{"id":"f5eb0651fec88df5","cpes":["cpe:2.3:a:com.fasterxml.jackson.core:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.20.1:*:*:*:*:*:*:*"],"name":"jackson-databind","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1","type":"java-archive","version":"2.20.1","language":"java","licenses":["The Apache Software License, Version 2.0"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/opt/jenkins-plugin-manager.jar:com.fasterxml.jackson.core:jackson-databind","manifestName":"","pomArtifactID":"jackson-databind","archiveDigests":null},"locations":[{"path":"/opt/jenkins-plugin-manager.jar","layerID":"sha256:1303dd889187d7e25ac68bf0fb8d636f5a922b6753d092bcae3924d569cb869a","accessPath":"/opt/jenkins-plugin-manager.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.21.5"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-5jmj-h7xm-6q6v","versionConstraint":">=2.19.0,<2.21.5 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-databind","version":"2.20.1"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-5jmj-h7xm-6q6v","fix":{"state":"fixed","versions":["2.21.5"],"available":[{"date":"2026-06-24","kind":"first-observed","version":"2.21.5"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54515","cwe":"CWE-915","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-54515","date":"2026-10-10","epss":0.00443,"percentile":0.3655}],"risk":0.228145,"urls":["https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-5jmj-h7xm-6q6v","https://github.com/FasterXML/jackson-databind/issues/5962","https://github.com/FasterXML/jackson-databind/issues/5964","https://github.com/FasterXML/jackson-databind/commit/0e1b0b211f7a53baa62ba2f4c9bd006c7bf4d5fa","https://nvd.nist.gov/vuln/detail/CVE-2026-54515"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-5jmj-h7xm-6q6v","description":"jackson-databind has case-insensitive deserialization bypasses per-property @JsonIgnoreProperties"},"relatedVulnerabilities":[{"id":"CVE-2026-54515","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54515","cwe":"CWE-915","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-54515","date":"2026-10-10","epss":0.00443,"percentile":0.3655}],"urls":["https://github.com/FasterXML/jackson-databind/commit/0e1b0b211f7a53baa62ba2f4c9bd006c7bf4d5fa","https://github.com/FasterXML/jackson-databind/issues/5962","https://github.com/FasterXML/jackson-databind/issues/5964","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-5jmj-h7xm-6q6v"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-54515","description":"jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.8.0 until 2.18.9, 2.21.5, and 3.1.4, in BeanDeserializerBase.createContextual(), per-property @JsonIgnoreProperties exclusions are applied by _handleByNameInclusion(), producing a contextual deserializer whose BeanPropertyMap has the ignored properties removed. The subsequent per-property case-insensitivity block (triggered by @JsonFormat(ACCEPT_CASE_INSENSITIVE_PROPERTIES)) rebuilds from this._beanProperties (the original, unfiltered map) instead of contextual._beanProperties, then overwrites the filtered map — restoring every property _handleByNameInclusion had just removed. The ignored property becomes writable again. This vulnerability is fixed in 2.18.9, 2.21.5, and 3.1.4."}]},{"artifact":{"id":"751040f2dddec633","cpes":["cpe:2.3:a:golang:go:1.26.7:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.26.7","type":"go-module","version":"go1.26.7","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.26.7"},"locations":[{"path":"/usr/bin/git-lfs","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/usr/bin/git-lfs","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.26.9"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6610","versionConstraint":"<1.26.9 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.26.7"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6610","fix":{"state":"fixed","versions":["1.26.9"],"available":[{"date":"2026-10-08","kind":"release","version":"1.26.9"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78660","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78660","date":"2026-10-10","epss":0.00303,"percentile":0.21188}],"risk":0.22725,"urls":["https://go.dev/cl/836385","https://go.dev/issue/81115","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"],"severity":"High","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/835145","description":"Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling."},"relatedVulnerabilities":[{"id":"CVE-2026-78660","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78660","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-78660","date":"2026-10-10","epss":0.00303,"percentile":0.21188}],"urls":["https://go.dev/cl/835145","https://go.dev/cl/836385","https://go.dev/issue/81115","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6610"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78660","description":"Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling."}]},{"artifact":{"id":"73ec63868795f316","cpes":["cpe:2.3:a:openssl:openssl:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:rpm/redhat/openssl@3.5.8-1.el9_8?arch=x86_64&distro=rhel-9.8&epoch=1&upstream=openssl-3.5.8-1.el9_8.src.rpm","type":"rpm","version":"1:3.5.8-1.el9_8","language":"","licenses":["Apache-2.0"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-28387","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"openssl","version":"1:3.5.8-1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-28387","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-28387","cwe":"CWE-416","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28387","date":"2026-10-10","epss":0.00671,"percentile":0.50588}],"risk":0.22478499999999996,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-28387","description":"A flaw was found in OpenSSL. An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA records, may result in a use-after-free and/or double-free on the client side. This vulnerability could lead to data corruption, application crashes, or, in severe cases, arbitrary code execution. This issue is highly specific and uncommon, as it only affects clients using both PKIX-TA(0)/PKIX-EE(1) and DANE-TA(2) certificate usages and communicating with a server publishing a TLSA record set with both types of records."},"relatedVulnerabilities":[{"id":"CVE-2026-28387","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-28387","cwe":"CWE-416","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28387","date":"2026-10-10","epss":0.00671,"percentile":0.50588}],"urls":["https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b","https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe","https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3","https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7","https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177","https://openssl-library.org/news/secadv/20260407.txt","https://cert-portal.siemens.com/productcert/html/ssa-032379.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-28387","description":"Issue summary: An uncommon configuration of clients performing DANE TLSA-based\nserver authentication, when paired with uncommon server DANE TLSA records, may\nresult in a use-after-free and/or double-free on the client side.\n\nImpact summary: A use after free can have a range of potential consequences\nsuch as the corruption of valid data, crashes or execution of arbitrary code.\n\nHowever, the issue only affects clients that make use of TLSA records with both\nthe PKIX-TA(0/PKIX-EE(1) certificate usages and the DANE-TA(2) certificate\nusage.\n\nBy far the most common deployment of DANE is in SMTP MTAs for which RFC7672\nrecommends that clients treat as 'unusable' any TLSA records that have the PKIX\ncertificate usages.  These SMTP (or other similar) clients are not vulnerable\nto this issue.  Conversely, any clients that support only the PKIX usages, and\nignore the DANE-TA(2) usage are also not vulnerable.\n\nThe client would also need to be communicating with a server that publishes a\nTLSA RRset with both types of TLSA records.\n\nNo FIPS modules are affected by this issue, the problem code is outside the\nFIPS module boundary."}]},{"artifact":{"id":"753337be7fe19d16","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/redhat/openssl-libs@3.5.8-1.el9_8?arch=x86_64&distro=rhel-9.8&epoch=1&upstream=openssl-3.5.8-1.el9_8.src.rpm","type":"rpm","version":"1:3.5.8-1.el9_8","language":"","licenses":["Apache-2.0"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"3.5.8-1.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-28387","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"openssl","version":"3.5.8-1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-28387","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-28387","cwe":"CWE-416","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28387","date":"2026-10-10","epss":0.00671,"percentile":0.50588}],"risk":0.22478499999999996,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-28387","description":"A flaw was found in OpenSSL. An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA records, may result in a use-after-free and/or double-free on the client side. This vulnerability could lead to data corruption, application crashes, or, in severe cases, arbitrary code execution. This issue is highly specific and uncommon, as it only affects clients using both PKIX-TA(0)/PKIX-EE(1) and DANE-TA(2) certificate usages and communicating with a server publishing a TLSA record set with both types of records."},"relatedVulnerabilities":[{"id":"CVE-2026-28387","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-28387","cwe":"CWE-416","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28387","date":"2026-10-10","epss":0.00671,"percentile":0.50588}],"urls":["https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b","https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe","https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3","https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7","https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177","https://openssl-library.org/news/secadv/20260407.txt","https://cert-portal.siemens.com/productcert/html/ssa-032379.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-28387","description":"Issue summary: An uncommon configuration of clients performing DANE TLSA-based\nserver authentication, when paired with uncommon server DANE TLSA records, may\nresult in a use-after-free and/or double-free on the client side.\n\nImpact summary: A use after free can have a range of potential consequences\nsuch as the corruption of valid data, crashes or execution of arbitrary code.\n\nHowever, the issue only affects clients that make use of TLSA records with both\nthe PKIX-TA(0/PKIX-EE(1) certificate usages and the DANE-TA(2) certificate\nusage.\n\nBy far the most common deployment of DANE is in SMTP MTAs for which RFC7672\nrecommends that clients treat as 'unusable' any TLSA records that have the PKIX\ncertificate usages.  These SMTP (or other similar) clients are not vulnerable\nto this issue.  Conversely, any clients that support only the PKIX usages, and\nignore the DANE-TA(2) usage are also not vulnerable.\n\nThe client would also need to be communicating with a server that publishes a\nTLSA RRset with both types of TLSA records.\n\nNo FIPS modules are affected by this issue, the problem code is outside the\nFIPS module boundary."}]},{"artifact":{"id":"a3c55d7a5e4bf54f","cpes":["cpe:2.3:a:redhat:glibc:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc:2.34-275.el9_8:*:*:*:*:*:*:*"],"name":"glibc","purl":"pkg:rpm/redhat/glibc@2.34-275.el9_8?arch=x86_64&distro=rhel-9.8&upstream=glibc-2.34-275.el9_8.src.rpm","type":"rpm","version":"2.34-275.el9_8","language":"","licenses":["LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.34-283.el9_8"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-80489","versionConstraint":"< 0:2.34-283.el9_8 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"glibc","version":"0:2.34-275.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-80489","fix":{"state":"fixed","versions":["0:2.34-283.el9_8"],"available":[{"date":"2026-10-09","kind":"first-observed","version":"0:2.34-283.el9_8"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-80489","cwe":"CWE-835","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-80489","date":"2026-10-10","epss":0.00412,"percentile":0.33506}],"risk":0.22454000000000002,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[{"id":"RHSA-2026:79281","link":"https://access.redhat.com/errata/RHSA-2026:79281"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-80489","description":"A flaw was found in glibc. Converting crafted EUC_JISX0213 input to UCS-4 or the internal wide character encoding (for example with iconv) can cause the converter to make no progress, hanging the calling application. Some EUC_JISX0213 sequences decode to two code points; if the output buffer has room for only the first, the second is stored in conversion state and returned as E2BIG, but that pending character is never cleared after it is emitted on the next call, so retries loop forever without consuming further input."},"relatedVulnerabilities":[{"id":"CVE-2026-80489","cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-80489","cwe":"CWE-835","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-80489","date":"2026-10-10","epss":0.00412,"percentile":0.33506}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=34568","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0020"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-80489","description":"Converting crafted EUC_JISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may result in the converter making no progress, causing the calling application to hang.\n\nSome EUC_JISX0213 sequences decode to two code points.  If the output buffer has room for only the first one, the converter stores the second in the conversion state and returns E2BIG, but it never clears that pending character after emitting it on the next call.  The converter then keeps emitting the pending character without consuming further input, so an application that retries the conversion loops forever. The input must be attacker controlled and the application must convert it with an output buffer small enough to split the two code points. Only the EUC_JISX0213 character set is affected, which is not commonly used.  The related defect in SHIFT_JISX0213 converter is tracked separately as CVE-2026-77117."}]},{"artifact":{"id":"88cf218ecaac1f25","cpes":["cpe:2.3:a:glibc-common:glibc-common:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc-common:glibc_common:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc-common:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc_common:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:glibc-common:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:glibc_common:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc-common:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc_common:2.34-275.el9_8:*:*:*:*:*:*:*"],"name":"glibc-common","purl":"pkg:rpm/redhat/glibc-common@2.34-275.el9_8?arch=x86_64&distro=rhel-9.8&upstream=glibc-2.34-275.el9_8.src.rpm","type":"rpm","version":"2.34-275.el9_8","language":"","licenses":["LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"glibc","version":"2.34-275.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.34-283.el9_8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-80489","versionConstraint":"< 0:2.34-283.el9_8 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"glibc","version":"2.34-275.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-80489","fix":{"state":"fixed","versions":["0:2.34-283.el9_8"],"available":[{"date":"2026-10-09","kind":"first-observed","version":"0:2.34-283.el9_8"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-80489","cwe":"CWE-835","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-80489","date":"2026-10-10","epss":0.00412,"percentile":0.33506}],"risk":0.22454000000000002,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[{"id":"RHSA-2026:79281","link":"https://access.redhat.com/errata/RHSA-2026:79281"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-80489","description":"A flaw was found in glibc. Converting crafted EUC_JISX0213 input to UCS-4 or the internal wide character encoding (for example with iconv) can cause the converter to make no progress, hanging the calling application. Some EUC_JISX0213 sequences decode to two code points; if the output buffer has room for only the first, the second is stored in conversion state and returned as E2BIG, but that pending character is never cleared after it is emitted on the next call, so retries loop forever without consuming further input."},"relatedVulnerabilities":[{"id":"CVE-2026-80489","cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-80489","cwe":"CWE-835","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-80489","date":"2026-10-10","epss":0.00412,"percentile":0.33506}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=34568","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0020"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-80489","description":"Converting crafted EUC_JISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may result in the converter making no progress, causing the calling application to hang.\n\nSome EUC_JISX0213 sequences decode to two code points.  If the output buffer has room for only the first one, the converter stores the second in the conversion state and returns E2BIG, but it never clears that pending character after emitting it on the next call.  The converter then keeps emitting the pending character without consuming further input, so an application that retries the conversion loops forever. The input must be attacker controlled and the application must convert it with an output buffer small enough to split the two code points. Only the EUC_JISX0213 character set is affected, which is not commonly used.  The related defect in SHIFT_JISX0213 converter is tracked separately as CVE-2026-77117."}]},{"artifact":{"id":"20293a554663f535","cpes":["cpe:2.3:a:glibc-minimal-langpack:glibc-minimal-langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc-minimal-langpack:glibc_minimal_langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc_minimal_langpack:glibc-minimal-langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc_minimal_langpack:glibc_minimal_langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc-minimal:glibc-minimal-langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc-minimal:glibc_minimal_langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc_minimal:glibc-minimal-langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc_minimal:glibc_minimal_langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:glibc-minimal-langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:glibc_minimal_langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc-minimal-langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc_minimal_langpack:2.34-275.el9_8:*:*:*:*:*:*:*"],"name":"glibc-minimal-langpack","purl":"pkg:rpm/redhat/glibc-minimal-langpack@2.34-275.el9_8?arch=x86_64&distro=rhel-9.8&upstream=glibc-2.34-275.el9_8.src.rpm","type":"rpm","version":"2.34-275.el9_8","language":"","licenses":["LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"glibc","version":"2.34-275.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.34-283.el9_8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-80489","versionConstraint":"< 0:2.34-283.el9_8 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"glibc","version":"2.34-275.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-80489","fix":{"state":"fixed","versions":["0:2.34-283.el9_8"],"available":[{"date":"2026-10-09","kind":"first-observed","version":"0:2.34-283.el9_8"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-80489","cwe":"CWE-835","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-80489","date":"2026-10-10","epss":0.00412,"percentile":0.33506}],"risk":0.22454000000000002,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[{"id":"RHSA-2026:79281","link":"https://access.redhat.com/errata/RHSA-2026:79281"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-80489","description":"A flaw was found in glibc. Converting crafted EUC_JISX0213 input to UCS-4 or the internal wide character encoding (for example with iconv) can cause the converter to make no progress, hanging the calling application. Some EUC_JISX0213 sequences decode to two code points; if the output buffer has room for only the first, the second is stored in conversion state and returned as E2BIG, but that pending character is never cleared after it is emitted on the next call, so retries loop forever without consuming further input."},"relatedVulnerabilities":[{"id":"CVE-2026-80489","cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-80489","cwe":"CWE-835","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-80489","date":"2026-10-10","epss":0.00412,"percentile":0.33506}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=34568","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0020"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-80489","description":"Converting crafted EUC_JISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may result in the converter making no progress, causing the calling application to hang.\n\nSome EUC_JISX0213 sequences decode to two code points.  If the output buffer has room for only the first one, the converter stores the second in the conversion state and returns E2BIG, but it never clears that pending character after emitting it on the next call.  The converter then keeps emitting the pending character without consuming further input, so an application that retries the conversion loops forever. The input must be attacker controlled and the application must convert it with an output buffer small enough to split the two code points. Only the EUC_JISX0213 character set is affected, which is not commonly used.  The related defect in SHIFT_JISX0213 converter is tracked separately as CVE-2026-77117."}]},{"artifact":{"id":"a3c55d7a5e4bf54f","cpes":["cpe:2.3:a:redhat:glibc:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc:2.34-275.el9_8:*:*:*:*:*:*:*"],"name":"glibc","purl":"pkg:rpm/redhat/glibc@2.34-275.el9_8?arch=x86_64&distro=rhel-9.8&upstream=glibc-2.34-275.el9_8.src.rpm","type":"rpm","version":"2.34-275.el9_8","language":"","licenses":["LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.34-283.el9_8"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-77117","versionConstraint":"< 0:2.34-283.el9_8 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"glibc","version":"0:2.34-275.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-77117","fix":{"state":"fixed","versions":["0:2.34-283.el9_8"],"available":[{"date":"2026-10-09","kind":"first-observed","version":"0:2.34-283.el9_8"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-77117","cwe":"CWE-835","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-77117","date":"2026-10-10","epss":0.00412,"percentile":0.33505}],"risk":0.22454000000000002,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[{"id":"RHSA-2026:79281","link":"https://access.redhat.com/errata/RHSA-2026:79281"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-77117","description":"A flaw was found in glibc. A remote attacker could exploit this vulnerability by providing specially crafted input during SHIFT_JISX0213 to UCS-4 text conversion. This crafted input can cause the application to repeatedly emit a buffered code point without consuming further input, leading to persistent retry churn. This can result in a denial of service (DoS) for callers converting untrusted text."},"relatedVulnerabilities":[{"id":"CVE-2026-77117","cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-77117","cwe":"CWE-835","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-77117","date":"2026-10-10","epss":0.00412,"percentile":0.33505}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=34556","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0019"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-77117","description":"Converting crafted SHIFT_JISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may result in the converter making no progress, causing the calling application to hang.\n\nSome SHIFT_JISX0213 sequences decode to two code points.  If the output buffer has room for only the first one, the converter stores the second in the conversion state and returns E2BIG, but it never clears that pending character after emitting it on the next call.  The converter then keeps emitting the pending character without consuming further input, so an application that retries the conversion loops forever. The input must be attacker controlled and the application must convert it with an output buffer small enough to split the two code points. Only the SHIFT_JISX0213 character set is affected, which is not commonly used.  The related defect in the EUC_JISX0213 converter is tracked separately as CVE-2026-80489."}]},{"artifact":{"id":"88cf218ecaac1f25","cpes":["cpe:2.3:a:glibc-common:glibc-common:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc-common:glibc_common:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc-common:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc_common:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:glibc-common:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:glibc_common:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc-common:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc_common:2.34-275.el9_8:*:*:*:*:*:*:*"],"name":"glibc-common","purl":"pkg:rpm/redhat/glibc-common@2.34-275.el9_8?arch=x86_64&distro=rhel-9.8&upstream=glibc-2.34-275.el9_8.src.rpm","type":"rpm","version":"2.34-275.el9_8","language":"","licenses":["LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"glibc","version":"2.34-275.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.34-283.el9_8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-77117","versionConstraint":"< 0:2.34-283.el9_8 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"glibc","version":"2.34-275.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-77117","fix":{"state":"fixed","versions":["0:2.34-283.el9_8"],"available":[{"date":"2026-10-09","kind":"first-observed","version":"0:2.34-283.el9_8"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-77117","cwe":"CWE-835","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-77117","date":"2026-10-10","epss":0.00412,"percentile":0.33505}],"risk":0.22454000000000002,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[{"id":"RHSA-2026:79281","link":"https://access.redhat.com/errata/RHSA-2026:79281"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-77117","description":"A flaw was found in glibc. A remote attacker could exploit this vulnerability by providing specially crafted input during SHIFT_JISX0213 to UCS-4 text conversion. This crafted input can cause the application to repeatedly emit a buffered code point without consuming further input, leading to persistent retry churn. This can result in a denial of service (DoS) for callers converting untrusted text."},"relatedVulnerabilities":[{"id":"CVE-2026-77117","cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-77117","cwe":"CWE-835","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-77117","date":"2026-10-10","epss":0.00412,"percentile":0.33505}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=34556","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0019"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-77117","description":"Converting crafted SHIFT_JISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may result in the converter making no progress, causing the calling application to hang.\n\nSome SHIFT_JISX0213 sequences decode to two code points.  If the output buffer has room for only the first one, the converter stores the second in the conversion state and returns E2BIG, but it never clears that pending character after emitting it on the next call.  The converter then keeps emitting the pending character without consuming further input, so an application that retries the conversion loops forever. The input must be attacker controlled and the application must convert it with an output buffer small enough to split the two code points. Only the SHIFT_JISX0213 character set is affected, which is not commonly used.  The related defect in the EUC_JISX0213 converter is tracked separately as CVE-2026-80489."}]},{"artifact":{"id":"20293a554663f535","cpes":["cpe:2.3:a:glibc-minimal-langpack:glibc-minimal-langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc-minimal-langpack:glibc_minimal_langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc_minimal_langpack:glibc-minimal-langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc_minimal_langpack:glibc_minimal_langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc-minimal:glibc-minimal-langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc-minimal:glibc_minimal_langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc_minimal:glibc-minimal-langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc_minimal:glibc_minimal_langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:glibc-minimal-langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:glibc_minimal_langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc-minimal-langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc_minimal_langpack:2.34-275.el9_8:*:*:*:*:*:*:*"],"name":"glibc-minimal-langpack","purl":"pkg:rpm/redhat/glibc-minimal-langpack@2.34-275.el9_8?arch=x86_64&distro=rhel-9.8&upstream=glibc-2.34-275.el9_8.src.rpm","type":"rpm","version":"2.34-275.el9_8","language":"","licenses":["LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"glibc","version":"2.34-275.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.34-283.el9_8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-77117","versionConstraint":"< 0:2.34-283.el9_8 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"glibc","version":"2.34-275.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-77117","fix":{"state":"fixed","versions":["0:2.34-283.el9_8"],"available":[{"date":"2026-10-09","kind":"first-observed","version":"0:2.34-283.el9_8"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-77117","cwe":"CWE-835","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-77117","date":"2026-10-10","epss":0.00412,"percentile":0.33505}],"risk":0.22454000000000002,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[{"id":"RHSA-2026:79281","link":"https://access.redhat.com/errata/RHSA-2026:79281"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-77117","description":"A flaw was found in glibc. A remote attacker could exploit this vulnerability by providing specially crafted input during SHIFT_JISX0213 to UCS-4 text conversion. This crafted input can cause the application to repeatedly emit a buffered code point without consuming further input, leading to persistent retry churn. This can result in a denial of service (DoS) for callers converting untrusted text."},"relatedVulnerabilities":[{"id":"CVE-2026-77117","cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-77117","cwe":"CWE-835","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-77117","date":"2026-10-10","epss":0.00412,"percentile":0.33505}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=34556","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0019"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-77117","description":"Converting crafted SHIFT_JISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may result in the converter making no progress, causing the calling application to hang.\n\nSome SHIFT_JISX0213 sequences decode to two code points.  If the output buffer has room for only the first one, the converter stores the second in the conversion state and returns E2BIG, but it never clears that pending character after emitting it on the next call.  The converter then keeps emitting the pending character without consuming further input, so an application that retries the conversion loops forever. The input must be attacker controlled and the application must convert it with an output buffer small enough to split the two code points. Only the SHIFT_JISX0213 character set is affected, which is not commonly used.  The related defect in the EUC_JISX0213 converter is tracked separately as CVE-2026-80489."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-3153","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-3153","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-3153","cwe":"CWE-476","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2022-3153","date":"2026-10-10","epss":0.00487,"percentile":0.40041}],"risk":0.221585,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-3153","description":"A flaw was found in vim, where it is vulnerable to a null-pointer-dereference in the vim_regcomp() function. This flaw allows a specially crafted file to crash a program or execute code."},"relatedVulnerabilities":[{"id":"CVE-2022-3153","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-3153","cwe":"CWE-476","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2022-3153","date":"2026-10-10","epss":0.00487,"percentile":0.40041}],"urls":["https://github.com/vim/vim/commit/1540d334a04d874c2aa9d26b82dbbcd4bc5a78de","https://huntr.dev/bounties/68331124-620d-48bc-a8fa-cd947b26270a","https://security.gentoo.org/glsa/202305-16"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-3153","description":"NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-1725","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-1725","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-1725","cwe":"CWE-476","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-1725","cwe":"CWE-476","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-1725","date":"2026-10-10","epss":0.00518,"percentile":0.42321}],"risk":0.22014999999999998,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-1725","description":"A NULL pointer dereference vulnerability was found in Vim's vim_regexec_string() function of the src/regexp.c file. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a NULL pointer dereference that causes a denial of service."},"relatedVulnerabilities":[{"id":"CVE-2022-1725","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":6.6,"impactScore":4.8,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-1725","cwe":"CWE-476","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-1725","cwe":"CWE-476","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-1725","date":"2026-10-10","epss":0.00518,"percentile":0.42321}],"urls":["http://seclists.org/fulldisclosure/2022/Oct/28","http://seclists.org/fulldisclosure/2022/Oct/41","https://github.com/vim/vim/commit/b62dc5e7825bc195efe3041d5b3a9f1528359e1c","https://huntr.dev/bounties/4363cf07-233e-4d0a-a1d5-c731a400525c","https://security.gentoo.org/glsa/202305-16","https://support.apple.com/kb/HT213488"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-1725","description":"NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4959."}]},{"artifact":{"id":"73ec63868795f316","cpes":["cpe:2.3:a:openssl:openssl:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:rpm/redhat/openssl@3.5.8-1.el9_8?arch=x86_64&distro=rhel-9.8&epoch=1&upstream=openssl-3.5.8-1.el9_8.src.rpm","type":"rpm","version":"1:3.5.8-1.el9_8","language":"","licenses":["Apache-2.0"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-42765","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"openssl","version":"1:3.5.8-1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-42765","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42765","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-42765","date":"2026-10-10","epss":0.00477,"percentile":0.39278}],"risk":0.21226500000000004,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-42765","description":"A flaw was found in OpenSSL. When an application is configured with specific non-default settings for certificate verification, including both Online Certificate Status Protocol (OCSP) response checking and partial chain verification, a NULL dereference can occur. This vulnerability can be triggered if the certificate chain lacks a self-signed trusted anchor, causing the application to crash. This leads to a Denial of Service (DoS) for the affected application."},"relatedVulnerabilities":[{"id":"CVE-2026-42765","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42765","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-42765","date":"2026-10-10","epss":0.00477,"percentile":0.39278}],"urls":["https://github.com/openssl/openssl/commit/14340b7fa1d444615486bc137014b064e64ec334","https://github.com/openssl/openssl/commit/eb345da18ce2216b2f3ade9c2bc23e068487fa97","https://openssl-library.org/news/secadv/20260609.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-42765","description":"Issue summary: When a partial-chain certificate verification is enabled\ntogether with OCSP response checking for the whole chain, a NULL dereference\nwill happen if the verified chain does not have a self-signed trusted anchor,\ncrashing the process.\n\nImpact summary: A NULL pointer dereference can trigger a crash which leads to a\nDenial of Service for an application.\n\nWhen performing OCSP response checking for certificates in the verification\nchain, the code always tries to access the next certificate as the issuer.\nThere is a check for a self-signed certificate. However with the partial\nchain verification enabled when the chain does not have a self-signed trusted\nanchor, the issuer will be NULL for the last certificate in the chain. A NULL\npointer dereference then happens.\n\nThis issue affects only applications which enable both OCSP verification\nof the certificate chain (X509_V_FLAG_OCSP_RESP_CHECK_ALL) and partial\nchain verification (X509_V_FLAG_PARTIAL_CHAIN) in the certificate\nverification. Both flags are disabled by default. For that reason, we have\nassigned Low severity to the issue.\n\nNo FIPS modules are affected by this issue as the affected code is outside\nthe OpenSSL FIPS module boundary."}]},{"artifact":{"id":"753337be7fe19d16","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/redhat/openssl-libs@3.5.8-1.el9_8?arch=x86_64&distro=rhel-9.8&epoch=1&upstream=openssl-3.5.8-1.el9_8.src.rpm","type":"rpm","version":"1:3.5.8-1.el9_8","language":"","licenses":["Apache-2.0"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"3.5.8-1.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-42765","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"openssl","version":"3.5.8-1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-42765","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42765","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-42765","date":"2026-10-10","epss":0.00477,"percentile":0.39278}],"risk":0.21226500000000004,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-42765","description":"A flaw was found in OpenSSL. When an application is configured with specific non-default settings for certificate verification, including both Online Certificate Status Protocol (OCSP) response checking and partial chain verification, a NULL dereference can occur. This vulnerability can be triggered if the certificate chain lacks a self-signed trusted anchor, causing the application to crash. This leads to a Denial of Service (DoS) for the affected application."},"relatedVulnerabilities":[{"id":"CVE-2026-42765","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42765","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-42765","date":"2026-10-10","epss":0.00477,"percentile":0.39278}],"urls":["https://github.com/openssl/openssl/commit/14340b7fa1d444615486bc137014b064e64ec334","https://github.com/openssl/openssl/commit/eb345da18ce2216b2f3ade9c2bc23e068487fa97","https://openssl-library.org/news/secadv/20260609.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-42765","description":"Issue summary: When a partial-chain certificate verification is enabled\ntogether with OCSP response checking for the whole chain, a NULL dereference\nwill happen if the verified chain does not have a self-signed trusted anchor,\ncrashing the process.\n\nImpact summary: A NULL pointer dereference can trigger a crash which leads to a\nDenial of Service for an application.\n\nWhen performing OCSP response checking for certificates in the verification\nchain, the code always tries to access the next certificate as the issuer.\nThere is a check for a self-signed certificate. However with the partial\nchain verification enabled when the chain does not have a self-signed trusted\nanchor, the issuer will be NULL for the last certificate in the chain. A NULL\npointer dereference then happens.\n\nThis issue affects only applications which enable both OCSP verification\nof the certificate chain (X509_V_FLAG_OCSP_RESP_CHECK_ALL) and partial\nchain verification (X509_V_FLAG_PARTIAL_CHAIN) in the certificate\nverification. Both flags are disabled by default. For that reason, we have\nassigned Low severity to the issue.\n\nNo FIPS modules are affected by this issue as the affected code is outside\nthe OpenSSL FIPS module boundary."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-2923","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-2923","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2923","cwe":"CWE-476","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-2923","cwe":"CWE-476","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-2923","date":"2026-10-10","epss":0.00498,"percentile":0.40836}],"risk":0.21165000000000003,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-2923","description":"A flaw was found in vim, where it is vulnerable to a NULL pointer dereference in the sug_filltree function. This flaw allows a specially crafted file to crash the software."},"relatedVulnerabilities":[{"id":"CVE-2022-2923","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L","metrics":{"baseScore":6.6,"impactScore":4.8,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2923","cwe":"CWE-476","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-2923","cwe":"CWE-476","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-2923","date":"2026-10-10","epss":0.00498,"percentile":0.40836}],"urls":["https://github.com/vim/vim/commit/6669de1b235843968e88844ca6d3c8dec4b01a9e","https://huntr.dev/bounties/fd3a3ab8-ab0f-452f-afea-8c613e283fd2","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C72HDIMR3KTTAO7QGTXWUMPBNFUFIBRD/","https://security.gentoo.org/glsa/202305-16"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-2923","description":"NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-48706","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2023-48706","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-48706","cwe":"CWE-416","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-48706","date":"2026-10-10","epss":0.00544,"percentile":0.43967}],"risk":0.20944000000000002,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-48706","description":"A heap use-after-free flaw was found in the vim package. When executing a `:s` command for the first time and using a sub-replace-special atom inside the substitution part, it is possible that the recursive `:s` call causes memory to be freed, which may later then be accessed by the initial `:s` command. This issue may result in Vim crashing."},"relatedVulnerabilities":[{"id":"CVE-2023-48706","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":3.6,"impactScore":2.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-48706","cwe":"CWE-416","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-48706","date":"2026-10-10","epss":0.00544,"percentile":0.43967}],"urls":["http://www.openwall.com/lists/oss-security/2023/11/22/3","https://github.com/gandalf4a/crash_report/blob/main/vim/vim_huaf","https://github.com/vim/vim/commit/26c11c56888d01e298cd8044caf860f3c26f57bb","https://github.com/vim/vim/pull/13552","https://github.com/vim/vim/security/advisories/GHSA-c8qm-x72m-q53q","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DNMFS3IH74KEMMESOA3EOB6MZ56TWGFF/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IVA7K73WHQH4KVFDJQ7ELIUD2WK5ZT5E/","https://security.netapp.com/advisory/ntap-20240105-0001/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-48706","description":"Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free vulnerability. When executing a `:s` command for the very first time and using a sub-replace-special atom inside the substitution part, it is possible that the recursive `:s` call causes free-ing of memory which may later then be accessed by the initial `:s` command. The user must intentionally execute the payload and the whole process is a bit tricky to do since it seems to work only reliably for the very first :s command. It may also cause a crash of Vim. Version 9.0.2121 contains a fix for this issue."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-1170","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2023-1170","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.3,"impactScore":3.4,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-1170","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2023-1170","date":"2026-10-10","epss":0.00495,"percentile":0.40679}],"risk":0.20542500000000005,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-1170","description":"A heap-based buffer overflow vulnerability was found in Vim's utf_ptr2char() function of the src/mbyte.c file. This flaw occurs because there is access to invalid memory with put in visual block mode. An attacker can trick a user into opening a specially crafted file, triggering an out-of-bounds read that causes an application to crash, leading to a denial of service."},"relatedVulnerabilities":[{"id":"CVE-2023-1170","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","metrics":{"baseScore":6.6,"impactScore":4.8,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.3,"impactScore":5.9,"exploitabilityScore":1.4},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-1170","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2023-1170","date":"2026-10-10","epss":0.00495,"percentile":0.40679}],"urls":["https://github.com/vim/vim/commit/1c73b65229c25e3c1fd8824ba958f7cc4d604f9c","https://huntr.dev/bounties/286e0090-e654-46d2-ac60-29f81799d0a4","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DIAKPMKJ4OZ6NYRZJO7YWMNQL2BICLYV/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X4KDAU76Z7QNSPKZX2JAJ6O7KIEOXWTL/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-1170","description":"Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-2874","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-2874","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2874","cwe":"CWE-476","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2022-2874","date":"2026-10-10","epss":0.00483,"percentile":0.39735}],"risk":0.20527500000000004,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-2874","description":"A NULL pointer dereference vulnerability was found in Vim in the generate_loadvar function in the vim9compile.c file. This flaw allows an attacker who can trick a user into processing a specially crafted file to trigger the NULL pointer dereference, causing the application to crash."},"relatedVulnerabilities":[{"id":"CVE-2022-2874","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","metrics":{"baseScore":6.6,"impactScore":4.8,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2874","cwe":"CWE-476","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2022-2874","date":"2026-10-10","epss":0.00483,"percentile":0.39735}],"urls":["https://github.com/vim/vim/commit/4875d6ab068f09df88d24d81de40dcd8d56e243d","https://huntr.dev/bounties/95f97dfe-247d-475d-9740-b7adc71f4c79","https://security.gentoo.org/glsa/202305-16"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-2874","description":"NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0224."}]},{"artifact":{"id":"1c27b1fc065b3d30","cpes":["cpe:2.3:a:python3-pip-wheel:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip-wheel:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip_wheel:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip_wheel:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*"],"name":"python3-pip-wheel","purl":"pkg:rpm/redhat/python3-pip-wheel@21.3.1-2.el9_8?arch=noarch&distro=rhel-9.8&upstream=python-pip-21.3.1-2.el9_8.src.rpm","type":"rpm","version":"21.3.1-2.el9_8","language":"","licenses":["MIT and Python and ASL 2.0 and BSD and ISC and LGPLv2 and MPLv2.0 and (ASL 2.0 or BSD)"],"metadata":{"epoch":null,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python-pip","version":"21.3.1-2.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-50182","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"python-pip","version":"21.3.1-2.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-50182","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-50182","cwe":"CWE-601","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-50182","date":"2026-10-10","epss":0.00393,"percentile":0.31447}],"risk":0.202395,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-50182","description":"A flaw was found in urllib3. The library fails to properly validate redirect URLs, allowing an attacker to manipulate redirect chains when used in environments like Pyodide utilizing the JavaScript Fetch API. This lack of validation can enable a remote attacker to control the redirect destination, leading to arbitrary URL redirection. Consequently, an attacker can redirect users to malicious websites. This \nvulnerability stems from a failure to constrain the redirect target."},"relatedVulnerabilities":[{"id":"CVE-2025-50182","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-50182","cwe":"CWE-601","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-50182","date":"2026-10-10","epss":0.00393,"percentile":0.31447}],"urls":["https://github.com/urllib3/urllib3/commit/7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f","https://github.com/urllib3/urllib3/releases/tag/2.5.0","https://github.com/urllib3/urllib3/security/advisories/GHSA-48p4-8xcf-vxj5"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-50182","description":"urllib3 is a user-friendly HTTP client library for Python. Starting in version 2.2.0 and prior to 2.5.0, urllib3 does not control redirects in browsers and Node.js. urllib3 supports being used in a Pyodide runtime utilizing the JavaScript Fetch API or falling back on XMLHttpRequest. This means Python libraries can be used to make HTTP requests from a browser or Node.js. Additionally, urllib3 provides a mechanism to control redirects, but the retries and redirect parameters are ignored with Pyodide; the runtime itself determines redirect behavior. This issue has been patched in version 2.5.0."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-4293","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-4293","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-4293","cwe":"CWE-1077","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-4293","cwe":"CWE-697","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-4293","date":"2026-10-10","epss":0.00476,"percentile":0.39248}],"risk":0.20230000000000004,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-4293","description":"A floating point exception flaw was found in Vim's num_divide() function of the eval.c file. This issue occurs when dividing the largest negative number by -1. This could allow an attacker to trick a user into opening a specially crafted file, triggering an application to crash and leading to a denial of service."},"relatedVulnerabilities":[{"id":"CVE-2022-4293","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","metrics":{"baseScore":6.8,"impactScore":4.3,"exploitabilityScore":2.6},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-4293","cwe":"CWE-1077","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-4293","cwe":"CWE-697","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-4293","date":"2026-10-10","epss":0.00476,"percentile":0.39248}],"urls":["https://github.com/vim/vim/commit/cdef1cefa2a440911c727558562f83ed9b00e16b","https://huntr.dev/bounties/385a835f-6e33-4d00-acce-ac99f3939143","https://security.gentoo.org/glsa/202305-16","https://security.netapp.com/advisory/ntap-20230203-0007/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-4293","description":"Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-2609","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2023-2609","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-2609","cwe":"CWE-476","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2023-2609","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-2609","date":"2026-10-10","epss":0.00471,"percentile":0.389}],"risk":0.200175,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-2609","description":"NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1531."},"relatedVulnerabilities":[{"id":"CVE-2023-2609","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-2609","cwe":"CWE-476","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2023-2609","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-2609","date":"2026-10-10","epss":0.00471,"percentile":0.389}],"urls":["https://github.com/vim/vim/commit/d1ae8366aff286d41e7f5bc513cc0a1af5130aad","https://huntr.dev/bounties/1679be5a-565f-4a44-a430-836412a0b622","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PCLJN4QINITA3ZASKLEJ64C5TFNKELMO/","https://support.apple.com/kb/HT213844","https://support.apple.com/kb/HT213845"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-2609","description":"NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1531."}]},{"artifact":{"id":"406b3abfffe1d292","cpes":["cpe:2.3:a:git-lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git-lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*"],"name":"git-lfs","purl":"pkg:rpm/redhat/git-lfs@3.7.1-4.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=git-lfs-3.7.1-4.el9_8.3.src.rpm","type":"rpm","version":"3.7.1-4.el9_8.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-22870","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"git-lfs","version":"0:3.7.1-4.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-22870","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","metrics":{"baseScore":4.4,"impactScore":2.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-22870","cwe":"CWE-115","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-22870","date":"2026-10-10","epss":0.00425,"percentile":0.34828}],"risk":0.19975,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-22870","description":"A flaw was found in proxy host matching. This vulnerability allows improper bypassing of proxy settings via manipulating an IPv6 zone ID, causing unintended matches against the NO_PROXY environment variable."},"relatedVulnerabilities":[{"id":"CVE-2025-22870","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","metrics":{"baseScore":4.4,"impactScore":2.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-22870","cwe":"CWE-115","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-22870","date":"2026-10-10","epss":0.00425,"percentile":0.34828}],"urls":["https://go.dev/cl/654697","https://go.dev/issue/71984","https://groups.google.com/g/golang-announce/c/4t3lzH3I0eI/m/b42ImqrBAQAJ","https://pkg.go.dev/vuln/GO-2025-3503","http://www.openwall.com/lists/oss-security/2025/03/07/2","https://security.netapp.com/advisory/ntap-20250509-0007/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-22870","description":"Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to \"*.example.com\", a request to \"[::1%25.example.com]:80` will incorrectly match and not be proxied."}]},{"artifact":{"id":"73ec63868795f316","cpes":["cpe:2.3:a:openssl:openssl:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:rpm/redhat/openssl@3.5.8-1.el9_8?arch=x86_64&distro=rhel-9.8&epoch=1&upstream=openssl-3.5.8-1.el9_8.src.rpm","type":"rpm","version":"1:3.5.8-1.el9_8","language":"","licenses":["Apache-2.0"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-75806","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"openssl","version":"1:3.5.8-1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-75806","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75806","cwe":"CWE-1284","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-75806","date":"2026-10-10","epss":0.00387,"percentile":0.30727}],"risk":0.199305,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-75806","description":"A flaw was found in OpenSSL. A remote, unauthenticated attacker can cause a Denial of Service (DoS) by terminating an active Datagram Transport Layer Security (DTLS) session. By sending an undersized network packet that is shorter than the expected cryptographic overhead, the record processing layer fails to validate the packet length and misinterprets the packet as an internal error rather than an authentication failure. This improper handling triggers a fatal alert that unexpectedly closes the targeted connection without requiring valid encryption keys."},"relatedVulnerabilities":[{"id":"CVE-2026-75806","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75806","cwe":"CWE-1284","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-75806","date":"2026-10-10","epss":0.00387,"percentile":0.30727}],"urls":["https://github.com/openssl/openssl/commit/04728a289a823e68137f88da016cb9ede307217d","https://github.com/openssl/openssl/commit/050b275cd671a6eed1d6457642d41a5a77aab972","https://github.com/openssl/openssl/commit/3a4589d015a9049d47b66f186cf50a8711343a1d","https://github.com/openssl/openssl/commit/5af82fefbaf2b5fec2fc0e1d87f112844902f01d","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-75806","description":"Issue summary: An established DTLS 1.2 association using an AEAD cipher suite\ncan be terminated by a single unauthenticated datagram whose encrypted\nfragment is shorter than the mandatory explicit IV and authentication tag\noverhead.\n\nImpact summary: An attacker who can send a datagram that is routed to an\nexisting DTLS 1.2 association can tear that association down without knowing\nany key material. This is a Denial of Service limited to the targeted\nassociation. There is no memory safety or confidentiality impact.\n\nCWE: CWE-1284: Improper Validation of Specified Quantity in Input\n\nDescription: In TLS 1.2 and DTLS 1.2 every record protected by an AEAD cipher\nsuite carries an explicit IV followed by the ciphertext and an authentication\ntag. When decrypting such a record the record layer passed the record length to\nthe cipher implementation before checking that the record was long enough to\ncontain the explicit IV and the tag. For a record shorter than that overhead the\ncipher implementation rejected the impossible length, and the record layer\ntreated this as an internal failure and raised a fatal internal_error alert\ninstead of treating the record as one that failed authentication.\n\nIn TLS 1.2 the same record causes a fatal internal_error alert instead of the\nexpected bad_record_mac alert. Since any undecryptable record already\nterminates a TLS connection, this is a protocol conformance issue rather than\na security issue in TLS.\n\nThe fix validates the record length against the explicit IV and tag length\nbefore any AEAD processing, so that TLS reports bad_record_mac and DTLS\nsilently discards the record.\n\nFIPS impact: no\nThe affected code is outside the FIPS module boundary."}]},{"artifact":{"id":"753337be7fe19d16","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/redhat/openssl-libs@3.5.8-1.el9_8?arch=x86_64&distro=rhel-9.8&epoch=1&upstream=openssl-3.5.8-1.el9_8.src.rpm","type":"rpm","version":"1:3.5.8-1.el9_8","language":"","licenses":["Apache-2.0"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"3.5.8-1.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-75806","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"openssl","version":"3.5.8-1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-75806","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75806","cwe":"CWE-1284","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-75806","date":"2026-10-10","epss":0.00387,"percentile":0.30727}],"risk":0.199305,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-75806","description":"A flaw was found in OpenSSL. A remote, unauthenticated attacker can cause a Denial of Service (DoS) by terminating an active Datagram Transport Layer Security (DTLS) session. By sending an undersized network packet that is shorter than the expected cryptographic overhead, the record processing layer fails to validate the packet length and misinterprets the packet as an internal error rather than an authentication failure. This improper handling triggers a fatal alert that unexpectedly closes the targeted connection without requiring valid encryption keys."},"relatedVulnerabilities":[{"id":"CVE-2026-75806","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75806","cwe":"CWE-1284","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-75806","date":"2026-10-10","epss":0.00387,"percentile":0.30727}],"urls":["https://github.com/openssl/openssl/commit/04728a289a823e68137f88da016cb9ede307217d","https://github.com/openssl/openssl/commit/050b275cd671a6eed1d6457642d41a5a77aab972","https://github.com/openssl/openssl/commit/3a4589d015a9049d47b66f186cf50a8711343a1d","https://github.com/openssl/openssl/commit/5af82fefbaf2b5fec2fc0e1d87f112844902f01d","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-75806","description":"Issue summary: An established DTLS 1.2 association using an AEAD cipher suite\ncan be terminated by a single unauthenticated datagram whose encrypted\nfragment is shorter than the mandatory explicit IV and authentication tag\noverhead.\n\nImpact summary: An attacker who can send a datagram that is routed to an\nexisting DTLS 1.2 association can tear that association down without knowing\nany key material. This is a Denial of Service limited to the targeted\nassociation. There is no memory safety or confidentiality impact.\n\nCWE: CWE-1284: Improper Validation of Specified Quantity in Input\n\nDescription: In TLS 1.2 and DTLS 1.2 every record protected by an AEAD cipher\nsuite carries an explicit IV followed by the ciphertext and an authentication\ntag. When decrypting such a record the record layer passed the record length to\nthe cipher implementation before checking that the record was long enough to\ncontain the explicit IV and the tag. For a record shorter than that overhead the\ncipher implementation rejected the impossible length, and the record layer\ntreated this as an internal failure and raised a fatal internal_error alert\ninstead of treating the record as one that failed authentication.\n\nIn TLS 1.2 the same record causes a fatal internal_error alert instead of the\nexpected bad_record_mac alert. Since any undecryptable record already\nterminates a TLS connection, this is a protocol conformance issue rather than\na security issue in TLS.\n\nThe fix validates the record length against the explicit IV and tag length\nbefore any AEAD processing, so that TLS reports bad_record_mac and DTLS\nsilently discards the record.\n\nFIPS impact: no\nThe affected code is outside the FIPS module boundary."}]},{"artifact":{"id":"9eebaea2eda844dd","cpes":["cpe:2.3:a:curl-minimal:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl-minimal:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl_minimal:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl_minimal:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*"],"name":"curl-minimal","purl":"pkg:rpm/redhat/curl-minimal@7.76.1-40.el9_8.7?arch=x86_64&distro=rhel-9.8&upstream=curl-7.76.1-40.el9_8.7.src.rpm","type":"rpm","version":"7.76.1-40.el9_8.7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.76.1-40.el9_8.7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-18924","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"curl","version":"7.76.1-40.el9_8.7"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-18924","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-18924","cwe":"CWE-416","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-18924","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-18924","date":"2026-10-10","epss":0.00584,"percentile":0.46323}],"risk":0.19563999999999995,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-18924","description":"A flaw was found in libcurl. When libcurl handles HTTP/2 Server Push streams and the parent handle shares connections, a use-after-free vulnerability can occur during the cleanup process. This could lead to application crashes, resulting in a denial of service."},"relatedVulnerabilities":[{"id":"CVE-2026-18924","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-18924","cwe":"CWE-416","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-18924","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-18924","date":"2026-10-10","epss":0.00584,"percentile":0.46323}],"urls":["https://curl.se/docs/CVE-2026-18924.html","https://curl.se/docs/CVE-2026-18924.json","https://hackerone.com/reports/3916059"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-18924","description":"A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent\nhandle is set to share connections with other handles, can lead to\nuse-after-free in the cleanup process."}]},{"artifact":{"id":"b685606a6baf0f79","cpes":["cpe:2.3:a:libcurl-minimal:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl-minimal:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl_minimal:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl_minimal:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*"],"name":"libcurl-minimal","purl":"pkg:rpm/redhat/libcurl-minimal@7.76.1-40.el9_8.7?arch=x86_64&distro=rhel-9.8&upstream=curl-7.76.1-40.el9_8.7.src.rpm","type":"rpm","version":"7.76.1-40.el9_8.7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.76.1-40.el9_8.7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-18924","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"curl","version":"7.76.1-40.el9_8.7"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-18924","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-18924","cwe":"CWE-416","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-18924","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-18924","date":"2026-10-10","epss":0.00584,"percentile":0.46323}],"risk":0.19563999999999995,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-18924","description":"A flaw was found in libcurl. When libcurl handles HTTP/2 Server Push streams and the parent handle shares connections, a use-after-free vulnerability can occur during the cleanup process. This could lead to application crashes, resulting in a denial of service."},"relatedVulnerabilities":[{"id":"CVE-2026-18924","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-18924","cwe":"CWE-416","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-18924","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-18924","date":"2026-10-10","epss":0.00584,"percentile":0.46323}],"urls":["https://curl.se/docs/CVE-2026-18924.html","https://curl.se/docs/CVE-2026-18924.json","https://hackerone.com/reports/3916059"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-18924","description":"A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent\nhandle is set to share connections with other handles, can lead to\nuse-after-free in the cleanup process."}]},{"artifact":{"id":"c0b424c4c915f6c5","cpes":["cpe:2.3:a:redhat:tar:2\\:1.34-13.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:tar:tar:2\\:1.34-13.el9_8:*:*:*:*:*:*:*"],"name":"tar","purl":"pkg:rpm/redhat/tar@1.34-13.el9_8?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=tar-1.34-13.el9_8.src.rpm","type":"rpm","version":"2:1.34-13.el9_8","language":"","licenses":["GPLv3+"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-33056","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"tar","version":"2:1.34-13.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-33056","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.4,"impactScore":2.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-33056","cwe":"CWE-61","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-33056","date":"2026-10-10","epss":0.00415,"percentile":0.33881}],"risk":0.19505000000000003,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-33056","description":"A flaw was found in tar-rs, a Rust library for reading and writing tar archives. When unpacking a crafted tar archive, an attacker can exploit a symbolic link vulnerability. By including a symlink followed by a directory with the same name, the library incorrectly applies file permissions to the symlink's target. This allows an attacker to modify the permissions of arbitrary directories outside the intended extraction location."},"relatedVulnerabilities":[{"id":"CVE-2026-33056","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-33056","cwe":"CWE-61","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-33056","date":"2026-10-10","epss":0.00415,"percentile":0.33881}],"urls":["https://github.com/alexcrichton/tar-rs/commit/17b1fd84e632071cb8eef9d3709bf347bd266446","https://github.com/alexcrichton/tar-rs/security/advisories/GHSA-j4xf-2g29-59ph"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-33056","description":"tar-rs is a tar archive reading/writing library for Rust. In versions 0.4.44 and below, when unpacking a tar archive, the tar crate's unpack_dir function uses fs::metadata() to check whether a path that already exists is a directory. Because fs::metadata() follows symbolic links, a crafted tarball containing a symlink entry followed by a directory entry with the same name causes the crate to treat the symlink target as a valid existing directory — and subsequently apply chmod to it. This allows an attacker to modify the permissions of arbitrary directories outside the extraction root. This issue has been fixed in version 0.4.45."}]},{"artifact":{"id":"2b5bc20e81b1f7ae","cpes":["cpe:2.3:a:redhat:unzip:6.0-60.el9:*:*:*:*:*:*:*","cpe:2.3:a:unzip:unzip:6.0-60.el9:*:*:*:*:*:*:*"],"name":"unzip","purl":"pkg:rpm/redhat/unzip@6.0-60.el9?arch=x86_64&distro=rhel-9.8&upstream=unzip-6.0-60.el9.src.rpm","type":"rpm","version":"6.0-60.el9","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2021-4217","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"unzip","version":"0:6.0-60.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2021-4217","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-4217","cwe":"CWE-476","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2021-4217","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-4217","date":"2026-10-10","epss":0.00616,"percentile":0.4796}],"risk":0.19403999999999996,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-4217","description":"A flaw was found in unzip.  The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution."},"relatedVulnerabilities":[{"id":"CVE-2021-4217","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-4217","cwe":"CWE-476","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2021-4217","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-4217","date":"2026-10-10","epss":0.00616,"percentile":0.4796}],"urls":["https://access.redhat.com/security/cve/CVE-2021-4217","https://bugs.launchpad.net/ubuntu/+source/unzip/+bug/1957077","https://bugzilla.redhat.com/show_bug.cgi?id=2044583"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-4217","description":"A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-2610","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2023-2610","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-2610","cwe":"CWE-190","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2023-2610","date":"2026-10-10","epss":0.00455,"percentile":0.37545}],"risk":0.19337500000000005,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-2610","description":"Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1532."},"relatedVulnerabilities":[{"id":"CVE-2023-2610","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-2610","cwe":"CWE-190","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2023-2610","date":"2026-10-10","epss":0.00455,"percentile":0.37545}],"urls":["https://github.com/vim/vim/commit/ab9a2d884b3a4abe319606ea95a5a6d6b01cd73a","https://huntr.dev/bounties/31e67340-935b-4f6c-a923-f7246bc29c7d","https://lists.debian.org/debian-lts-announce/2023/06/msg00015.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PCLJN4QINITA3ZASKLEJ64C5TFNKELMO/","https://support.apple.com/kb/HT213844","https://support.apple.com/kb/HT213845","https://lists.debian.org/debian-lts-announce/2025/03/msg00023.html","https://security.netapp.com/advisory/ntap-20241129-0006/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-2610","description":"Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1532."}]},{"artifact":{"id":"cfb83fcea89d51fa","cpes":["cpe:2.3:a:redhat:glib2:2.68.4-19.el9_8.10:*:*:*:*:*:*:*","cpe:2.3:a:glib2:glib2:2.68.4-19.el9_8.10:*:*:*:*:*:*:*"],"name":"glib2","purl":"pkg:rpm/redhat/glib2@2.68.4-19.el9_8.10?arch=x86_64&distro=rhel-9.8&upstream=glib2-2.68.4-19.el9_8.10.src.rpm","type":"rpm","version":"2.68.4-19.el9_8.10","language":"","licenses":["LGPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-1489","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"glib2","version":"0:2.68.4-19.el9_8.10"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-1489","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-1489","cwe":"CWE-787","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-1489","date":"2026-10-10","epss":0.00371,"percentile":0.29088}],"risk":0.19292000000000004,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-1489","description":"A flaw was found in GLib. An integer overflow vulnerability in its Unicode case conversion implementation can lead to memory corruption. By processing specially crafted and extremely large Unicode strings, an attacker could trigger an undersized memory allocation, resulting in out-of-bounds writes. This could cause applications utilizing GLib for string conversion to crash or become unstable."},"relatedVulnerabilities":[{"id":"CVE-2026-1489","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-1489","cwe":"CWE-787","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-1489","date":"2026-10-10","epss":0.00371,"percentile":0.29088}],"urls":["https://access.redhat.com/security/cve/CVE-2026-1489","https://bugzilla.redhat.com/show_bug.cgi?id=2433348","https://gitlab.gnome.org/GNOME/glib/-/issues/3872","https://cert-portal.siemens.com/productcert/html/ssa-253495.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-1489","description":"A flaw was found in GLib. An integer overflow vulnerability in its Unicode case conversion implementation can lead to memory corruption. By processing specially crafted and extremely large Unicode strings, an attacker could trigger an undersized memory allocation, resulting in out-of-bounds writes. This could cause applications utilizing GLib for string conversion to crash or become unstable."}]},{"artifact":{"id":"7e771fcfcd9c8405","cpes":["cpe:2.3:a:perl-Socket:perl-Socket:4\\:2.031-4.el9:*:*:*:*:*:*:*","cpe:2.3:a:perl-Socket:perl_Socket:4\\:2.031-4.el9:*:*:*:*:*:*:*","cpe:2.3:a:perl_Socket:perl-Socket:4\\:2.031-4.el9:*:*:*:*:*:*:*","cpe:2.3:a:perl_Socket:perl_Socket:4\\:2.031-4.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-Socket:4\\:2.031-4.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_Socket:4\\:2.031-4.el9:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-Socket:4\\:2.031-4.el9:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_Socket:4\\:2.031-4.el9:*:*:*:*:*:*:*"],"name":"perl-Socket","purl":"pkg:rpm/redhat/perl-Socket@2.031-4.el9?arch=x86_64&distro=rhel-9.8&epoch=4&upstream=perl-Socket-2.031-4.el9.src.rpm","type":"rpm","version":"4:2.031-4.el9","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":4,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-12087","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl-Socket","version":"4:2.031-4.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-12087","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-12087","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-12087","cwe":"CWE-805","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-12087","date":"2026-10-10","epss":0.00374,"percentile":0.29369}],"risk":0.19261,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-12087","description":"A flaw was found in the `perl-Socket` component. The `pack_ip_mreq_source()` function, which handles network socket operations, contains an out-of-bounds heap read vulnerability. An attacker providing a specially crafted input can cause the system to read beyond the intended memory buffer, potentially leading to information disclosure from adjacent memory regions."},"relatedVulnerabilities":[{"id":"CVE-2026-12087","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-12087","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-12087","cwe":"CWE-805","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-12087","date":"2026-10-10","epss":0.00374,"percentile":0.29369}],"urls":["https://github.com/Perl/perl5/commit/de19a0b0ad1900fef976c5c1400bd8f11ec6c6cb.patch","https://metacpan.org/release/PEVANS/Socket-2.041/changes","http://www.openwall.com/lists/oss-security/2026/06/15/10"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-12087","description":"Socket versions before 2.041 for Perl have an out-of-bounds heap read.\n\nIn Socket.xs, pack_ip_mreq_source() checks the length of its source argument before the argument is read, so the check tests the byte length carried over from the preceding multiaddr argument instead. Both addresses occupy a 4-byte field, so a valid multiaddr lets a source of any length pass the check, and the source is then copied into the 4-byte imr_sourceaddr field with a fixed-size copy. A source shorter than 4 bytes is not rejected, and the copy reads up to 3 bytes past the end of its buffer.\n\nCalling pack_ip_mreq_source() with a source value shorter than 4 bytes copies adjacent heap memory into the returned packed structure."}]},{"artifact":{"id":"ea0f2a7e0eb5d962","cpes":["cpe:2.3:a:python3:python3:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3:3.9.25-7.el9_8.3:*:*:*:*:*:*:*"],"name":"python3","purl":"pkg:rpm/redhat/python3@3.9.25-7.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=python3.9-3.9.25-7.el9_8.3.src.rpm","type":"rpm","version":"3.9.25-7.el9_8.3","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python3.9","version":"3.9.25-7.el9_8.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1795","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"python3.9","version":"3.9.25-7.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-1795","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1795","cwe":"CWE-116","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-1795","date":"2026-10-10","epss":0.00628,"percentile":0.48549}],"risk":0.19154000000000002,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-1795","description":"A flaw was found in Python. When a separating comma ends up on a folded line during an address list folding of email headers, the comma is unintentionally unicode encoded. The expected behavior is that the separating comma remains unencoded. This can result in the address header being misinterpreted by some mail servers."},"relatedVulnerabilities":[{"id":"CVE-2025-1795","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1795","cwe":"CWE-116","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-1795","date":"2026-10-10","epss":0.00628,"percentile":0.48549}],"urls":["https://github.com/python/cpython/commit/09fab93c3d857496c0bd162797fab816c311ee48","https://github.com/python/cpython/commit/70754d21c288535e86070ca7a6e90dcb670b8593","https://github.com/python/cpython/commit/9148b77e0af91cdacaa7fe3dfac09635c3fe9a74","https://github.com/python/cpython/commit/a4ef689ce670684ec132204b1cd03720c8e0a03d","https://github.com/python/cpython/commit/d4df3c55e4c5513947f907f24766b34d2ae8c090","https://github.com/python/cpython/issues/100884","https://github.com/python/cpython/pull/100885","https://github.com/python/cpython/pull/119099","https://mail.python.org/archives/list/security-announce@python.org/thread/MB62IZMEC3UM6SGHP5LET5JX2Y7H4ZUR/","https://lists.debian.org/debian-lts-announce/2025/03/msg00013.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1795","description":"During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the separating comma remains a plan comma. This can result in the address header being misinterpreted by some mail servers."}]},{"artifact":{"id":"0ed3c72bb9ee9391","cpes":["cpe:2.3:a:python3-libs:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3-libs:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3_libs:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3_libs:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*"],"name":"python3-libs","purl":"pkg:rpm/redhat/python3-libs@3.9.25-7.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=python3.9-3.9.25-7.el9_8.3.src.rpm","type":"rpm","version":"3.9.25-7.el9_8.3","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python3.9","version":"3.9.25-7.el9_8.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1795","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"python3.9","version":"3.9.25-7.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-1795","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1795","cwe":"CWE-116","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-1795","date":"2026-10-10","epss":0.00628,"percentile":0.48549}],"risk":0.19154000000000002,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-1795","description":"A flaw was found in Python. When a separating comma ends up on a folded line during an address list folding of email headers, the comma is unintentionally unicode encoded. The expected behavior is that the separating comma remains unencoded. This can result in the address header being misinterpreted by some mail servers."},"relatedVulnerabilities":[{"id":"CVE-2025-1795","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1795","cwe":"CWE-116","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-1795","date":"2026-10-10","epss":0.00628,"percentile":0.48549}],"urls":["https://github.com/python/cpython/commit/09fab93c3d857496c0bd162797fab816c311ee48","https://github.com/python/cpython/commit/70754d21c288535e86070ca7a6e90dcb670b8593","https://github.com/python/cpython/commit/9148b77e0af91cdacaa7fe3dfac09635c3fe9a74","https://github.com/python/cpython/commit/a4ef689ce670684ec132204b1cd03720c8e0a03d","https://github.com/python/cpython/commit/d4df3c55e4c5513947f907f24766b34d2ae8c090","https://github.com/python/cpython/issues/100884","https://github.com/python/cpython/pull/100885","https://github.com/python/cpython/pull/119099","https://mail.python.org/archives/list/security-announce@python.org/thread/MB62IZMEC3UM6SGHP5LET5JX2Y7H4ZUR/","https://lists.debian.org/debian-lts-announce/2025/03/msg00013.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1795","description":"During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the separating comma remains a plan comma. This can result in the address header being misinterpreted by some mail servers."}]},{"artifact":{"id":"b900134ce800c270","cpes":["cpe:2.3:a:redhat:expat:2.5.0-6.el9_8.5:*:*:*:*:*:*:*","cpe:2.3:a:expat:expat:2.5.0-6.el9_8.5:*:*:*:*:*:*:*"],"name":"expat","purl":"pkg:rpm/redhat/expat@2.5.0-6.el9_8.5?arch=x86_64&distro=rhel-9.8&upstream=expat-2.5.0-6.el9_8.5.src.rpm","type":"rpm","version":"2.5.0-6.el9_8.5","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-102633","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"expat","version":"0:2.5.0-6.el9_8.5"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-102633","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102633","cwe":"CWE-190","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-102633","date":"2026-10-10","epss":0.00348,"percentile":0.26423}],"risk":0.18966000000000002,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-102633","description":"A flaw was found in expat. On 32-bit systems, an integer overflow occurs within the expat_realloc memory allocation function when calculating buffer sizes. A remote attacker can exploit this vulnerability by supplying specially crafted XML input to an application that processes data with the library. Successful exploitation can lead to a Denial of Service (DoS) or memory corruption."},"relatedVulnerabilities":[{"id":"CVE-2026-102633","cvss":[{"type":"Primary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102633","cwe":"CWE-190","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-102633","date":"2026-10-10","epss":0.00348,"percentile":0.26423}],"urls":["https://github.com/libexpat/libexpat","https://github.com/libexpat/libexpat/blob/R_2_8_5/expat/lib/xmlparse.c#L1003","https://github.com/libexpat/libexpat/commit/209801d7fbaf07ab74bae8cb32dd2ab9e5846118","https://github.com/libexpat/libexpat/pull/1392","https://www.vulncheck.com/advisories/libexpat-2.7.2-through-2.8.5-integer-overflow-in-expat-realloc"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102633","description":"libexpat versions 2.7.2 through 2.8.5 contain an integer overflow vulnerability in expat_realloc() function on 32-bit platforms when computing allocation sizes. Attackers supplying malicious XML to applications parsing with vulnerable libexpat can cause heap buffer overflow, memory corruption, or denial of service."}]},{"artifact":{"id":"f5eb0651fec88df5","cpes":["cpe:2.3:a:com.fasterxml.jackson.core:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.20.1:*:*:*:*:*:*:*"],"name":"jackson-databind","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1","type":"java-archive","version":"2.20.1","language":"java","licenses":["The Apache Software License, Version 2.0"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/opt/jenkins-plugin-manager.jar:com.fasterxml.jackson.core:jackson-databind","manifestName":"","pomArtifactID":"jackson-databind","archiveDigests":null},"locations":[{"path":"/opt/jenkins-plugin-manager.jar","layerID":"sha256:1303dd889187d7e25ac68bf0fb8d636f5a922b6753d092bcae3924d569cb869a","accessPath":"/opt/jenkins-plugin-manager.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.21.4"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-hgj6-7826-r7m5","versionConstraint":">=2.19.0,<2.21.4 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-databind","version":"2.20.1"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-hgj6-7826-r7m5","fix":{"state":"fixed","versions":["2.21.4"],"available":[{"date":"2026-06-24","kind":"first-observed","version":"2.21.4"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54514","cwe":"CWE-918","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-54514","date":"2026-10-10","epss":0.00368,"percentile":0.28653}],"risk":0.18952000000000002,"urls":["https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-hgj6-7826-r7m5","https://github.com/FasterXML/jackson-databind/pull/5951","https://github.com/FasterXML/jackson-databind/commit/1f5a1037b1e9e05920e755cb35f198bcd46667e4","https://nvd.nist.gov/vuln/detail/CVE-2026-54514"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-hgj6-7826-r7m5","description":"jackson-databind: InetSocketAddress deserialization triggers eager DNS resolution (SSRF)"},"relatedVulnerabilities":[{"id":"CVE-2026-54514","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54514","cwe":"CWE-918","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-54514","date":"2026-10-10","epss":0.00368,"percentile":0.28653}],"urls":["https://github.com/FasterXML/jackson-databind/commit/1f5a1037b1e9e05920e755cb35f198bcd46667e4","https://github.com/FasterXML/jackson-databind/pull/5951","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-hgj6-7826-r7m5"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-54514","description":"jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.0.0 until 2.18.8, 2.21.4, and 3.1.4, JDKFromStringDeserializer constructed InetSocketAddress with new InetSocketAddress(host, port), which performs eager DNS name resolution for hostname inputs at deserialization time. An application that binds untrusted JSON into a type containing an InetSocketAddress field issues an attacker-chosen DNS query during readValue, before any application-level validation or connect logic. The fix uses InetSocketAddress.createUnresolved(host, port), deferring DNS to an explicit connect. This vulnerability is fixed in 2.18.8, 2.21.4, and 3.1.4."}]},{"artifact":{"id":"ae70236653f56261","cpes":["cpe:2.3:a:redhat:gawk:5.1.0-6.el9_8.1:*:*:*:*:*:*:*","cpe:2.3:a:gawk:gawk:5.1.0-6.el9_8.1:*:*:*:*:*:*:*"],"name":"gawk","purl":"pkg:rpm/redhat/gawk@5.1.0-6.el9_8.1?arch=x86_64&distro=rhel-9.8&upstream=gawk-5.1.0-6.el9_8.1.src.rpm","type":"rpm","version":"5.1.0-6.el9_8.1","language":"","licenses":["GPLv3+ and GPLv2+ and LGPLv2+ and BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-4156","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"gawk","version":"0:5.1.0-6.el9_8.1"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2023-4156","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-4156","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-4156","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4156","date":"2026-10-10","epss":0.00415,"percentile":0.33868}],"risk":0.188825,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-4156","description":"A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could be used to read sensitive information."},"relatedVulnerabilities":[{"id":"CVE-2023-4156","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":5.2,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","metrics":{"baseScore":4.4,"impactScore":2.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-4156","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-4156","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4156","date":"2026-10-10","epss":0.00415,"percentile":0.33868}],"urls":["https://access.redhat.com/security/cve/CVE-2023-4156","https://bugzilla.redhat.com/show_bug.cgi?id=2215930"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-4156","description":"A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could be used to read sensitive information."}]},{"artifact":{"id":"2ac7f6262c1f6abe","cpes":["cpe:2.3:a:gdb-gdbserver:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb-gdbserver:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb_gdbserver:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb_gdbserver:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*"],"name":"gdb-gdbserver","purl":"pkg:rpm/redhat/gdb-gdbserver@16.3-3.1.el9_8?arch=x86_64&distro=rhel-9.8&upstream=gdb-16.3-3.1.el9_8.src.rpm","type":"rpm","version":"16.3-3.1.el9_8","language":"","licenses":["GPL-3.0-or-later AND BSD-3-Clause AND FSFAP AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain AND GFDL-1.3-or-later AND LGPL-2.0-or-later WITH GCC-exception-2.0 AND GPL-3.0-or-later WITH GCC-exception-3.1 AND GPL-2.0-or-later WITH GNU-compiler-exception AND MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"gdb","version":"16.3-3.1.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1152","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"gdb","version":"16.3-3.1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-1152","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1152","cwe":"CWE-401","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1152","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1152","cwe":"CWE-401","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-1152","date":"2026-10-10","epss":0.00616,"percentile":0.47989}],"risk":0.18788,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-1152","description":"A flaw was found in the ld linker utility of GNU Binutils. A specially-crafted payload may be able to trigger a memory leak, which can lead to an application crash or other undefined behavior."},"relatedVulnerabilities":[{"id":"CVE-2025-1152","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","metrics":{"baseScore":2.6,"impactScore":2.9,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1152","cwe":"CWE-401","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1152","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1152","cwe":"CWE-401","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-1152","date":"2026-10-10","epss":0.00616,"percentile":0.47989}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15887","https://sourceware.org/bugzilla/show_bug.cgi?id=32576","https://vuldb.com/?ctiid.295056","https://vuldb.com/?id.295056","https://www.gnu.org/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1152","description":"A vulnerability classified as problematic has been found in GNU Binutils 2.43. Affected is the function xstrdup of the file xstrdup.c of the component ld. The manipulation leads to memory leak. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The code maintainer explains: \"I'm not going to commit some of the leak fixes I've been working on to the 2.44 branch due to concern that would destabilise ld. All of the reported leaks in this bugzilla have been fixed on binutils master.\""}]},{"artifact":{"id":"2ac7f6262c1f6abe","cpes":["cpe:2.3:a:gdb-gdbserver:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb-gdbserver:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb_gdbserver:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb_gdbserver:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*"],"name":"gdb-gdbserver","purl":"pkg:rpm/redhat/gdb-gdbserver@16.3-3.1.el9_8?arch=x86_64&distro=rhel-9.8&upstream=gdb-16.3-3.1.el9_8.src.rpm","type":"rpm","version":"16.3-3.1.el9_8","language":"","licenses":["GPL-3.0-or-later AND BSD-3-Clause AND FSFAP AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain AND GFDL-1.3-or-later AND LGPL-2.0-or-later WITH GCC-exception-2.0 AND GPL-3.0-or-later WITH GCC-exception-3.1 AND GPL-2.0-or-later WITH GNU-compiler-exception AND MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"gdb","version":"16.3-3.1.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1150","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"gdb","version":"16.3-3.1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-1150","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1150","cwe":"CWE-401","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1150","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1150","cwe":"CWE-401","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-1150","date":"2026-10-10","epss":0.00612,"percentile":0.47775}],"risk":0.18665999999999996,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-1150","description":"A flaw was found in the ld linker utility of GNU Binutils. A specially-crafted payload may be able to trigger a memory leak, which can lead to an application crash or other undefined behavior."},"relatedVulnerabilities":[{"id":"CVE-2025-1150","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","metrics":{"baseScore":2.6,"impactScore":2.9,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1150","cwe":"CWE-401","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1150","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1150","cwe":"CWE-401","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-1150","date":"2026-10-10","epss":0.00612,"percentile":0.47775}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15887","https://sourceware.org/bugzilla/show_bug.cgi?id=32576","https://vuldb.com/?ctiid.295054","https://vuldb.com/?id.295054","https://www.gnu.org/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1150","description":"A vulnerability was found in GNU Binutils 2.43. It has been declared as problematic. This vulnerability affects the function bfd_malloc of the file libbfd.c of the component ld. The manipulation leads to memory leak. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The code maintainer explains: \"I'm not going to commit some of the leak fixes I've been working on to the 2.44 branch due to concern that would destabilise ld. All of the reported leaks in this bugzilla have been fixed on binutils master.\""}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-1175","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2023-1175","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.3,"impactScore":3.4,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-1175","cwe":"CWE-131","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2023-1175","date":"2026-10-10","epss":0.00448,"percentile":0.37052}],"risk":0.18592,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-1175","description":"A flaw was found in Vim. There is an incorrect calculation of buffer size issue found in Vim's yank_copy_line() function of the register.c file. This flaw allows illegal memory access when using virtual editing as \"startspaces\" goes negative. An attacker can trick a user into opening a specially crafted file, triggering an issue that causes an application to crash leading to a denial of service, corrupting memory, and possibly executing code."},"relatedVulnerabilities":[{"id":"CVE-2023-1175","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","metrics":{"baseScore":6.6,"impactScore":4.8,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.3,"impactScore":5.9,"exploitabilityScore":1.4},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-1175","cwe":"CWE-131","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2023-1175","date":"2026-10-10","epss":0.00448,"percentile":0.37052}],"urls":["https://github.com/vim/vim/commit/c99cbf8f289bdda5d4a77d7ec415850a520330ba","https://huntr.dev/bounties/7e93fc17-92eb-4ae7-b01a-93bb460b643e","https://lists.debian.org/debian-lts-announce/2023/06/msg00015.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DIAKPMKJ4OZ6NYRZJO7YWMNQL2BICLYV/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X4KDAU76Z7QNSPKZX2JAJ6O7KIEOXWTL/","https://lists.debian.org/debian-lts-announce/2025/03/msg00023.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-1175","description":"Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-29768","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-29768","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.4,"impactScore":2.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-29768","cwe":"CWE-88","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-29768","date":"2026-10-10","epss":0.00394,"percentile":0.31621}],"risk":0.18518,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-29768","description":"A flaw was found in Vim's zip.vim plugin. This vulnerability allows potential data loss via specially crafted zip files when a user views the archive in Vim and presses 'x' on an unusual filename."},"relatedVulnerabilities":[{"id":"CVE-2025-29768","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.4,"impactScore":2.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.4,"impactScore":2.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-29768","cwe":"CWE-88","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-29768","date":"2026-10-10","epss":0.00394,"percentile":0.31621}],"urls":["https://github.com/vim/vim/commit/f209dcd3defb95bae21b2740910e6aa7bb940531","https://github.com/vim/vim/security/advisories/GHSA-693p-m996-3rmf","https://security.netapp.com/advisory/ntap-20250502-0001/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-29768","description":"Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The impact is medium because a user must be made to view such an archive with Vim and then press 'x' on such a strange filename. The issue has been fixed as of Vim patch v9.1.1198."}]},{"artifact":{"id":"2ac7f6262c1f6abe","cpes":["cpe:2.3:a:gdb-gdbserver:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb-gdbserver:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb_gdbserver:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb_gdbserver:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*"],"name":"gdb-gdbserver","purl":"pkg:rpm/redhat/gdb-gdbserver@16.3-3.1.el9_8?arch=x86_64&distro=rhel-9.8&upstream=gdb-16.3-3.1.el9_8.src.rpm","type":"rpm","version":"16.3-3.1.el9_8","language":"","licenses":["GPL-3.0-or-later AND BSD-3-Clause AND FSFAP AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain AND GFDL-1.3-or-later AND LGPL-2.0-or-later WITH GCC-exception-2.0 AND GPL-3.0-or-later WITH GCC-exception-3.1 AND GPL-2.0-or-later WITH GNU-compiler-exception AND MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"gdb","version":"16.3-3.1.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1151","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"gdb","version":"16.3-3.1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-1151","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1151","cwe":"CWE-401","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1151","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1151","cwe":"CWE-401","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-1151","date":"2026-10-10","epss":0.00607,"percentile":0.47491}],"risk":0.185135,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-1151","description":"A flaw was found in the ld linker utility of GNU Binutils. A specially-crafted payload may be able to trigger a memory leak, which can lead to an application crash or other undefined behavior."},"relatedVulnerabilities":[{"id":"CVE-2025-1151","cvss":[{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","metrics":{"baseScore":2.6,"impactScore":2.9,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1151","cwe":"CWE-401","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1151","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1151","cwe":"CWE-401","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-1151","date":"2026-10-10","epss":0.00607,"percentile":0.47491}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15887","https://sourceware.org/bugzilla/show_bug.cgi?id=32576","https://vuldb.com/?ctiid.295055","https://vuldb.com/?id.295055","https://www.gnu.org/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1151","description":"A vulnerability was found in GNU Binutils 2.43. It has been rated as problematic. This issue affects the function xmemdup of the file xmemdup.c of the component ld. The manipulation leads to memory leak. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The code maintainer explains: \"I'm not going to commit some of the leak fixes I've been working on to the 2.44 branch due to concern that would destabilise ld. All of the reported leaks in this bugzilla have been fixed on binutils master.\""}]},{"artifact":{"id":"9eebaea2eda844dd","cpes":["cpe:2.3:a:curl-minimal:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl-minimal:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl_minimal:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl_minimal:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*"],"name":"curl-minimal","purl":"pkg:rpm/redhat/curl-minimal@7.76.1-40.el9_8.7?arch=x86_64&distro=rhel-9.8&upstream=curl-7.76.1-40.el9_8.7.src.rpm","type":"rpm","version":"7.76.1-40.el9_8.7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.76.1-40.el9_8.7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-4873","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"curl","version":"7.76.1-40.el9_8.7"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-4873","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4873","cwe":"CWE-319","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-4873","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2026-4873","cwe":"CWE-319","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-4873","date":"2026-10-10","epss":0.00359,"percentile":0.27653}],"risk":0.184885,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-4873","description":"A flaw was found in curl. A remote attacker could exploit this by initiating an unencrypted connection (via IMAP, SMTP, or POP3) and then making a subsequent request to the same host that requires Transport Layer Security (TLS). Due to incorrect connection reuse, the subsequent request would bypass the TLS requirement, leading to the transmission of sensitive information in cleartext. This vulnerability, categorized as Cleartext Transmission of Sensitive Information (CWE-319), results in information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-4873","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4873","cwe":"CWE-319","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-4873","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2026-4873","cwe":"CWE-319","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-4873","date":"2026-10-10","epss":0.00359,"percentile":0.27653}],"urls":["https://curl.se/docs/CVE-2026-4873.html","https://curl.se/docs/CVE-2026-4873.json","https://hackerone.com/reports/3621851","http://www.openwall.com/lists/oss-security/2026/04/29/7"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-4873","description":"A vulnerability exists where a connection requiring TLS incorrectly reuses an\nexisting unencrypted connection from the same connection pool. If an initial\ntransfer is made in clear-text (via IMAP, SMTP, or POP3), a subsequent request\nto that same host bypasses the TLS requirement and instead transmit data\nunencrypted."}]},{"artifact":{"id":"b685606a6baf0f79","cpes":["cpe:2.3:a:libcurl-minimal:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl-minimal:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl_minimal:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl_minimal:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*"],"name":"libcurl-minimal","purl":"pkg:rpm/redhat/libcurl-minimal@7.76.1-40.el9_8.7?arch=x86_64&distro=rhel-9.8&upstream=curl-7.76.1-40.el9_8.7.src.rpm","type":"rpm","version":"7.76.1-40.el9_8.7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.76.1-40.el9_8.7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-4873","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"curl","version":"7.76.1-40.el9_8.7"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-4873","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4873","cwe":"CWE-319","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-4873","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2026-4873","cwe":"CWE-319","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-4873","date":"2026-10-10","epss":0.00359,"percentile":0.27653}],"risk":0.184885,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-4873","description":"A flaw was found in curl. A remote attacker could exploit this by initiating an unencrypted connection (via IMAP, SMTP, or POP3) and then making a subsequent request to the same host that requires Transport Layer Security (TLS). Due to incorrect connection reuse, the subsequent request would bypass the TLS requirement, leading to the transmission of sensitive information in cleartext. This vulnerability, categorized as Cleartext Transmission of Sensitive Information (CWE-319), results in information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-4873","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4873","cwe":"CWE-319","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-4873","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2026-4873","cwe":"CWE-319","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-4873","date":"2026-10-10","epss":0.00359,"percentile":0.27653}],"urls":["https://curl.se/docs/CVE-2026-4873.html","https://curl.se/docs/CVE-2026-4873.json","https://hackerone.com/reports/3621851","http://www.openwall.com/lists/oss-security/2026/04/29/7"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-4873","description":"A vulnerability exists where a connection requiring TLS incorrectly reuses an\nexisting unencrypted connection from the same connection pool. If an initial\ntransfer is made in clear-text (via IMAP, SMTP, or POP3), a subsequent request\nto that same host bypasses the TLS requirement and instead transmit data\nunencrypted."}]},{"artifact":{"id":"9eebaea2eda844dd","cpes":["cpe:2.3:a:curl-minimal:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl-minimal:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl_minimal:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl_minimal:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*"],"name":"curl-minimal","purl":"pkg:rpm/redhat/curl-minimal@7.76.1-40.el9_8.7?arch=x86_64&distro=rhel-9.8&upstream=curl-7.76.1-40.el9_8.7.src.rpm","type":"rpm","version":"7.76.1-40.el9_8.7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.76.1-40.el9_8.7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-15224","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"curl","version":"7.76.1-40.el9_8.7"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-15224","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-15224","cwe":"CWE-287","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2025-15224","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-15224","date":"2026-10-10","epss":0.0048,"percentile":0.39527}],"risk":0.1848,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-15224","description":"A flaw was found in libcurl. When doing SSH-based transfers using either SCP or SFTP, and asked to do\npublic key authentication, curl would wrongly still ask and authenticate using\na locally running SSH agent."},"relatedVulnerabilities":[{"id":"CVE-2025-15224","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-15224","cwe":"CWE-287","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2025-15224","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-15224","date":"2026-10-10","epss":0.0048,"percentile":0.39527}],"urls":["https://curl.se/docs/CVE-2025-15224.html","https://curl.se/docs/CVE-2025-15224.json","https://hackerone.com/reports/3480925","http://www.openwall.com/lists/oss-security/2026/01/07/7"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-15224","description":"When doing SSH-based transfers using either SCP or SFTP, and asked to do\npublic key authentication, curl would wrongly still ask and authenticate using\na locally running SSH agent."}]},{"artifact":{"id":"b685606a6baf0f79","cpes":["cpe:2.3:a:libcurl-minimal:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl-minimal:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl_minimal:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl_minimal:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*"],"name":"libcurl-minimal","purl":"pkg:rpm/redhat/libcurl-minimal@7.76.1-40.el9_8.7?arch=x86_64&distro=rhel-9.8&upstream=curl-7.76.1-40.el9_8.7.src.rpm","type":"rpm","version":"7.76.1-40.el9_8.7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.76.1-40.el9_8.7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-15224","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"curl","version":"7.76.1-40.el9_8.7"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-15224","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-15224","cwe":"CWE-287","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2025-15224","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-15224","date":"2026-10-10","epss":0.0048,"percentile":0.39527}],"risk":0.1848,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-15224","description":"A flaw was found in libcurl. When doing SSH-based transfers using either SCP or SFTP, and asked to do\npublic key authentication, curl would wrongly still ask and authenticate using\na locally running SSH agent."},"relatedVulnerabilities":[{"id":"CVE-2025-15224","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-15224","cwe":"CWE-287","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2025-15224","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-15224","date":"2026-10-10","epss":0.0048,"percentile":0.39527}],"urls":["https://curl.se/docs/CVE-2025-15224.html","https://curl.se/docs/CVE-2025-15224.json","https://hackerone.com/reports/3480925","http://www.openwall.com/lists/oss-security/2026/01/07/7"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-15224","description":"When doing SSH-based transfers using either SCP or SFTP, and asked to do\npublic key authentication, curl would wrongly still ask and authenticate using\na locally running SSH agent."}]},{"artifact":{"id":"a6c320bbdb2151ba","cpes":["cpe:2.3:a:libpng:libpng:2\\:1.6.37-15.el9_8.2:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libpng:2\\:1.6.37-15.el9_8.2:*:*:*:*:*:*:*"],"name":"libpng","purl":"pkg:rpm/redhat/libpng@1.6.37-15.el9_8.2?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=libpng-1.6.37-15.el9_8.2.src.rpm","type":"rpm","version":"2:1.6.37-15.el9_8.2","language":"","licenses":["zlib"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-40930","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"libpng","version":"2:1.6.37-15.el9_8.2"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-40930","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-40930","cwe":"CWE-436","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-40930","date":"2026-10-10","epss":0.00355,"percentile":0.2728}],"risk":0.18460000000000001,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-40930","description":"A flaw was found in libpng, a library used for processing PNG (Portable Network Graphics) image files. In version 1.8.0, a remote attacker could provide a specially crafted APNG (Animated Portable Network Graphics) file. This flaw allows attacker-controlled data within an ignored chunk to be reinterpreted as a new chunk header, leading to a low impact on data integrity and availability. This could result in unexpected application behavior or a denial of service."},"relatedVulnerabilities":[{"id":"CVE-2026-40930","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-40930","cwe":"CWE-436","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-40930","date":"2026-10-10","epss":0.00355,"percentile":0.2728}],"urls":["https://github.com/pnggroup/libpng/commit/faf06924688b62d7c1654b5ceddedbde66ffadb4","https://github.com/pnggroup/libpng/security/advisories/GHSA-c4v6-gxrq-6g2x","http://www.openwall.com/lists/oss-security/2026/05/15/21"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-40930","description":"LIBPNG is a reference library for use in applications that process PNG (Portable Network Graphics) raster image files. In version 1.8.0, three inter-frame chunk discard paths in the push-mode APNG parser clear the chunk-header flag without consuming the chunk body and CRC, allowing attacker-controlled bytes inside an ignored ancillary chunk to be reinterpreted as a fresh chunk header on the next call to `png_process_data`. Commit faf06924688b62d7c1654b5ceddedbde66ffadb4 fixes the issue."}]},{"artifact":{"id":"73ec63868795f316","cpes":["cpe:2.3:a:openssl:openssl:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:rpm/redhat/openssl@3.5.8-1.el9_8?arch=x86_64&distro=rhel-9.8&epoch=1&upstream=openssl-3.5.8-1.el9_8.src.rpm","type":"rpm","version":"1:3.5.8-1.el9_8","language":"","licenses":["Apache-2.0"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-75804","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"openssl","version":"1:3.5.8-1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-75804","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75804","cwe":"CWE-770","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-75804","date":"2026-10-10","epss":0.00352,"percentile":0.26832}],"risk":0.18128,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-75804","description":"A flaw was found in OpenSSL. A remote attacker can cause a Denial of Service (DoS) due to missing connection-level flow control enforcement in the QUIC protocol implementation. By opening multiple streams that respect individual stream limits while preventing data consumption, the attacker can force the system to buffer far more data than permitted by the connection limit. This excessive memory allocation can exhaust available system resources and degrade or terminate the service."},"relatedVulnerabilities":[{"id":"CVE-2026-75804","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75804","cwe":"CWE-770","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-75804","date":"2026-10-10","epss":0.00352,"percentile":0.26832}],"urls":["https://github.com/openssl/openssl/commit/2e8f54666b3fb7b05ff5f58aa6cac9285163654e","https://github.com/openssl/openssl/commit/4533ee8a5686c953ed3b644738ac4bdf20806538","https://github.com/openssl/openssl/commit/64d3102fb5b54311e92517f26ba00169d719e74a","https://github.com/openssl/openssl/commit/f9eaecf5bdd6692da052bc65b0332af2a938ac03","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-75804","description":"Issue summary: OpenSSL QUIC stack does not enforce connection\nlevel flow control for streams. Remote peers may send more bytes\nas long as they fit within the stream flow control limits.\n\nImpact summary: A malicious remote peer may exploit the lack of connection\nflow control for streams to make the QUIC stack receive ~100MB of memory\ninstead of 768 KiB (default flow control window size).\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: The local QUIC stack advertises two flow control limits\nto its remote peer: stream flow control limit and connection flow\ncontrol limit. The remote peer must follow both limits when transmitting\nstream data.\n\nWhenever the local QUIC stack receives a stream frame, it validates\nthat the size of the received stream frame stays within flow control limits.\nIf either limit is exceeded (stream level or connection level), then\nthe QUIC stack must close the connection with a flow control error.\n\nThe vulnerable OpenSSL QUIC stack enforces the stream-level but not\nthe connection-level limit. To exploit the issue, three conditions must be met:\n  - the remote peer opens several streams\n  - each stream must stay within the stream-level flow control limit\n  - there must be no zero-offset byte sent on any of the streams\n    (to prevent the vulnerable QUIC stack from consuming data).\nBy meeting the conditions above, the remote peer may make the local stack\nallocate 2 x MAX_STREAMS x (stream flow control limit) bytes\nof memory. MAX_STREAMS defaults to 100, and the limit applies to both\nbidirectional and unidirectional streams, making it 200 in total. The default\nflow control window for a stream is 512kB. The remote peer may\nforce the vulnerable QUIC stack to allocate 100MB of heap per connection.\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary."}]},{"artifact":{"id":"753337be7fe19d16","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/redhat/openssl-libs@3.5.8-1.el9_8?arch=x86_64&distro=rhel-9.8&epoch=1&upstream=openssl-3.5.8-1.el9_8.src.rpm","type":"rpm","version":"1:3.5.8-1.el9_8","language":"","licenses":["Apache-2.0"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"3.5.8-1.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-75804","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"openssl","version":"3.5.8-1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-75804","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75804","cwe":"CWE-770","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-75804","date":"2026-10-10","epss":0.00352,"percentile":0.26832}],"risk":0.18128,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-75804","description":"A flaw was found in OpenSSL. A remote attacker can cause a Denial of Service (DoS) due to missing connection-level flow control enforcement in the QUIC protocol implementation. By opening multiple streams that respect individual stream limits while preventing data consumption, the attacker can force the system to buffer far more data than permitted by the connection limit. This excessive memory allocation can exhaust available system resources and degrade or terminate the service."},"relatedVulnerabilities":[{"id":"CVE-2026-75804","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75804","cwe":"CWE-770","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-75804","date":"2026-10-10","epss":0.00352,"percentile":0.26832}],"urls":["https://github.com/openssl/openssl/commit/2e8f54666b3fb7b05ff5f58aa6cac9285163654e","https://github.com/openssl/openssl/commit/4533ee8a5686c953ed3b644738ac4bdf20806538","https://github.com/openssl/openssl/commit/64d3102fb5b54311e92517f26ba00169d719e74a","https://github.com/openssl/openssl/commit/f9eaecf5bdd6692da052bc65b0332af2a938ac03","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-75804","description":"Issue summary: OpenSSL QUIC stack does not enforce connection\nlevel flow control for streams. Remote peers may send more bytes\nas long as they fit within the stream flow control limits.\n\nImpact summary: A malicious remote peer may exploit the lack of connection\nflow control for streams to make the QUIC stack receive ~100MB of memory\ninstead of 768 KiB (default flow control window size).\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: The local QUIC stack advertises two flow control limits\nto its remote peer: stream flow control limit and connection flow\ncontrol limit. The remote peer must follow both limits when transmitting\nstream data.\n\nWhenever the local QUIC stack receives a stream frame, it validates\nthat the size of the received stream frame stays within flow control limits.\nIf either limit is exceeded (stream level or connection level), then\nthe QUIC stack must close the connection with a flow control error.\n\nThe vulnerable OpenSSL QUIC stack enforces the stream-level but not\nthe connection-level limit. To exploit the issue, three conditions must be met:\n  - the remote peer opens several streams\n  - each stream must stay within the stream-level flow control limit\n  - there must be no zero-offset byte sent on any of the streams\n    (to prevent the vulnerable QUIC stack from consuming data).\nBy meeting the conditions above, the remote peer may make the local stack\nallocate 2 x MAX_STREAMS x (stream flow control limit) bytes\nof memory. MAX_STREAMS defaults to 100, and the limit applies to both\nbidirectional and unidirectional streams, making it 200 in total. The default\nflow control window for a stream is 512kB. The remote peer may\nforce the vulnerable QUIC stack to allocate 100MB of heap per connection.\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary."}]},{"artifact":{"id":"406b3abfffe1d292","cpes":["cpe:2.3:a:git-lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git-lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*"],"name":"git-lfs","purl":"pkg:rpm/redhat/git-lfs@3.7.1-4.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=git-lfs-3.7.1-4.el9_8.3.src.rpm","type":"rpm","version":"3.7.1-4.el9_8.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-94439","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"git-lfs","version":"0:3.7.1-4.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-94439","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94439","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94439","date":"2026-10-10","epss":0.00315,"percentile":0.22501}],"risk":0.18112499999999998,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-94439","description":"A flaw was found in Go's net/http package. When an HTTP server sends a successful response to an HTTP/1 CONNECT request without taking raw control of the connection, it improperly continues to process incoming data as standard HTTP requests instead of establishing a tunnel. A remote attacker can exploit this behavior to conduct HTTP request smuggling through intermediate proxy servers, potentially bypassing security controls."},"relatedVulnerabilities":[{"id":"CVE-2026-94439","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94439","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94439","date":"2026-10-10","epss":0.00315,"percentile":0.22501}],"urls":["https://go.dev/cl/847311","https://go.dev/issue/81744","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6613"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-94439","description":"When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CONNECT converts the connection into a tunnel, the server should not treat the connection as continuing to contain HTTP. The impact of this misbehavior is mostly limited to potential request smuggling, where an intermediate proxy considers the data on the connection to be tunneled and the server considers it to be HTTP."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-1264","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2023-1264","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-1264","cwe":"CWE-476","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2023-1264","date":"2026-10-10","epss":0.00426,"percentile":0.34941}],"risk":0.18105000000000002,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-1264","description":"A NULL pointer dereference vulnerability was discovered in vim's utfc_ptr2len() function in the mbyte.c file. This issue is due to using a NULL pointer with the nested :open command. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering an issue that causes an application to crash, leading to a denial of service."},"relatedVulnerabilities":[{"id":"CVE-2023-1264","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","metrics":{"baseScore":6.6,"impactScore":4.8,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-1264","cwe":"CWE-476","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2023-1264","date":"2026-10-10","epss":0.00426,"percentile":0.34941}],"urls":["https://github.com/vim/vim/commit/7ac5023a5f1a37baafbe1043645f97ba3443d9f6","https://huntr.dev/bounties/b2989095-88f3-413a-9a39-c1c58a6e6815","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DIAKPMKJ4OZ6NYRZJO7YWMNQL2BICLYV/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X4KDAU76Z7QNSPKZX2JAJ6O7KIEOXWTL/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-1264","description":"NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392."}]},{"artifact":{"id":"8cf05c8343d9a4a8","cpes":["cpe:2.3:a:libxml2:libxml2:2.9.13-14.el9_8.5:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libxml2:2.9.13-14.el9_8.5:*:*:*:*:*:*:*"],"name":"libxml2","purl":"pkg:rpm/redhat/libxml2@2.9.13-14.el9_8.5?arch=x86_64&distro=rhel-9.8&upstream=libxml2-2.9.13-14.el9_8.5.src.rpm","type":"rpm","version":"2.9.13-14.el9_8.5","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-0989","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"libxml2","version":"0:2.9.13-14.el9_8.5"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-0989","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-0989","cwe":"CWE-674","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-0989","date":"2026-10-10","epss":0.00538,"percentile":0.43619}],"risk":0.18023,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-0989","description":"A flaw was identified in the RelaxNG parser of libxml2 related to how external schema inclusions are handled. The parser does not enforce a limit on inclusion depth when resolving nested <include> directives. Specially crafted or overly complex schemas can cause excessive recursion during parsing. This may lead to stack exhaustion and application crashes, creating a denial-of-service risk."},"relatedVulnerabilities":[{"id":"CVE-2026-0989","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-0989","cwe":"CWE-674","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-0989","date":"2026-10-10","epss":0.00538,"percentile":0.43619}],"urls":["https://access.redhat.com/errata/RHSA-2026:7519","https://access.redhat.com/security/cve/CVE-2026-0989","https://bugzilla.redhat.com/show_bug.cgi?id=2429933","https://gitlab.gnome.org/GNOME/libxml2/-/issues/998"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-0989","description":"A flaw was identified in the RelaxNG parser of libxml2 related to how external schema inclusions are handled. The parser does not enforce a limit on inclusion depth when resolving nested <include> directives. Specially crafted or overly complex schemas can cause excessive recursion during parsing. This may lead to stack exhaustion and application crashes, creating a denial-of-service risk."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-5441","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2023-5441","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-5441","cwe":"CWE-476","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2023-5441","date":"2026-10-10","epss":0.00419,"percentile":0.34305}],"risk":0.178075,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-5441","description":"A NULL pointer dereference vulnerability was found in Vim. This flaw allows an attacker who can trick a user into processing a specially crafted file to trigger the NULL pointer dereference, causing the application to crash."},"relatedVulnerabilities":[{"id":"CVE-2023-5441","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.2,"impactScore":3.6,"exploitabilityScore":2.6},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-5441","cwe":"CWE-476","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2023-5441","date":"2026-10-10","epss":0.00419,"percentile":0.34305}],"urls":["https://github.com/vim/vim/commit/20d161ace307e28690229b68584f2d84556f8960","https://huntr.dev/bounties/b54cbdf5-3e85-458d-bb38-9ea2c0b669f2","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VDDWD25AZIHBAA44HQT75OWLQ5UMDKU3/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VGTVLUV7UCXXCZAIQIUCLG6JXAVYT3HE/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XPT7NMYJRLBPIALGSE24UWTY6F774GZW/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-5441","description":"NULL Pointer Dereference in GitHub repository vim/vim prior to 20d161ace307e28690229b68584f2d84556f8960."}]},{"artifact":{"id":"406b3abfffe1d292","cpes":["cpe:2.3:a:git-lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git-lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*"],"name":"git-lfs","purl":"pkg:rpm/redhat/git-lfs@3.7.1-4.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=git-lfs-3.7.1-4.el9_8.3.src.rpm","type":"rpm","version":"3.7.1-4.el9_8.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-56866","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"git-lfs","version":"0:3.7.1-4.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-56866","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56866","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-56866","date":"2026-10-10","epss":0.00309,"percentile":0.2179}],"risk":0.17767499999999997,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-56866","description":"A flaw was found in Go's net/http package. When an HTTP CONNECT request with a request body is rejected by a server, the client transport can desynchronize the connection before returning it to the shared idle pool. In shared reverse proxy environments, a remote attacker can exploit this issue to cause cross-user response poisoning, potentially exposing sensitive information or serving unintended content to other users."},"relatedVulnerabilities":[{"id":"CVE-2026-56866","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56866","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-56866","date":"2026-10-10","epss":0.00309,"percentile":0.2179}],"urls":["https://go.dev/cl/847306","https://go.dev/issue/81740","https://groups.google.com/g/golang-announce/c/U2fTuyDJznI","https://pkg.go.dev/vuln/GO-2026-6605"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56866","description":"When http.Transport sends an HTTP/1 CONNECT request with a non-empty Request.Body, it writes the body directly to the connection without framing after the request headers. If the server rejects the CONNECT request with a non-2xx keep-alive response, Transport returns the connection to the idle pool. Because CONNECT requests do not have a request body, the server may interpret the trailing body bytes as a subsequent pipelined HTTP/1.1 request on the connection, leaving the pooled connection desynchronized and causing the next caller that reuses it to read the response to the injected request. In reverse proxies (including httputil.ReverseProxy) that forward CONNECT requests through a shared Transport, this can lead to cross-user response poisoning."}]},{"artifact":{"id":"a3c55d7a5e4bf54f","cpes":["cpe:2.3:a:redhat:glibc:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc:2.34-275.el9_8:*:*:*:*:*:*:*"],"name":"glibc","purl":"pkg:rpm/redhat/glibc@2.34-275.el9_8?arch=x86_64&distro=rhel-9.8&upstream=glibc-2.34-275.el9_8.src.rpm","type":"rpm","version":"2.34-275.el9_8","language":"","licenses":["LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-8674","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"glibc","version":"0:2.34-275.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-8674","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-8674","cwe":"CWE-617","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-8674","date":"2026-10-10","epss":0.00342,"percentile":0.25689}],"risk":0.17612999999999998,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-8674","description":"A flaw was found in the GNU C Library (glibc) DNS stub resolver. This vulnerability allows a remote attacker on the local network to cause a denial of service by providing a specially crafted, excessively long search domain. When the resolver attempts to initialize with this long domain from /etc/resolv.conf or the LOCALDOMAIN environment variable, it triggers an assertion failure, which aborts the process. This can be exploited without privileges on the target system, potentially through network configuration mechanisms like DHCP or a VPN server."},"relatedVulnerabilities":[{"id":"CVE-2026-8674","cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-8674","cwe":"CWE-617","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-8674","date":"2026-10-10","epss":0.00342,"percentile":0.25689}],"urls":["https://joshua.hu/fuzzing-glibc-libresolv","https://sourceware.org/bugzilla/show_bug.cgi?id=31026","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0021","https://sourceware.org/git/?p=glibc.git;a=commit;h=506ea57086bfb9ce3daff1c14246a1cb532aba0a","http://www.openwall.com/lists/oss-security/2026/09/17/4"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-8674","description":"Initializing the DNS stub resolver from an /etc/resolv.conf file, or a LOCALDOMAIN environment variable, whose search list contains a domain of roughly 200 characters or more in the GNU C Library version 2.26 to 2.44 results in an assertion failure which aborts the process.\n\nThe resolver truncates the search list when copying it into the fixed-size _res.defdname buffer, then asserts that the copy is consistent with the full configuration.  The consistency check compared against the wrong size and did not handle a first entry that does not fit, so a correctly truncated list failed the assertion.  Any process that resolves names through the library is affected, including long-running processes that reload /etc/resolv.conf on the next query after it changes.  Search domains are commonly written to /etc/resolv.conf from data received over DHCP or from a VPN server, so an attacker on the local network may be able to trigger this without privileges on the target system, subject to validation by the network configuration software."}]},{"artifact":{"id":"88cf218ecaac1f25","cpes":["cpe:2.3:a:glibc-common:glibc-common:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc-common:glibc_common:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc-common:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc_common:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:glibc-common:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:glibc_common:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc-common:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc_common:2.34-275.el9_8:*:*:*:*:*:*:*"],"name":"glibc-common","purl":"pkg:rpm/redhat/glibc-common@2.34-275.el9_8?arch=x86_64&distro=rhel-9.8&upstream=glibc-2.34-275.el9_8.src.rpm","type":"rpm","version":"2.34-275.el9_8","language":"","licenses":["LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"glibc","version":"2.34-275.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-8674","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"glibc","version":"2.34-275.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-8674","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-8674","cwe":"CWE-617","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-8674","date":"2026-10-10","epss":0.00342,"percentile":0.25689}],"risk":0.17612999999999998,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-8674","description":"A flaw was found in the GNU C Library (glibc) DNS stub resolver. This vulnerability allows a remote attacker on the local network to cause a denial of service by providing a specially crafted, excessively long search domain. When the resolver attempts to initialize with this long domain from /etc/resolv.conf or the LOCALDOMAIN environment variable, it triggers an assertion failure, which aborts the process. This can be exploited without privileges on the target system, potentially through network configuration mechanisms like DHCP or a VPN server."},"relatedVulnerabilities":[{"id":"CVE-2026-8674","cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-8674","cwe":"CWE-617","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-8674","date":"2026-10-10","epss":0.00342,"percentile":0.25689}],"urls":["https://joshua.hu/fuzzing-glibc-libresolv","https://sourceware.org/bugzilla/show_bug.cgi?id=31026","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0021","https://sourceware.org/git/?p=glibc.git;a=commit;h=506ea57086bfb9ce3daff1c14246a1cb532aba0a","http://www.openwall.com/lists/oss-security/2026/09/17/4"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-8674","description":"Initializing the DNS stub resolver from an /etc/resolv.conf file, or a LOCALDOMAIN environment variable, whose search list contains a domain of roughly 200 characters or more in the GNU C Library version 2.26 to 2.44 results in an assertion failure which aborts the process.\n\nThe resolver truncates the search list when copying it into the fixed-size _res.defdname buffer, then asserts that the copy is consistent with the full configuration.  The consistency check compared against the wrong size and did not handle a first entry that does not fit, so a correctly truncated list failed the assertion.  Any process that resolves names through the library is affected, including long-running processes that reload /etc/resolv.conf on the next query after it changes.  Search domains are commonly written to /etc/resolv.conf from data received over DHCP or from a VPN server, so an attacker on the local network may be able to trigger this without privileges on the target system, subject to validation by the network configuration software."}]},{"artifact":{"id":"20293a554663f535","cpes":["cpe:2.3:a:glibc-minimal-langpack:glibc-minimal-langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc-minimal-langpack:glibc_minimal_langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc_minimal_langpack:glibc-minimal-langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc_minimal_langpack:glibc_minimal_langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc-minimal:glibc-minimal-langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc-minimal:glibc_minimal_langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc_minimal:glibc-minimal-langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc_minimal:glibc_minimal_langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:glibc-minimal-langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:glibc_minimal_langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc-minimal-langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc_minimal_langpack:2.34-275.el9_8:*:*:*:*:*:*:*"],"name":"glibc-minimal-langpack","purl":"pkg:rpm/redhat/glibc-minimal-langpack@2.34-275.el9_8?arch=x86_64&distro=rhel-9.8&upstream=glibc-2.34-275.el9_8.src.rpm","type":"rpm","version":"2.34-275.el9_8","language":"","licenses":["LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"glibc","version":"2.34-275.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-8674","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"glibc","version":"2.34-275.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-8674","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-8674","cwe":"CWE-617","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-8674","date":"2026-10-10","epss":0.00342,"percentile":0.25689}],"risk":0.17612999999999998,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-8674","description":"A flaw was found in the GNU C Library (glibc) DNS stub resolver. This vulnerability allows a remote attacker on the local network to cause a denial of service by providing a specially crafted, excessively long search domain. When the resolver attempts to initialize with this long domain from /etc/resolv.conf or the LOCALDOMAIN environment variable, it triggers an assertion failure, which aborts the process. This can be exploited without privileges on the target system, potentially through network configuration mechanisms like DHCP or a VPN server."},"relatedVulnerabilities":[{"id":"CVE-2026-8674","cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-8674","cwe":"CWE-617","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-8674","date":"2026-10-10","epss":0.00342,"percentile":0.25689}],"urls":["https://joshua.hu/fuzzing-glibc-libresolv","https://sourceware.org/bugzilla/show_bug.cgi?id=31026","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0021","https://sourceware.org/git/?p=glibc.git;a=commit;h=506ea57086bfb9ce3daff1c14246a1cb532aba0a","http://www.openwall.com/lists/oss-security/2026/09/17/4"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-8674","description":"Initializing the DNS stub resolver from an /etc/resolv.conf file, or a LOCALDOMAIN environment variable, whose search list contains a domain of roughly 200 characters or more in the GNU C Library version 2.26 to 2.44 results in an assertion failure which aborts the process.\n\nThe resolver truncates the search list when copying it into the fixed-size _res.defdname buffer, then asserts that the copy is consistent with the full configuration.  The consistency check compared against the wrong size and did not handle a first entry that does not fit, so a correctly truncated list failed the assertion.  Any process that resolves names through the library is affected, including long-running processes that reload /etc/resolv.conf on the next query after it changes.  Search domains are commonly written to /etc/resolv.conf from data received over DHCP or from a VPN server, so an attacker on the local network may be able to trigger this without privileges on the target system, subject to validation by the network configuration software."}]},{"artifact":{"id":"57d863142a15e7aa","cpes":["cpe:2.3:a:cyrus-sasl-lib:cyrus-sasl-lib:2.1.27-22.el9:*:*:*:*:*:*:*","cpe:2.3:a:cyrus-sasl-lib:cyrus_sasl_lib:2.1.27-22.el9:*:*:*:*:*:*:*","cpe:2.3:a:cyrus_sasl_lib:cyrus-sasl-lib:2.1.27-22.el9:*:*:*:*:*:*:*","cpe:2.3:a:cyrus_sasl_lib:cyrus_sasl_lib:2.1.27-22.el9:*:*:*:*:*:*:*","cpe:2.3:a:cyrus-sasl:cyrus-sasl-lib:2.1.27-22.el9:*:*:*:*:*:*:*","cpe:2.3:a:cyrus-sasl:cyrus_sasl_lib:2.1.27-22.el9:*:*:*:*:*:*:*","cpe:2.3:a:cyrus_sasl:cyrus-sasl-lib:2.1.27-22.el9:*:*:*:*:*:*:*","cpe:2.3:a:cyrus_sasl:cyrus_sasl_lib:2.1.27-22.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:cyrus-sasl-lib:2.1.27-22.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:cyrus_sasl_lib:2.1.27-22.el9:*:*:*:*:*:*:*","cpe:2.3:a:cyrus:cyrus-sasl-lib:2.1.27-22.el9:*:*:*:*:*:*:*","cpe:2.3:a:cyrus:cyrus_sasl_lib:2.1.27-22.el9:*:*:*:*:*:*:*"],"name":"cyrus-sasl-lib","purl":"pkg:rpm/redhat/cyrus-sasl-lib@2.1.27-22.el9?arch=x86_64&distro=rhel-9.8&upstream=cyrus-sasl-2.1.27-22.el9.src.rpm","type":"rpm","version":"2.1.27-22.el9","language":"","licenses":["BSD with advertising"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"cyrus-sasl","version":"2.1.27-22.el9"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107161","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"cyrus-sasl","version":"2.1.27-22.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-107161","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107161","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-107161","date":"2026-10-10","epss":0.00277,"percentile":0.18522}],"risk":0.173125,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-107161","description":"A heap-based buffer overflow flaw was found in Cyrus SASL. The add_to_challenge() function in the DIGEST-MD5 plugin computes the size of the buffer needed for a challenge/response field before DIGEST-MD5 quoting is applied, but does not recompute that size when quoting (escaping special characters) makes the value longer. The under-sized buffer is then passed to strcat(), causing a heap-based out-of-bounds write whose size depends on attacker-controlled input. A malicious or on-path DIGEST-MD5 (or HTTP Digest) server can trigger this flaw in a connecting client by supplying a crafted challenge field, such as realm or nonce, most likely resulting in a crash of the client application."},"relatedVulnerabilities":[{"id":"CVE-2026-107161","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107161","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-107161","date":"2026-10-10","epss":0.00277,"percentile":0.18522}],"urls":["https://access.redhat.com/security/cve/CVE-2026-107161","https://bugzilla.redhat.com/show_bug.cgi?id=2460420","http://www.openwall.com/lists/oss-security/2026/10/09/20"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107161","description":"A heap-based buffer overflow flaw was found in Cyrus SASL. The add_to_challenge() function in the DIGEST-MD5 plugin computes the size of the buffer needed for a challenge/response field before DIGEST-MD5 quoting is applied, but does not recompute that size when quoting (escaping special characters) makes the value longer. The under-sized buffer is then passed to strcat(), causing a heap-based out-of-bounds write whose size depends on attacker-controlled input. A malicious or on-path DIGEST-MD5 (or HTTP Digest) server can trigger this flaw in a connecting client by supplying a crafted challenge field, such as realm or nonce, most likely resulting in a crash of the client application."}]},{"artifact":{"id":"406b3abfffe1d292","cpes":["cpe:2.3:a:git-lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git-lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*"],"name":"git-lfs","purl":"pkg:rpm/redhat/git-lfs@3.7.1-4.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=git-lfs-3.7.1-4.el9_8.3.src.rpm","type":"rpm","version":"3.7.1-4.el9_8.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-47910","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"git-lfs","version":"0:3.7.1-4.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-47910","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2025-47910","date":"2026-10-10","epss":0.0033,"percentile":0.24119}],"risk":0.1716,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-47910","description":"A CrossOriginProtection bypass has been discovered in the golang net/http package. When using http.CrossOriginProtection, the AddInsecureBypassPattern method can unexpectedly bypass more requests than intended. CrossOriginProtection then skips validation, but forwards the original request path, which may be served by a different handler without the intended security protections."},"relatedVulnerabilities":[{"id":"CVE-2025-47910","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2025-47910","date":"2026-10-10","epss":0.0033,"percentile":0.24119}],"urls":["https://go.dev/cl/699275","https://go.dev/issue/75054","https://groups.google.com/g/golang-announce/c/PtW9VW21NPs/m/DJhMQ-m5AQAJ","https://pkg.go.dev/vuln/GO-2025-3955"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-47910","description":"When using http.CrossOriginProtection, the AddInsecureBypassPattern method can unexpectedly bypass more requests than intended. CrossOriginProtection then skips validation, but forwards the original request path, which may be served by a different handler without the intended security protections."}]},{"artifact":{"id":"406b3abfffe1d292","cpes":["cpe:2.3:a:git-lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git-lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*"],"name":"git-lfs","purl":"pkg:rpm/redhat/git-lfs@3.7.1-4.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=git-lfs-3.7.1-4.el9_8.3.src.rpm","type":"rpm","version":"3.7.1-4.el9_8.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-45341","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"git-lfs","version":"0:3.7.1-4.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2024-45341","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.2,"impactScore":2.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2024-45341","date":"2026-10-10","epss":0.00476,"percentile":0.39214}],"risk":0.17136,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2024-45341","description":"A flaw was found in the crypto/x509 package of the Golang standard library. A certificate with a URI, which has a IPv6 address with a zone ID, may incorrectly satisfy a URI name constraint that applies to the certificate chain. Certificates containing URIs are not permitted in the web PKI; this issue only affects users of private PKIs that make use of URIs."},"relatedVulnerabilities":[{"id":"CVE-2024-45341","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2024-45341","date":"2026-10-10","epss":0.00476,"percentile":0.39214}],"urls":["https://go.dev/cl/643099","https://go.dev/issue/71156","https://groups.google.com/g/golang-dev/c/CAWXhan3Jww/m/bk9LAa-lCgAJ","https://groups.google.com/g/golang-dev/c/bG8cv1muIBM/m/G461hA6lCgAJ","https://pkg.go.dev/vuln/GO-2025-3373","https://security.netapp.com/advisory/ntap-20250221-0004/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-45341","description":"A certificate with a URI which has a IPv6 address with a zone ID may incorrectly satisfy a URI name constraint that applies to the certificate chain. Certificates containing URIs are not permitted in the web PKI, so this only affects users of private PKIs which make use of URIs."}]},{"artifact":{"id":"2ac7f6262c1f6abe","cpes":["cpe:2.3:a:gdb-gdbserver:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb-gdbserver:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb_gdbserver:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb_gdbserver:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*"],"name":"gdb-gdbserver","purl":"pkg:rpm/redhat/gdb-gdbserver@16.3-3.1.el9_8?arch=x86_64&distro=rhel-9.8&upstream=gdb-16.3-3.1.el9_8.src.rpm","type":"rpm","version":"16.3-3.1.el9_8","language":"","licenses":["GPL-3.0-or-later AND BSD-3-Clause AND FSFAP AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain AND GFDL-1.3-or-later AND LGPL-2.0-or-later WITH GCC-exception-2.0 AND GPL-3.0-or-later WITH GCC-exception-3.1 AND GPL-2.0-or-later WITH GNU-compiler-exception AND MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"gdb","version":"16.3-3.1.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-47007","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"gdb","version":"16.3-3.1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-47007","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-47007","cwe":"CWE-401","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-47007","date":"2026-10-10","epss":0.00402,"percentile":0.32387}],"risk":0.17085000000000003,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-47007","description":"A memory leak was found in function  stab_demangle_v3_arg in stabs.c in Binutils, allows local attacker to exploit the vulnerability using specially crafted file to cause Denial of Service."},"relatedVulnerabilities":[{"id":"CVE-2022-47007","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-47007","cwe":"CWE-401","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-47007","date":"2026-10-10","epss":0.00402,"percentile":0.32387}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=29254"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-47007","description":"An issue was discovered function stab_demangle_v3_arg in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks."}]},{"artifact":{"id":"73ec63868795f316","cpes":["cpe:2.3:a:openssl:openssl:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:rpm/redhat/openssl@3.5.8-1.el9_8?arch=x86_64&distro=rhel-9.8&epoch=1&upstream=openssl-3.5.8-1.el9_8.src.rpm","type":"rpm","version":"1:3.5.8-1.el9_8","language":"","licenses":["Apache-2.0"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-42772","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"openssl","version":"1:3.5.8-1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-42772","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42772","cwe":"CWE-407","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-42772","date":"2026-10-10","epss":0.0033,"percentile":0.24109}],"risk":0.16995000000000002,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-42772","description":"A flaw was found in OpenSSL. A remote attacker who establishes a QUIC network connection can cause a Denial of Service (DoS) by sending specially sequenced, out-of-order stream frames. Because the stream reassembly mechanism handles non-sequential data fragments inefficiently, processing these frames forces the server to consume excessive CPU resources. Consequently, an attacker can exhaust system processing capacity using minimal network bandwidth."},"relatedVulnerabilities":[{"id":"CVE-2026-42772","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42772","cwe":"CWE-407","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-42772","date":"2026-10-10","epss":0.0033,"percentile":0.24109}],"urls":["https://github.com/openssl/openssl/commit/32d0ed8afe1b8c3e7ece725b44663da3d7087a09","https://github.com/openssl/openssl/commit/ca8402e273af4de5b3f04fa61a0f0c02ce3ae20e","https://github.com/openssl/openssl/commit/eb2becc0a4baea7f3050a247834d0e5c2ebe1773","https://github.com/openssl/openssl/commit/f42ae513bbda513b3c121d54834040ee4a0eae1a","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-42772","description":"Issue summary: The QUIC stream reassembly algorithm performance deteriorates\nprogressively as packets are arriving out of order. The worst case has\na quadratic complexity proportional to the number of stream frames kept in\nthe buffer for the received stream data.\n\nImpact summary: A remote QUIC peer that completes the handshake can create\na connection-scoped CPU pressure and potentially a Denial of Service using\ncompliant STREAM frames inside the advertised receive window, with low\nattacker bandwidth.\n\nCWE: CWE-407: Inefficient Algorithmic Complexity\n\nDescription: OpenSSL manages received QUIC stream fragments using a\ndoubly-linked list. While it optimizes for append operations (at the end of\nthe list), it falls back to a head-to-tail linear search for any fragment\nthat does not immediately follow the current `tail`.\n\nBy manipulating the sequence of offsets, an attacker can force the server\nto perform O(n^2) operations, consuming excessive CPU time for the\nQUIC process.\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary."}]},{"artifact":{"id":"753337be7fe19d16","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/redhat/openssl-libs@3.5.8-1.el9_8?arch=x86_64&distro=rhel-9.8&epoch=1&upstream=openssl-3.5.8-1.el9_8.src.rpm","type":"rpm","version":"1:3.5.8-1.el9_8","language":"","licenses":["Apache-2.0"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"3.5.8-1.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-42772","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"openssl","version":"3.5.8-1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-42772","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42772","cwe":"CWE-407","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-42772","date":"2026-10-10","epss":0.0033,"percentile":0.24109}],"risk":0.16995000000000002,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-42772","description":"A flaw was found in OpenSSL. A remote attacker who establishes a QUIC network connection can cause a Denial of Service (DoS) by sending specially sequenced, out-of-order stream frames. Because the stream reassembly mechanism handles non-sequential data fragments inefficiently, processing these frames forces the server to consume excessive CPU resources. Consequently, an attacker can exhaust system processing capacity using minimal network bandwidth."},"relatedVulnerabilities":[{"id":"CVE-2026-42772","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42772","cwe":"CWE-407","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-42772","date":"2026-10-10","epss":0.0033,"percentile":0.24109}],"urls":["https://github.com/openssl/openssl/commit/32d0ed8afe1b8c3e7ece725b44663da3d7087a09","https://github.com/openssl/openssl/commit/ca8402e273af4de5b3f04fa61a0f0c02ce3ae20e","https://github.com/openssl/openssl/commit/eb2becc0a4baea7f3050a247834d0e5c2ebe1773","https://github.com/openssl/openssl/commit/f42ae513bbda513b3c121d54834040ee4a0eae1a","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-42772","description":"Issue summary: The QUIC stream reassembly algorithm performance deteriorates\nprogressively as packets are arriving out of order. The worst case has\na quadratic complexity proportional to the number of stream frames kept in\nthe buffer for the received stream data.\n\nImpact summary: A remote QUIC peer that completes the handshake can create\na connection-scoped CPU pressure and potentially a Denial of Service using\ncompliant STREAM frames inside the advertised receive window, with low\nattacker bandwidth.\n\nCWE: CWE-407: Inefficient Algorithmic Complexity\n\nDescription: OpenSSL manages received QUIC stream fragments using a\ndoubly-linked list. While it optimizes for append operations (at the end of\nthe list), it falls back to a head-to-tail linear search for any fragment\nthat does not immediately follow the current `tail`.\n\nBy manipulating the sequence of offsets, an attacker can force the server\nto perform O(n^2) operations, consuming excessive CPU time for the\nQUIC process.\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-43961","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-43961","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-43961","cwe":"CWE-94","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-43961","date":"2026-10-10","epss":0.0022,"percentile":0.11541}],"risk":0.1683,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-43961","description":"A flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and expression fragments can break out of the quoted context during mark/unmark operations, allowing arbitrary Vimscript execution. This can be leveraged to run shell commands with the privileges of the user running Vim."},"relatedVulnerabilities":[{"id":"CVE-2026-43961","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-43961","cwe":"CWE-94","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-43961","date":"2026-10-10","epss":0.0022,"percentile":0.11541}],"urls":["https://access.redhat.com/errata/RHSA-2026:57614","https://access.redhat.com/security/cve/CVE-2026-43961","https://bugzilla.redhat.com/show_bug.cgi?id=2460434","https://github.com/vim/vim/security/advisories/GHSA-66hr-7p6x-x5j3","http://www.openwall.com/lists/oss-security/2026/05/14/7"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-43961","description":"A flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and expression fragments can break out of the quoted context during mark/unmark operations, allowing arbitrary Vimscript execution. This can be leveraged to run shell commands with the privileges of the user running Vim."}]},{"artifact":{"id":"386d9731ec4d1b22","cpes":["cpe:2.3:a:gnupg2:gnupg2:2.3.3-5.el9_7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:gnupg2:2.3.3-5.el9_7:*:*:*:*:*:*:*"],"name":"gnupg2","purl":"pkg:rpm/redhat/gnupg2@2.3.3-5.el9_7?arch=x86_64&distro=rhel-9.8&upstream=gnupg2-2.3.3-5.el9_7.src.rpm","type":"rpm","version":"2.3.3-5.el9_7","language":"","licenses":["GPLv3+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-24883","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"gnupg2","version":"0:2.3.3-5.el9_7"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-24883","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-24883","cwe":"CWE-476","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-24883","date":"2026-10-10","epss":0.00498,"percentile":0.40821}],"risk":0.16683,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-24883","description":"A flaw was found in GnuPG. A remote attacker could provide a specially crafted long signature packet that, when processed, causes the application to crash. This vulnerability leads to a denial of service (DoS), making the GnuPG application unavailable to legitimate users."},"relatedVulnerabilities":[{"id":"CVE-2026-24883","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-24883","cwe":"CWE-476","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-24883","date":"2026-10-10","epss":0.00498,"percentile":0.40821}],"urls":["https://dev.gnupg.org/T8049","https://www.openwall.com/lists/oss-security/2026/01/27/8"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-24883","description":"In GnuPG before 2.5.17, a long signature packet length causes parse_signature to return success with sig->data[] set to a NULL value, leading to a denial of service (application crash)."}]},{"artifact":{"id":"2ac7f6262c1f6abe","cpes":["cpe:2.3:a:gdb-gdbserver:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb-gdbserver:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb_gdbserver:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb_gdbserver:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*"],"name":"gdb-gdbserver","purl":"pkg:rpm/redhat/gdb-gdbserver@16.3-3.1.el9_8?arch=x86_64&distro=rhel-9.8&upstream=gdb-16.3-3.1.el9_8.src.rpm","type":"rpm","version":"16.3-3.1.el9_8","language":"","licenses":["GPL-3.0-or-later AND BSD-3-Clause AND FSFAP AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain AND GFDL-1.3-or-later AND LGPL-2.0-or-later WITH GCC-exception-2.0 AND GPL-3.0-or-later WITH GCC-exception-3.1 AND GPL-2.0-or-later WITH GNU-compiler-exception AND MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"gdb","version":"16.3-3.1.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-47010","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"gdb","version":"16.3-3.1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-47010","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-47010","cwe":"CWE-401","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-47010","date":"2026-10-10","epss":0.0039,"percentile":0.31128}],"risk":0.16575,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-47010","description":"A memory leak flaw was found in binutils in the pr_function_type function. This flaw allows an attacker to use a set of steps to trigger a memory leak and perform a denial of service, resulting in a loss of the system's availability."},"relatedVulnerabilities":[{"id":"CVE-2022-47010","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-47010","cwe":"CWE-401","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-47010","date":"2026-10-10","epss":0.0039,"percentile":0.31128}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=29262"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-47010","description":"An issue was discovered function pr_function_type in prdbg.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks."}]},{"artifact":{"id":"2ac7f6262c1f6abe","cpes":["cpe:2.3:a:gdb-gdbserver:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb-gdbserver:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb_gdbserver:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb_gdbserver:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*"],"name":"gdb-gdbserver","purl":"pkg:rpm/redhat/gdb-gdbserver@16.3-3.1.el9_8?arch=x86_64&distro=rhel-9.8&upstream=gdb-16.3-3.1.el9_8.src.rpm","type":"rpm","version":"16.3-3.1.el9_8","language":"","licenses":["GPL-3.0-or-later AND BSD-3-Clause AND FSFAP AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain AND GFDL-1.3-or-later AND LGPL-2.0-or-later WITH GCC-exception-2.0 AND GPL-3.0-or-later WITH GCC-exception-3.1 AND GPL-2.0-or-later WITH GNU-compiler-exception AND MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"gdb","version":"16.3-3.1.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-47011","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"gdb","version":"16.3-3.1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-47011","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-47011","cwe":"CWE-401","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-47011","date":"2026-10-10","epss":0.0039,"percentile":0.31127}],"risk":0.16575,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-47011","description":"A memory leak flaw was found in binutils. This flaw allows an attacker to use a set of steps to trigger a memory leak and perform a denial of service, resulting in a loss of the system's availability."},"relatedVulnerabilities":[{"id":"CVE-2022-47011","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-47011","cwe":"CWE-401","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-47011","date":"2026-10-10","epss":0.0039,"percentile":0.31127}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=29261"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-47011","description":"An issue was discovered function parse_stab_struct_fields in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks."}]},{"artifact":{"id":"2ac7f6262c1f6abe","cpes":["cpe:2.3:a:gdb-gdbserver:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb-gdbserver:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb_gdbserver:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb_gdbserver:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*"],"name":"gdb-gdbserver","purl":"pkg:rpm/redhat/gdb-gdbserver@16.3-3.1.el9_8?arch=x86_64&distro=rhel-9.8&upstream=gdb-16.3-3.1.el9_8.src.rpm","type":"rpm","version":"16.3-3.1.el9_8","language":"","licenses":["GPL-3.0-or-later AND BSD-3-Clause AND FSFAP AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain AND GFDL-1.3-or-later AND LGPL-2.0-or-later WITH GCC-exception-2.0 AND GPL-3.0-or-later WITH GCC-exception-3.1 AND GPL-2.0-or-later WITH GNU-compiler-exception AND MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"gdb","version":"16.3-3.1.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-69650","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"gdb","version":"16.3-3.1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-69650","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69650","cwe":"CWE-415","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2025-69650","cwe":"CWE-415","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-69650","date":"2026-10-10","epss":0.00522,"percentile":0.42562}],"risk":0.16442999999999997,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-69650","description":"A flaw was found in binutils. Processing a specially crafted ELF binary file containing malformed relocation data with the readelf program can trigger a double free, causing a crash and resulting in a denial of service."},"relatedVulnerabilities":[{"id":"CVE-2025-69650","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69650","cwe":"CWE-415","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2025-69650","cwe":"CWE-415","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-69650","date":"2026-10-10","epss":0.00522,"percentile":0.42562}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=33698","https://sourceware.org/bugzilla/show_bug.cgi?id=33700","https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=81e90cf63a10ad11772c2437c8f2a88f1a00c739","https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=ea4bc025abdba85a90e26e13f551c16a44bfa92","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ea4bc025abdba85a90e26e13f551c16a44bfa921"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-69650","description":"GNU Binutils thru 2.46 readelf contains a double free vulnerability when processing a crafted ELF binary with malformed relocation data. During GOT relocation handling, dump_relocations may return early without initializing the all_relocations array. As a result, process_got_section_contents() may pass an uninitialized r_symbol pointer to free(), leading to a double free and terminating the program with SIGABRT. No evidence of exploitable memory corruption or code execution was observed; the impact is limited to denial of service. NOTE: this is disputed by third parties because the observed behavior occurred only in pre-release code and did not affect any tagged version."}]},{"artifact":{"id":"406b3abfffe1d292","cpes":["cpe:2.3:a:git-lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git-lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*"],"name":"git-lfs","purl":"pkg:rpm/redhat/git-lfs@3.7.1-4.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=git-lfs-3.7.1-4.el9_8.3.src.rpm","type":"rpm","version":"3.7.1-4.el9_8.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-61727","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"git-lfs","version":"0:3.7.1-4.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-61727","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-61727","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-61727","date":"2026-10-10","epss":0.00284,"percentile":0.1921}],"risk":0.1633,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-61727","description":"A flaw was found in the crypto/x509 package in the Go standard library. This vulnerability allows a certificate validation bypass via an excluded subdomain constraint in a certificated chain as it does not restrict the usage of wildcard SANs in the leaf certificate."},"relatedVulnerabilities":[{"id":"CVE-2025-61727","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-61727","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-61727","date":"2026-10-10","epss":0.00284,"percentile":0.1921}],"urls":["https://go.dev/cl/723900","https://go.dev/issue/76442","https://groups.google.com/g/golang-announce/c/8FJoBkPddm4","https://pkg.go.dev/vuln/GO-2025-4175"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-61727","description":"An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not prevent a leaf certificate from claiming the SAN *.example.com."}]},{"artifact":{"id":"d4d165231b963ffc","cpes":["cpe:2.3:a:redhat:pcre2:10.40-6.el9:*:*:*:*:*:*:*","cpe:2.3:a:pcre2:pcre2:10.40-6.el9:*:*:*:*:*:*:*"],"name":"pcre2","purl":"pkg:rpm/redhat/pcre2@10.40-6.el9?arch=x86_64&distro=rhel-9.8&upstream=pcre2-10.40-6.el9.src.rpm","type":"rpm","version":"10.40-6.el9","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-103111","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"pcre2","version":"0:10.40-6.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-103111","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L","metrics":{"baseScore":7.6,"impactScore":4.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-103111","cwe":"CWE-787","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-103111","date":"2026-10-10","epss":0.00214,"percentile":0.10858}],"risk":0.16157000000000002,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-103111","description":"A flaw was found in pcre2. When an application processes attacker-controlled regular expressions using certain Just-In-Time (JIT) compiler interfaces, an out-of-bounds write with arbitrary data can occur. An attacker could exploit this vulnerability to achieve arbitrary code execution, corrupt memory, or cause a denial of service (DoS)."},"relatedVulnerabilities":[{"id":"CVE-2026-103111","cvss":[{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L","metrics":{"baseScore":7.6,"impactScore":4.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-103111","cwe":"CWE-787","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-103111","date":"2026-10-10","epss":0.00214,"percentile":0.10858}],"urls":["https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-r9hj-j2rw-4q3m","https://lists.debian.org/debian-lts-announce/2026/10/msg00008.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-103111","description":"PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data."}]},{"artifact":{"id":"5717d3536e0a895a","cpes":["cpe:2.3:a:pcre2-syntax:pcre2-syntax:10.40-6.el9:*:*:*:*:*:*:*","cpe:2.3:a:pcre2-syntax:pcre2_syntax:10.40-6.el9:*:*:*:*:*:*:*","cpe:2.3:a:pcre2_syntax:pcre2-syntax:10.40-6.el9:*:*:*:*:*:*:*","cpe:2.3:a:pcre2_syntax:pcre2_syntax:10.40-6.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:pcre2-syntax:10.40-6.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:pcre2_syntax:10.40-6.el9:*:*:*:*:*:*:*","cpe:2.3:a:pcre2:pcre2-syntax:10.40-6.el9:*:*:*:*:*:*:*","cpe:2.3:a:pcre2:pcre2_syntax:10.40-6.el9:*:*:*:*:*:*:*"],"name":"pcre2-syntax","purl":"pkg:rpm/redhat/pcre2-syntax@10.40-6.el9?arch=noarch&distro=rhel-9.8&upstream=pcre2-10.40-6.el9.src.rpm","type":"rpm","version":"10.40-6.el9","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"pcre2","version":"10.40-6.el9"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-103111","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"pcre2","version":"10.40-6.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-103111","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L","metrics":{"baseScore":7.6,"impactScore":4.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-103111","cwe":"CWE-787","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-103111","date":"2026-10-10","epss":0.00214,"percentile":0.10858}],"risk":0.16157000000000002,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-103111","description":"A flaw was found in pcre2. When an application processes attacker-controlled regular expressions using certain Just-In-Time (JIT) compiler interfaces, an out-of-bounds write with arbitrary data can occur. An attacker could exploit this vulnerability to achieve arbitrary code execution, corrupt memory, or cause a denial of service (DoS)."},"relatedVulnerabilities":[{"id":"CVE-2026-103111","cvss":[{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L","metrics":{"baseScore":7.6,"impactScore":4.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-103111","cwe":"CWE-787","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-103111","date":"2026-10-10","epss":0.00214,"percentile":0.10858}],"urls":["https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-r9hj-j2rw-4q3m","https://lists.debian.org/debian-lts-announce/2026/10/msg00008.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-103111","description":"PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data."}]},{"artifact":{"id":"f5eb0651fec88df5","cpes":["cpe:2.3:a:com.fasterxml.jackson.core:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_databind:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.20.1:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.20.1:*:*:*:*:*:*:*"],"name":"jackson-databind","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1","type":"java-archive","version":"2.20.1","language":"java","licenses":["The Apache Software License, Version 2.0"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/opt/jenkins-plugin-manager.jar:com.fasterxml.jackson.core:jackson-databind","manifestName":"","pomArtifactID":"jackson-databind","archiveDigests":null},"locations":[{"path":"/opt/jenkins-plugin-manager.jar","layerID":"sha256:1303dd889187d7e25ac68bf0fb8d636f5a922b6753d092bcae3924d569cb869a","accessPath":"/opt/jenkins-plugin-manager.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.21.5"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-vvgp-rfg2-7rr6","versionConstraint":">=2.19.0,<2.21.5 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-databind","version":"2.20.1"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-vvgp-rfg2-7rr6","fix":{"state":"fixed","versions":["2.21.5"],"available":[{"date":"2026-09-29","kind":"first-observed","version":"2.21.5"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-77310","cwe":"CWE-918","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-77310","date":"2026-10-10","epss":0.00313,"percentile":0.22259}],"risk":0.161195,"urls":["https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-vvgp-rfg2-7rr6","https://nvd.nist.gov/vuln/detail/CVE-2026-77310","https://github.com/FasterXML/jackson-databind/pull/6058","https://github.com/FasterXML/jackson-databind/commit/2fc7bd9057dd051d7dea0e5fcad89822d0fa5ebd","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.9","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.5","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.1","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.5","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.1"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-vvgp-rfg2-7rr6","description":"jackson-databind: Incomplete fix for CVE-2026-54514: eager DNS resolution (SSRF) still present in InetAddress deserialization"},"relatedVulnerabilities":[{"id":"CVE-2026-77310","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-77310","cwe":"CWE-918","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-77310","date":"2026-10-10","epss":0.00313,"percentile":0.22259}],"urls":["https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-vvgp-rfg2-7rr6"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-77310","description":"jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. Prior to versions 2.18.9, 2.21.5, 2.22.1, 3.1.5, and 3.2.1 on their respective release lines, the java.net.InetAddress branch of FromStringDeserializer.Std._deserialize() calls InetAddress.getByName() on attacker-controlled input, causing eager DNS resolution during deserialization and enabling DNS-based server-side request forgery and internal-host enumeration. This issue is fixed in versions 2.18.9, 2.21.5, 2.22.1, 3.1.5, and 3.2.1."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-5535","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2023-5535","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-5535","cwe":"CWE-416","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2023-5535","date":"2026-10-10","epss":0.0051,"percentile":0.41764}],"risk":0.16065,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-5535","description":"A heap-based buffer overflow vulnerability was found in some affected packages of Vim. This flaw allows an attacker to send a specially crafted file that could lead to a complete system compromise when opened by a victim."},"relatedVulnerabilities":[{"id":"CVE-2023-5535","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-5535","cwe":"CWE-416","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2023-5535","date":"2026-10-10","epss":0.0051,"percentile":0.41764}],"urls":["https://github.com/vim/vim/commit/41e6f7d6ba67b61d911f9b1d76325cd79224753d","https://huntr.dev/bounties/2c2d85a7-1171-4014-bf7f-a2451745861f","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VDDWD25AZIHBAA44HQT75OWLQ5UMDKU3/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VGTVLUV7UCXXCZAIQIUCLG6JXAVYT3HE/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XPT7NMYJRLBPIALGSE24UWTY6F774GZW/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-5535","description":"Use After Free in GitHub repository vim/vim prior to v9.0.2010."}]},{"artifact":{"id":"cfb83fcea89d51fa","cpes":["cpe:2.3:a:redhat:glib2:2.68.4-19.el9_8.10:*:*:*:*:*:*:*","cpe:2.3:a:glib2:glib2:2.68.4-19.el9_8.10:*:*:*:*:*:*:*"],"name":"glib2","purl":"pkg:rpm/redhat/glib2@2.68.4-19.el9_8.10?arch=x86_64&distro=rhel-9.8&upstream=glib2-2.68.4-19.el9_8.10.src.rpm","type":"rpm","version":"2.68.4-19.el9_8.10","language":"","licenses":["LGPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-1484","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"glib2","version":"0:2.68.4-19.el9_8.10"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-1484","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":4.2,"impactScore":2.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-1484","cwe":"CWE-787","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-1484","date":"2026-10-10","epss":0.00346,"percentile":0.26203}],"risk":0.15916,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-1484","description":"A flaw was found in the GLib Base64 encoding routine when processing very large input data. Due to incorrect use of integer types during length calculation, the library may miscalculate buffer boundaries. This can cause memory writes outside the allocated buffer. Applications that process untrusted or extremely large Base64 input using GLib may crash or behave unpredictably."},"relatedVulnerabilities":[{"id":"CVE-2026-1484","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":4.2,"impactScore":2.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-1484","cwe":"CWE-787","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-1484","date":"2026-10-10","epss":0.00346,"percentile":0.26203}],"urls":["https://access.redhat.com/security/cve/CVE-2026-1484","https://bugzilla.redhat.com/show_bug.cgi?id=2433259","https://gitlab.gnome.org/GNOME/glib/-/issues/3870","https://cert-portal.siemens.com/productcert/html/ssa-253495.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-1484","description":"A flaw was found in the GLib Base64 encoding routine when processing very large input data. Due to incorrect use of integer types during length calculation, the library may miscalculate buffer boundaries. This can cause memory writes outside the allocated buffer. Applications that process untrusted or extremely large Base64 input using GLib may crash or behave unpredictably."}]},{"artifact":{"id":"1c27b1fc065b3d30","cpes":["cpe:2.3:a:python3-pip-wheel:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip-wheel:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip_wheel:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip_wheel:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3-pip:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3_pip:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3-pip-wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3_pip_wheel:21.3.1-2.el9_8:*:*:*:*:*:*:*"],"name":"python3-pip-wheel","purl":"pkg:rpm/redhat/python3-pip-wheel@21.3.1-2.el9_8?arch=noarch&distro=rhel-9.8&upstream=python-pip-21.3.1-2.el9_8.src.rpm","type":"rpm","version":"21.3.1-2.el9_8","language":"","licenses":["MIT and Python and ASL 2.0 and BSD and ISC and LGPLv2 and MPLv2.0 and (ASL 2.0 or BSD)"],"metadata":{"epoch":null,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python-pip","version":"21.3.1-2.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-13346","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"python-pip","version":"21.3.1-2.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-13346","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L","metrics":{"baseScore":5.9,"impactScore":4.8,"exploitabilityScore":1.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-13346","cwe":"CWE-36","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-13346","date":"2026-10-10","epss":0.00292,"percentile":0.20058}],"risk":0.15914,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-13346","description":"A flaw was found in pip. When processing doubly-encoded package URLs from malicious package indexes, pip incorrectly handles the file paths. A remote attacker could exploit this by convincing a user to download or install a package from such an index. This could allow for files to be installed to arbitrary locations on the system, potentially leading to system compromise. This vulnerability primarily affects users utilizing the `pip download` command with the `--only-binary` option."},"relatedVulnerabilities":[{"id":"CVE-2026-13346","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-13346","cwe":"CWE-36","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-13346","date":"2026-10-10","epss":0.00292,"percentile":0.20058}],"urls":["https://github.com/pypa/pip/pull/14110","https://mail.python.org/archives/list/security-announce@python.org/thread/L2BNQGGVQCEV7DROOORQ7WFKKFF2OOQX/","http://www.openwall.com/lists/oss-security/2026/07/29/7"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-13346","description":"pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels.\n\n\n\n\nThis vulnerability requires downloading or installing a package from a malicious package index to succeed, malicious packages alone are not able to exploit this vulnerability. Note that this vulnerability only materially impacts users running `pip download` with the `--only-binary` option as installing source distributions from an untrusted index is already an unsafe operation that executes code during install time."}]},{"artifact":{"id":"cfb83fcea89d51fa","cpes":["cpe:2.3:a:redhat:glib2:2.68.4-19.el9_8.10:*:*:*:*:*:*:*","cpe:2.3:a:glib2:glib2:2.68.4-19.el9_8.10:*:*:*:*:*:*:*"],"name":"glib2","purl":"pkg:rpm/redhat/glib2@2.68.4-19.el9_8.10?arch=x86_64&distro=rhel-9.8&upstream=glib2-2.68.4-19.el9_8.10.src.rpm","type":"rpm","version":"2.68.4-19.el9_8.10","language":"","licenses":["LGPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-3360","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"glib2","version":"0:2.68.4-19.el9_8.10"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-3360","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-3360","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-3360","date":"2026-10-10","epss":0.00475,"percentile":0.39159}],"risk":0.159125,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-3360","description":"A flaw was found in GLib. An integer overflow and buffer under-read occur when parsing a long invalid ISO 8601 timestamp with the g_date_time_new_from_iso8601() function."},"relatedVulnerabilities":[{"id":"CVE-2025-3360","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-3360","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-3360","date":"2026-10-10","epss":0.00475,"percentile":0.39159}],"urls":["https://access.redhat.com/security/cve/CVE-2025-3360","https://bugzilla.redhat.com/show_bug.cgi?id=2357754","https://gitlab.gnome.org/GNOME/glib/-/issues/3647","https://lists.debian.org/debian-lts-announce/2025/04/msg00024.html","https://gitlab.gnome.org/GNOME/glib/-/work_items/3647"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-3360","description":"A flaw was found in GLib. An integer overflow and buffer under-read occur when parsing a long invalid ISO 8601 timestamp with the g_date_time_new_from_iso8601() function."}]},{"artifact":{"id":"ac92e4b914d0f365","cpes":["cpe:2.3:a:gnutls:gnutls:3.8.10-8.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:gnutls:3.8.10-8.el9_8:*:*:*:*:*:*:*"],"name":"gnutls","purl":"pkg:rpm/redhat/gnutls@3.8.10-8.el9_8?arch=x86_64&distro=rhel-9.8&upstream=gnutls-3.8.10-8.el9_8.src.rpm","type":"rpm","version":"3.8.10-8.el9_8","language":"","licenses":["GPLv3+ and LGPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-88647","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"gnutls","version":"0:3.8.10-8.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-88647","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-88647","cwe":"CWE-297","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-88647","date":"2026-10-10","epss":0.00212,"percentile":0.10573}],"risk":0.15794,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-88647","description":"A flaw was found in GnuTLS. This vulnerability can lead to information disclosure by allowing an attacker to bypass certificate hostname verification. A remote attacker presenting a crafted certificate can circumvent the Common Name fallback check, enabling them to eavesdrop on or intercept encrypted network communications."},"relatedVulnerabilities":[{"id":"CVE-2026-88647","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-88647","cwe":"CWE-297","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-88647","date":"2026-10-10","epss":0.00212,"percentile":0.10573}],"urls":["https://gist.github.com/lkloliver/f98ec3de1a871fdfc02b70b8b9ba7642","https://gitlab.com/gnutls/gnutls/-/issues/1802"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-88647","description":"A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mechanism and eavesdrop on communications via a crafted certificate."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1215","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-1215","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.8,"impactScore":1.5,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1215","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1215","date":"2026-10-10","epss":0.00541,"percentile":0.4384}],"risk":0.15688999999999997,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-1215","description":"A flaw was found in Vim. A local user may be able to trigger memory corruption by using the `--log` option with a non-existent path, which can lead to an application crash or other undefined behavior."},"relatedVulnerabilities":[{"id":"CVE-2025-1215","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.4},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.8,"impactScore":1.5,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","metrics":{"baseScore":1.7,"impactScore":2.9,"exploitabilityScore":3.2},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1215","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1215","date":"2026-10-10","epss":0.00541,"percentile":0.4384}],"urls":["https://github.com/vim/vim/commit/c5654b84480822817bb7b69ebc97c174c91185e9","https://github.com/vim/vim/issues/16606","https://github.com/vim/vim/releases/tag/v9.1.1097","https://vuldb.com/?ctiid.295174","https://vuldb.com/?id.295174","https://vuldb.com/?submit.497546","https://security.netapp.com/advisory/ntap-20250321-0005/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1215","description":"A vulnerability classified as problematic was found in vim up to 9.1.1096. This vulnerability affects unknown code of the file src/main.c. The manipulation of the argument --log leads to memory corruption. It is possible to launch the attack on the local host. Upgrading to version 9.1.1097 is able to address this issue. The patch is identified as c5654b84480822817bb7b69ebc97c174c91185e9. It is recommended to upgrade the affected component."}]},{"artifact":{"id":"78cb8909707e798d","cpes":["cpe:2.3:a:tpm2-tss:tpm2-tss:3.2.3-1.el9:*:*:*:*:*:*:*","cpe:2.3:a:tpm2-tss:tpm2_tss:3.2.3-1.el9:*:*:*:*:*:*:*","cpe:2.3:a:tpm2_tss:tpm2-tss:3.2.3-1.el9:*:*:*:*:*:*:*","cpe:2.3:a:tpm2_tss:tpm2_tss:3.2.3-1.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:tpm2-tss:3.2.3-1.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:tpm2_tss:3.2.3-1.el9:*:*:*:*:*:*:*","cpe:2.3:a:tpm2:tpm2-tss:3.2.3-1.el9:*:*:*:*:*:*:*","cpe:2.3:a:tpm2:tpm2_tss:3.2.3-1.el9:*:*:*:*:*:*:*"],"name":"tpm2-tss","purl":"pkg:rpm/redhat/tpm2-tss@3.2.3-1.el9?arch=x86_64&distro=rhel-9.8&upstream=tpm2-tss-3.2.3-1.el9.src.rpm","type":"rpm","version":"3.2.3-1.el9","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-29040","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"tpm2-tss","version":"0:3.2.3-1.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2024-29040","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.4,"impactScore":2.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-29040","cwe":"CWE-502","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-29040","date":"2026-10-10","epss":0.00327,"percentile":0.23854}],"risk":0.15369000000000002,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2024-29040","description":"A flaw was found in the tpm2-tss package, where it was not checked to see if the magic number in the attest is equal to the TPM2_GENERATED_VALUE. This flaw allows an attacker to generate arbitrary quote data, which may not be detected by Fapi_VerifyQuote."},"relatedVulnerabilities":[{"id":"CVE-2024-29040","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-29040","cwe":"CWE-502","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-29040","date":"2026-10-10","epss":0.00327,"percentile":0.23854}],"urls":["https://github.com/tpm2-software/tpm2-tss/releases/tag/4.1.0","https://github.com/tpm2-software/tpm2-tss/security/advisories/GHSA-837m-jw3m-h9p6","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EFR7SVEWCOXORHPCLLGXEMHFMIGG2MFE/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GI4JFEZBKQQUPJ4RWK6IHEWXAFCEJDPI/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-29040","description":"This repository hosts source code implementing the Trusted Computing Group's (TCG) TPM2 Software Stack (TSS). The JSON Quote Info returned by Fapi_Quote has to be deserialized by Fapi_VerifyQuote to the TPM Structure `TPMS_ATTEST`. For the field `TPM2_GENERATED magic` of this structure any number can be used in the JSON structure. The verifier can receive a state which does not represent the actual, possibly malicious state of the device under test. The malicious device might get access to data it shouldn't, or can use services it shouldn't be able to. This \nissue has been patched in version 4.1.0."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-2845","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-2845","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.8,"impactScore":1.5,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2845","cwe":"CWE-1284","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-2845","cwe":"CWE-1284","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-2845","date":"2026-10-10","epss":0.00528,"percentile":0.43003}],"risk":0.15311999999999998,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-2845","description":"Improper Validation of Specified Quantity in Input in GitHub repository vim/vim prior to 9.0.0218."},"relatedVulnerabilities":[{"id":"CVE-2022-2845","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2845","cwe":"CWE-1284","type":"Secondary","source":"security@huntr.dev"},{"cve":"CVE-2022-2845","cwe":"CWE-1284","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-2845","date":"2026-10-10","epss":0.00528,"percentile":0.43003}],"urls":["https://github.com/vim/vim/commit/e98c88c44c308edaea5994b8ad4363e65030968c","https://huntr.dev/bounties/3e1d31ac-1cfd-4a9f-bc5c-213376b69445","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C72HDIMR3KTTAO7QGTXWUMPBNFUFIBRD/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWOJOA7PZZAMBI5GFTL6PWHXMWSDLUXL/","https://security.gentoo.org/glsa/202305-16"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-2845","description":"Improper Validation of Specified Quantity in Input in GitHub repository vim/vim prior to 9.0.0218."}]},{"artifact":{"id":"23e3d9feac1cb13c","cpes":["cpe:2.3:a:libgcc:libgcc:11.5.0-14.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libgcc:11.5.0-14.el9:*:*:*:*:*:*:*"],"name":"libgcc","purl":"pkg:rpm/redhat/libgcc@11.5.0-14.el9?arch=x86_64&distro=rhel-9.8&upstream=gcc-11.5.0-14.el9.src.rpm","type":"rpm","version":"11.5.0-14.el9","language":"","licenses":["GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"gcc","version":"11.5.0-14.el9"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-102010","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"gcc","version":"11.5.0-14.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-102010","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-10-10","epss":0.0025,"percentile":0.14985}],"risk":0.15,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."},"relatedVulnerabilities":[{"id":"CVE-2026-102010","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-10-10","epss":0.0025,"percentile":0.14985}],"urls":["https://access.redhat.com/errata/RHSA-2026:73642","https://access.redhat.com/errata/RHSA-2026:74569","https://access.redhat.com/security/cve/CVE-2026-102010","https://bugzilla.redhat.com/show_bug.cgi?id=2478395"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."}]},{"artifact":{"id":"c43da072cb8484d1","cpes":["cpe:2.3:a:libgomp:libgomp:11.5.0-14.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libgomp:11.5.0-14.el9:*:*:*:*:*:*:*"],"name":"libgomp","purl":"pkg:rpm/redhat/libgomp@11.5.0-14.el9?arch=x86_64&distro=rhel-9.8&upstream=gcc-11.5.0-14.el9.src.rpm","type":"rpm","version":"11.5.0-14.el9","language":"","licenses":["GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"gcc","version":"11.5.0-14.el9"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-102010","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"gcc","version":"11.5.0-14.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-102010","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-10-10","epss":0.0025,"percentile":0.14985}],"risk":0.15,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."},"relatedVulnerabilities":[{"id":"CVE-2026-102010","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-10-10","epss":0.0025,"percentile":0.14985}],"urls":["https://access.redhat.com/errata/RHSA-2026:73642","https://access.redhat.com/errata/RHSA-2026:74569","https://access.redhat.com/security/cve/CVE-2026-102010","https://bugzilla.redhat.com/show_bug.cgi?id=2478395"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."}]},{"artifact":{"id":"62a2970ccab3dd86","cpes":["cpe:2.3:a:libstdc\\+\\+:libstdc\\+\\+:11.5.0-14.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libstdc\\+\\+:11.5.0-14.el9:*:*:*:*:*:*:*"],"name":"libstdc++","purl":"pkg:rpm/redhat/libstdc%2B%2B@11.5.0-14.el9?arch=x86_64&distro=rhel-9.8&upstream=gcc-11.5.0-14.el9.src.rpm","type":"rpm","version":"11.5.0-14.el9","language":"","licenses":["GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"gcc","version":"11.5.0-14.el9"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-102010","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"gcc","version":"11.5.0-14.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-102010","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-10-10","epss":0.0025,"percentile":0.14985}],"risk":0.15,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."},"relatedVulnerabilities":[{"id":"CVE-2026-102010","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-10-10","epss":0.0025,"percentile":0.14985}],"urls":["https://access.redhat.com/errata/RHSA-2026:73642","https://access.redhat.com/errata/RHSA-2026:74569","https://access.redhat.com/security/cve/CVE-2026-102010","https://bugzilla.redhat.com/show_bug.cgi?id=2478395"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."}]},{"artifact":{"id":"406b3abfffe1d292","cpes":["cpe:2.3:a:git-lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git-lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git_lfs:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git-lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:git:git_lfs:3.7.1-4.el9_8.3:*:*:*:*:*:*:*"],"name":"git-lfs","purl":"pkg:rpm/redhat/git-lfs@3.7.1-4.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=git-lfs-3.7.1-4.el9_8.3.src.rpm","type":"rpm","version":"3.7.1-4.el9_8.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-22866","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"git-lfs","version":"0:3.7.1-4.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-22866","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2025-22866","date":"2026-10-10","epss":0.0029,"percentile":0.19808}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-22866","description":"A flaw was found in the Golang crypto/internal/nistec package. Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Considering how this function is used, this leakage is likely insufficient to recover the private key when P-256 is used in any well-known protocols."},"relatedVulnerabilities":[{"id":"CVE-2025-22866","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":4,"impactScore":1.5,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2025-22866","date":"2026-10-10","epss":0.0029,"percentile":0.19808}],"urls":["https://go.dev/cl/643735","https://go.dev/issue/71383","https://groups.google.com/g/golang-announce/c/xU1ZCHUZw3k","https://pkg.go.dev/vuln/GO-2025-3447","https://security.netapp.com/advisory/ntap-20250221-0002/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-22866","description":"Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way this function is used, we do not believe this leakage is enough to allow recovery of the private key when P-256 is used in any well known protocols."}]},{"artifact":{"id":"d4d165231b963ffc","cpes":["cpe:2.3:a:redhat:pcre2:10.40-6.el9:*:*:*:*:*:*:*","cpe:2.3:a:pcre2:pcre2:10.40-6.el9:*:*:*:*:*:*:*"],"name":"pcre2","purl":"pkg:rpm/redhat/pcre2@10.40-6.el9?arch=x86_64&distro=rhel-9.8&upstream=pcre2-10.40-6.el9.src.rpm","type":"rpm","version":"10.40-6.el9","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-89157","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"pcre2","version":"0:10.40-6.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-89157","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-89157","cwe":"CWE-190","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-89157","date":"2026-10-10","epss":0.00278,"percentile":0.1863}],"risk":0.14873,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-89157","description":"A flaw was found in PCRE2. On 32-bit platforms, an attacker can provide a specially crafted large pattern, leading to an out-of-bounds write within the pcre2_pattern_convert function. This vulnerability can result in high integrity impact, such as data corruption, and potentially a low availability impact, causing a denial of service."},"relatedVulnerabilities":[{"id":"CVE-2026-89157","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-89157","cwe":"CWE-190","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-89157","date":"2026-10-10","epss":0.00278,"percentile":0.1863}],"urls":["https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48","https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-q8g2-wprr-34m9"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-89157","description":"PCRE2 before 10.48, on 32-bit platforms, has a pcre2_pattern_convert out-of-bounds write when an attacker can provide a large pattern."}]},{"artifact":{"id":"5717d3536e0a895a","cpes":["cpe:2.3:a:pcre2-syntax:pcre2-syntax:10.40-6.el9:*:*:*:*:*:*:*","cpe:2.3:a:pcre2-syntax:pcre2_syntax:10.40-6.el9:*:*:*:*:*:*:*","cpe:2.3:a:pcre2_syntax:pcre2-syntax:10.40-6.el9:*:*:*:*:*:*:*","cpe:2.3:a:pcre2_syntax:pcre2_syntax:10.40-6.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:pcre2-syntax:10.40-6.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:pcre2_syntax:10.40-6.el9:*:*:*:*:*:*:*","cpe:2.3:a:pcre2:pcre2-syntax:10.40-6.el9:*:*:*:*:*:*:*","cpe:2.3:a:pcre2:pcre2_syntax:10.40-6.el9:*:*:*:*:*:*:*"],"name":"pcre2-syntax","purl":"pkg:rpm/redhat/pcre2-syntax@10.40-6.el9?arch=noarch&distro=rhel-9.8&upstream=pcre2-10.40-6.el9.src.rpm","type":"rpm","version":"10.40-6.el9","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"pcre2","version":"10.40-6.el9"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-89157","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"pcre2","version":"10.40-6.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-89157","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-89157","cwe":"CWE-190","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-89157","date":"2026-10-10","epss":0.00278,"percentile":0.1863}],"risk":0.14873,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-89157","description":"A flaw was found in PCRE2. On 32-bit platforms, an attacker can provide a specially crafted large pattern, leading to an out-of-bounds write within the pcre2_pattern_convert function. This vulnerability can result in high integrity impact, such as data corruption, and potentially a low availability impact, causing a denial of service."},"relatedVulnerabilities":[{"id":"CVE-2026-89157","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-89157","cwe":"CWE-190","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-89157","date":"2026-10-10","epss":0.00278,"percentile":0.1863}],"urls":["https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48","https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-q8g2-wprr-34m9"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-89157","description":"PCRE2 before 10.48, on 32-bit platforms, has a pcre2_pattern_convert out-of-bounds write when an attacker can provide a large pattern."}]},{"artifact":{"id":"cfb83fcea89d51fa","cpes":["cpe:2.3:a:redhat:glib2:2.68.4-19.el9_8.10:*:*:*:*:*:*:*","cpe:2.3:a:glib2:glib2:2.68.4-19.el9_8.10:*:*:*:*:*:*:*"],"name":"glib2","purl":"pkg:rpm/redhat/glib2@2.68.4-19.el9_8.10?arch=x86_64&distro=rhel-9.8&upstream=glib2-2.68.4-19.el9_8.10.src.rpm","type":"rpm","version":"2.68.4-19.el9_8.10","language":"","licenses":["LGPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-0988","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"glib2","version":"0:2.68.4-19.el9_8.10"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-0988","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-0988","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-0988","date":"2026-10-10","epss":0.00441,"percentile":0.36376}],"risk":0.14773499999999998,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-0988","description":"A flaw was found in glib. Missing validation of offset and count parameters in the g_buffered_input_stream_peek() function can lead to an integer overflow during length calculation. When specially crafted values are provided, this overflow results in an incorrect size being passed to memcpy(), triggering a buffer overflow. This can cause application crashes, leading to a Denial of Service (DoS)."},"relatedVulnerabilities":[{"id":"CVE-2026-0988","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-0988","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-0988","date":"2026-10-10","epss":0.00441,"percentile":0.36376}],"urls":["https://access.redhat.com/errata/RHSA-2026:7461","https://access.redhat.com/security/cve/CVE-2026-0988","https://bugzilla.redhat.com/show_bug.cgi?id=2429886","https://gitlab.gnome.org/GNOME/glib/-/issues/3851"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-0988","description":"A flaw was found in glib. Missing validation of offset and count parameters in the g_buffered_input_stream_peek() function can lead to an integer overflow during length calculation. When specially crafted values are provided, this overflow results in an incorrect size being passed to memcpy(), triggering a buffer overflow. This can cause application crashes, leading to a Denial of Service (DoS)."}]},{"artifact":{"id":"1c9a349fe96f859f","cpes":["cpe:2.3:a:sqlite-libs:sqlite-libs:3.34.1-11.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:sqlite-libs:sqlite_libs:3.34.1-11.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite-libs:3.34.1-11.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:sqlite_libs:sqlite_libs:3.34.1-11.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:sqlite-libs:3.34.1-11.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:sqlite_libs:3.34.1-11.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite-libs:3.34.1-11.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite_libs:3.34.1-11.el9_8:*:*:*:*:*:*:*"],"name":"sqlite-libs","purl":"pkg:rpm/redhat/sqlite-libs@3.34.1-11.el9_8?arch=x86_64&distro=rhel-9.8&upstream=sqlite-3.34.1-11.el9_8.src.rpm","type":"rpm","version":"3.34.1-11.el9_8","language":"","licenses":["Public Domain"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"sqlite","version":"3.34.1-11.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-0232","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"sqlite","version":"3.34.1-11.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2024-0232","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-0232","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2024-0232","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-0232","date":"2026-10-10","epss":0.00381,"percentile":0.30062}],"risk":0.146685,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2024-0232","description":"A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray() function in sqlite3.c. This flaw allows a local attacker to leverage a victim to pass specially crafted malicious input to the application, potentially causing a crash and leading to a denial of service."},"relatedVulnerabilities":[{"id":"CVE-2024-0232","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-0232","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2024-0232","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-0232","date":"2026-10-10","epss":0.00381,"percentile":0.30062}],"urls":["https://access.redhat.com/security/cve/CVE-2024-0232","https://bugzilla.redhat.com/show_bug.cgi?id=2243754","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QDCMYQ3J45NHQ4EJREM3BJNNKB5BK4Y7/","https://security.netapp.com/advisory/ntap-20240315-0007/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-0232","description":"A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray() function in sqlite3.c. This flaw allows a local attacker to leverage a victim to pass specially crafted malicious input to the application, potentially causing a crash and leading to a denial of service."}]},{"artifact":{"id":"73ec63868795f316","cpes":["cpe:2.3:a:openssl:openssl:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:rpm/redhat/openssl@3.5.8-1.el9_8?arch=x86_64&distro=rhel-9.8&epoch=1&upstream=openssl-3.5.8-1.el9_8.src.rpm","type":"rpm","version":"1:3.5.8-1.el9_8","language":"","licenses":["Apache-2.0"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-72897","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"openssl","version":"1:3.5.8-1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-72897","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-72897","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-72897","date":"2026-10-10","epss":0.00266,"percentile":0.16995}],"risk":0.14497000000000002,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-72897","description":"A flaw was found in openssl. When a server replaces its security context during an active Transport Layer Security (TLS) handshake, it fails to update the internal capacity tracking for cryptographic signature algorithms. A remote peer can exploit this issue by advertising specific signature algorithms, causing out-of-bounds memory reads and writes on the server heap. This vulnerability can corrupt internal memory and terminate the process, resulting in a Denial of Service (DoS)."},"relatedVulnerabilities":[{"id":"CVE-2026-72897","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-72897","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-72897","date":"2026-10-10","epss":0.00266,"percentile":0.16995}],"urls":["https://github.com/openssl/openssl/commit/00646e5085a0d12d29e0d2f9b9bc5f7111a50922","https://github.com/openssl/openssl/commit/4135f553c9d3ba4a09fe752f5d30af2a6a092b2e","https://github.com/openssl/openssl/commit/9c54d209486f6b1ad79fe2179c40f13200fa4f61","https://github.com/openssl/openssl/commit/e87ed26b298a74d8ba61a53e9c7bcd1acac6b814","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-72897","description":"Issue summary: A TLS server that calls SSL_set_SSL_CTX() to switch a\nconnection to a different SSL_CTX part way through a handshake may access\nmemory beyond the end of an internal array if the replacement context knows\nabout more provider signature algorithms than the context the connection was\ncreated from. Applications which never call SSL_set_SSL_CTX() are not\naffected.\n\nImpact summary: A remote peer may be able to cause a small out-of-bounds\nread, and in some circumstances a fixed-value out-of-bounds write, on the\nserver heap. This may lead to a Denial of Service.\n\nCWE: CWE-787: Out-of-bounds Write\n\nDescription: A TLS connection records how many certificate slots it has\nwhen it is created, taken from the SSL_CTX that created it: the built-in\ncertificate types plus one slot for each provider TLS-SIGALG entry that\ncontext was aware of. That count sizes an internal array of per-slot\ncertificate validity flags.\n\nAn application may replace a connection's SSL_CTX part way through the\nhandshake by calling SSL_set_SSL_CTX(), most commonly from a servername\ncallback in order to serve a different virtual host. Doing so did not\nrefresh the recorded count. A provider signature algorithm's slot index is\nits position in the list of whichever context resolves it, so if the\nreplacement context is aware of more of them than the original, an\nalgorithm offered by the peer can resolve to an index beyond the end of the\narray. Processing the peer's signature algorithms then reads one four byte\nword past the end for each such algorithm and, where the word read is zero,\nwrites a fixed value over it. A peer offering many of them can corrupt heap\nmetadata and abort the process.\n\nOnly provider signature algorithms which occupy one of the excess slots,\nand which the server also has configured, have this effect. Codepoints the\nreplacement context does not recognise are discarded without being resolved\nto a slot, and provider signature algorithms are usable only from TLS 1.3.\n\nThe two contexts must therefore be aware of different numbers of provider\nsignature algorithms, which requires separate library contexts, a provider\nloaded between the two being created, or providers which differ in what\nthey advertise - in 4.0, for example, the default provider advertises SM2\nwhere the FIPS provider does not. A deployment meeting the condition is\nalso unable to negotiate the affected algorithms with legitimate clients,\nsince the same stale count hides the corresponding certificates, so the\nmisconfiguration is likely to be noticed. For that reason, and because the\nconfiguration is not the default, this issue has been assessed as Low\nseverity.\n\nFIPS impact: no\nNo FIPS modules are affected by this issue as the affected code is outside\nthe OpenSSL FIPS module boundary."}]},{"artifact":{"id":"753337be7fe19d16","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/redhat/openssl-libs@3.5.8-1.el9_8?arch=x86_64&distro=rhel-9.8&epoch=1&upstream=openssl-3.5.8-1.el9_8.src.rpm","type":"rpm","version":"1:3.5.8-1.el9_8","language":"","licenses":["Apache-2.0"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"3.5.8-1.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-72897","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"openssl","version":"3.5.8-1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-72897","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-72897","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-72897","date":"2026-10-10","epss":0.00266,"percentile":0.16995}],"risk":0.14497000000000002,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-72897","description":"A flaw was found in openssl. When a server replaces its security context during an active Transport Layer Security (TLS) handshake, it fails to update the internal capacity tracking for cryptographic signature algorithms. A remote peer can exploit this issue by advertising specific signature algorithms, causing out-of-bounds memory reads and writes on the server heap. This vulnerability can corrupt internal memory and terminate the process, resulting in a Denial of Service (DoS)."},"relatedVulnerabilities":[{"id":"CVE-2026-72897","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-72897","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-72897","date":"2026-10-10","epss":0.00266,"percentile":0.16995}],"urls":["https://github.com/openssl/openssl/commit/00646e5085a0d12d29e0d2f9b9bc5f7111a50922","https://github.com/openssl/openssl/commit/4135f553c9d3ba4a09fe752f5d30af2a6a092b2e","https://github.com/openssl/openssl/commit/9c54d209486f6b1ad79fe2179c40f13200fa4f61","https://github.com/openssl/openssl/commit/e87ed26b298a74d8ba61a53e9c7bcd1acac6b814","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-72897","description":"Issue summary: A TLS server that calls SSL_set_SSL_CTX() to switch a\nconnection to a different SSL_CTX part way through a handshake may access\nmemory beyond the end of an internal array if the replacement context knows\nabout more provider signature algorithms than the context the connection was\ncreated from. Applications which never call SSL_set_SSL_CTX() are not\naffected.\n\nImpact summary: A remote peer may be able to cause a small out-of-bounds\nread, and in some circumstances a fixed-value out-of-bounds write, on the\nserver heap. This may lead to a Denial of Service.\n\nCWE: CWE-787: Out-of-bounds Write\n\nDescription: A TLS connection records how many certificate slots it has\nwhen it is created, taken from the SSL_CTX that created it: the built-in\ncertificate types plus one slot for each provider TLS-SIGALG entry that\ncontext was aware of. That count sizes an internal array of per-slot\ncertificate validity flags.\n\nAn application may replace a connection's SSL_CTX part way through the\nhandshake by calling SSL_set_SSL_CTX(), most commonly from a servername\ncallback in order to serve a different virtual host. Doing so did not\nrefresh the recorded count. A provider signature algorithm's slot index is\nits position in the list of whichever context resolves it, so if the\nreplacement context is aware of more of them than the original, an\nalgorithm offered by the peer can resolve to an index beyond the end of the\narray. Processing the peer's signature algorithms then reads one four byte\nword past the end for each such algorithm and, where the word read is zero,\nwrites a fixed value over it. A peer offering many of them can corrupt heap\nmetadata and abort the process.\n\nOnly provider signature algorithms which occupy one of the excess slots,\nand which the server also has configured, have this effect. Codepoints the\nreplacement context does not recognise are discarded without being resolved\nto a slot, and provider signature algorithms are usable only from TLS 1.3.\n\nThe two contexts must therefore be aware of different numbers of provider\nsignature algorithms, which requires separate library contexts, a provider\nloaded between the two being created, or providers which differ in what\nthey advertise - in 4.0, for example, the default provider advertises SM2\nwhere the FIPS provider does not. A deployment meeting the condition is\nalso unable to negotiate the affected algorithms with legitimate clients,\nsince the same stale count hides the corresponding certificates, so the\nmisconfiguration is likely to be noticed. For that reason, and because the\nconfiguration is not the default, this issue has been assessed as Low\nseverity.\n\nFIPS impact: no\nNo FIPS modules are affected by this issue as the affected code is outside\nthe OpenSSL FIPS module boundary."}]},{"artifact":{"id":"73ec63868795f316","cpes":["cpe:2.3:a:openssl:openssl:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:rpm/redhat/openssl@3.5.8-1.el9_8?arch=x86_64&distro=rhel-9.8&epoch=1&upstream=openssl-3.5.8-1.el9_8.src.rpm","type":"rpm","version":"1:3.5.8-1.el9_8","language":"","licenses":["Apache-2.0"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-54872","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"openssl","version":"1:3.5.8-1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-54872","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54872","cwe":"CWE-208","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-54872","date":"2026-10-10","epss":0.00263,"percentile":0.16636}],"risk":0.14333500000000002,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-54872","description":"A flaw was found in OpenSSL. A timing side-channel vulnerability in generic elliptic curve scalar multiplication allows an attacker to recover private cryptographic keys. When performing signature operations, such as the Elliptic Curve Digital Signature Algorithm (ECDSA) or SM2, using curves without dedicated constant-time implementations, variations in processing time leak information about the per-signature secret value. By measuring the duration of numerous signing operations, an attacker can analyze these timing differences to reconstruct the private signing key."},"relatedVulnerabilities":[{"id":"CVE-2026-54872","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54872","cwe":"CWE-208","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-54872","date":"2026-10-10","epss":0.00263,"percentile":0.16636}],"urls":["https://github.com/openssl/openssl/commit/1a5bee8dc57430a2be69cd1ffe7fec6a62f4f179","https://github.com/openssl/openssl/commit/3f7e1363dccec6f7732bb9e9fa471bb6e4aa68cb","https://github.com/openssl/openssl/commit/7d83bc7764999dfd91b83b4f0815b45390422afd","https://github.com/openssl/openssl/commit/8166827a78aad164a07aa86dea2b425403ced471","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-54872","description":"Issue summary: The generic elliptic-curve scalar multiplication used for\nECDSA and SM2 signature operations with curves that do not have a dedicated\nimplementation leaks information about the secret nonce through timing.\n\nImpact summary: An attacker able to measure signing times may learn\ninformation about the per-signature secret nonce, which over many signatures\ncan, via a lattice / Hidden Number Problem attack, lead to recovery of the\nprivate key.\n\nCWE: CWE-208: Observable Timing Discrepancy\n\nDescription: The generic elliptic-curve scalar multiplication used for\ncurves that do not have a dedicated constant-time implementation pads the\nsecret scalar with non-constant-time BIGNUM operations, so the time taken\ndepends on the value of the secret scalar derived from the ECDSA and SM2 nonce.\n\nThe leak is very small; observing it requires a large number of\nmeasurements. The effect is largest for curves whose group order lies\non a machine-word boundary, such as brainpoolP384r1.\n\nApplications using ECDSA signing over the Brainpool and other generic prime\ncurves, and SM2 signing on platforms that use the generic implementation,\nare vulnerable to this issue.\n\nThe NIST curves P-256, P-384 and P-521 use dedicated constant-time\nimplementations and are not affected.\n\nFIPS Impact: no\nThe FIPS modules are not affected: the approved NIST curves used in the FIPS\nprovider have dedicated constant-time implementations and do not use the\naffected code path."}]},{"artifact":{"id":"753337be7fe19d16","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/redhat/openssl-libs@3.5.8-1.el9_8?arch=x86_64&distro=rhel-9.8&epoch=1&upstream=openssl-3.5.8-1.el9_8.src.rpm","type":"rpm","version":"1:3.5.8-1.el9_8","language":"","licenses":["Apache-2.0"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"3.5.8-1.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-54872","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"openssl","version":"3.5.8-1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-54872","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54872","cwe":"CWE-208","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-54872","date":"2026-10-10","epss":0.00263,"percentile":0.16636}],"risk":0.14333500000000002,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-54872","description":"A flaw was found in OpenSSL. A timing side-channel vulnerability in generic elliptic curve scalar multiplication allows an attacker to recover private cryptographic keys. When performing signature operations, such as the Elliptic Curve Digital Signature Algorithm (ECDSA) or SM2, using curves without dedicated constant-time implementations, variations in processing time leak information about the per-signature secret value. By measuring the duration of numerous signing operations, an attacker can analyze these timing differences to reconstruct the private signing key."},"relatedVulnerabilities":[{"id":"CVE-2026-54872","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54872","cwe":"CWE-208","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-54872","date":"2026-10-10","epss":0.00263,"percentile":0.16636}],"urls":["https://github.com/openssl/openssl/commit/1a5bee8dc57430a2be69cd1ffe7fec6a62f4f179","https://github.com/openssl/openssl/commit/3f7e1363dccec6f7732bb9e9fa471bb6e4aa68cb","https://github.com/openssl/openssl/commit/7d83bc7764999dfd91b83b4f0815b45390422afd","https://github.com/openssl/openssl/commit/8166827a78aad164a07aa86dea2b425403ced471","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-54872","description":"Issue summary: The generic elliptic-curve scalar multiplication used for\nECDSA and SM2 signature operations with curves that do not have a dedicated\nimplementation leaks information about the secret nonce through timing.\n\nImpact summary: An attacker able to measure signing times may learn\ninformation about the per-signature secret nonce, which over many signatures\ncan, via a lattice / Hidden Number Problem attack, lead to recovery of the\nprivate key.\n\nCWE: CWE-208: Observable Timing Discrepancy\n\nDescription: The generic elliptic-curve scalar multiplication used for\ncurves that do not have a dedicated constant-time implementation pads the\nsecret scalar with non-constant-time BIGNUM operations, so the time taken\ndepends on the value of the secret scalar derived from the ECDSA and SM2 nonce.\n\nThe leak is very small; observing it requires a large number of\nmeasurements. The effect is largest for curves whose group order lies\non a machine-word boundary, such as brainpoolP384r1.\n\nApplications using ECDSA signing over the Brainpool and other generic prime\ncurves, and SM2 signing on platforms that use the generic implementation,\nare vulnerable to this issue.\n\nThe NIST curves P-256, P-384 and P-521 use dedicated constant-time\nimplementations and are not affected.\n\nFIPS Impact: no\nThe FIPS modules are not affected: the approved NIST curves used in the FIPS\nprovider have dedicated constant-time implementations and do not use the\naffected code path."}]},{"artifact":{"id":"73ec63868795f316","cpes":["cpe:2.3:a:openssl:openssl:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:rpm/redhat/openssl@3.5.8-1.el9_8?arch=x86_64&distro=rhel-9.8&epoch=1&upstream=openssl-3.5.8-1.el9_8.src.rpm","type":"rpm","version":"1:3.5.8-1.el9_8","language":"","licenses":["Apache-2.0"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-54875","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"openssl","version":"1:3.5.8-1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-54875","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54875","cwe":"CWE-208","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-54875","date":"2026-10-10","epss":0.00294,"percentile":0.20215}],"risk":0.14259,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-54875","description":"A flaw was found in OpenSSL. The optimized scalar point multiplication used for SM2 cryptographic operations on ARM64 and RISC-V architectures does not execute in constant time. An attacker capable of measuring execution times or observing processor cache-access patterns can exploit this side channel during decryption or digital signature generation. This vulnerability allows the attacker to deduce sensitive private keys or signature nonces, leading to information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-54875","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54875","cwe":"CWE-208","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-54875","date":"2026-10-10","epss":0.00294,"percentile":0.20215}],"urls":["https://github.com/openssl/openssl/commit/3f01bbc28f7e08211fcdc797fd43816504f94257","https://github.com/openssl/openssl/commit/469f3e42629f4a0b5631796e20c66c92c138a3e8","https://github.com/openssl/openssl/commit/9794ed473764839275cb701b4850f3c24d929c28","https://github.com/openssl/openssl/commit/dddad955d5ff3e9507619cf4e0f13e9988e2197c","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-54875","description":"Issue summary: A non-constant-time optimized implementation of scalar\npoint multiplication is used for SM2 private key operations on ARM64 and\nRISC-V platforms.\n\nImpact summary: An attacker able to measure the time taken by, or to observe\nthe cache-line access pattern of SM2 signing or decryption on an affected\nplatform can learn information about the secret scalar.\n\nCWE: CWE-208: Observable Timing Discrepancy\n\nDescription: On ARM64 and RISC-V processors, the SM2 curve uses an optimized\nscalar multiplication implementation whose conditional branches and table\nlook ups are chosen according to the bits of the secret scalar. The execution\ntime and the cache-access pattern therefore depend on the long-term private\nkey (during SM2 decryption) or the per-signature nonce (during SM2 signature\ngeneration), forming a timing and cache side-channel.\n\nFIPS Impact: no\nSM2 is not a FIPS algorithm and the optimized SM2 implementation is not part\nof the FIPS module.\n\nOpenSSL 4.0, 3.6, 3.5 and 3.4 are vulnerable to this issue on AArch64 and\nRISC-V.\n\nOpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue.\n\nOpenSSL 4.0 users should upgrade to OpenSSL 4.0.3.\nOpenSSL 3.6 users should upgrade to OpenSSL 3.6.5.\nOpenSSL 3.5 users should upgrade to OpenSSL 3.5.9.\nOpenSSL 3.4 users should upgrade to OpenSSL 3.4.8.\n\nThis issue was reported on 2 May 2026 by Abhinav Agarwal.\nIt was independently reported on 6 June 2026 by Feng Xue.\nThe fix was developed by Igor Ustinov.\n\n-- cut (non-publishing metadata for internal use) --\nReported by: Abhinav Agarwal, Feng Xue\nFixed by: Igor Ustinov"}]},{"artifact":{"id":"753337be7fe19d16","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/redhat/openssl-libs@3.5.8-1.el9_8?arch=x86_64&distro=rhel-9.8&epoch=1&upstream=openssl-3.5.8-1.el9_8.src.rpm","type":"rpm","version":"1:3.5.8-1.el9_8","language":"","licenses":["Apache-2.0"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"3.5.8-1.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-54875","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"openssl","version":"3.5.8-1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-54875","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54875","cwe":"CWE-208","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-54875","date":"2026-10-10","epss":0.00294,"percentile":0.20215}],"risk":0.14259,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-54875","description":"A flaw was found in OpenSSL. The optimized scalar point multiplication used for SM2 cryptographic operations on ARM64 and RISC-V architectures does not execute in constant time. An attacker capable of measuring execution times or observing processor cache-access patterns can exploit this side channel during decryption or digital signature generation. This vulnerability allows the attacker to deduce sensitive private keys or signature nonces, leading to information disclosure."},"relatedVulnerabilities":[{"id":"CVE-2026-54875","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54875","cwe":"CWE-208","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-54875","date":"2026-10-10","epss":0.00294,"percentile":0.20215}],"urls":["https://github.com/openssl/openssl/commit/3f01bbc28f7e08211fcdc797fd43816504f94257","https://github.com/openssl/openssl/commit/469f3e42629f4a0b5631796e20c66c92c138a3e8","https://github.com/openssl/openssl/commit/9794ed473764839275cb701b4850f3c24d929c28","https://github.com/openssl/openssl/commit/dddad955d5ff3e9507619cf4e0f13e9988e2197c","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-54875","description":"Issue summary: A non-constant-time optimized implementation of scalar\npoint multiplication is used for SM2 private key operations on ARM64 and\nRISC-V platforms.\n\nImpact summary: An attacker able to measure the time taken by, or to observe\nthe cache-line access pattern of SM2 signing or decryption on an affected\nplatform can learn information about the secret scalar.\n\nCWE: CWE-208: Observable Timing Discrepancy\n\nDescription: On ARM64 and RISC-V processors, the SM2 curve uses an optimized\nscalar multiplication implementation whose conditional branches and table\nlook ups are chosen according to the bits of the secret scalar. The execution\ntime and the cache-access pattern therefore depend on the long-term private\nkey (during SM2 decryption) or the per-signature nonce (during SM2 signature\ngeneration), forming a timing and cache side-channel.\n\nFIPS Impact: no\nSM2 is not a FIPS algorithm and the optimized SM2 implementation is not part\nof the FIPS module.\n\nOpenSSL 4.0, 3.6, 3.5 and 3.4 are vulnerable to this issue on AArch64 and\nRISC-V.\n\nOpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue.\n\nOpenSSL 4.0 users should upgrade to OpenSSL 4.0.3.\nOpenSSL 3.6 users should upgrade to OpenSSL 3.6.5.\nOpenSSL 3.5 users should upgrade to OpenSSL 3.5.9.\nOpenSSL 3.4 users should upgrade to OpenSSL 3.4.8.\n\nThis issue was reported on 2 May 2026 by Abhinav Agarwal.\nIt was independently reported on 6 June 2026 by Feng Xue.\nThe fix was developed by Igor Ustinov.\n\n-- cut (non-publishing metadata for internal use) --\nReported by: Abhinav Agarwal, Feng Xue\nFixed by: Igor Ustinov"}]},{"artifact":{"id":"d4d165231b963ffc","cpes":["cpe:2.3:a:redhat:pcre2:10.40-6.el9:*:*:*:*:*:*:*","cpe:2.3:a:pcre2:pcre2:10.40-6.el9:*:*:*:*:*:*:*"],"name":"pcre2","purl":"pkg:rpm/redhat/pcre2@10.40-6.el9?arch=x86_64&distro=rhel-9.8&upstream=pcre2-10.40-6.el9.src.rpm","type":"rpm","version":"10.40-6.el9","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-89158","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"pcre2","version":"0:10.40-6.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-89158","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-89158","cwe":"CWE-190","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-89158","date":"2026-10-10","epss":0.00247,"percentile":0.14681}],"risk":0.14202499999999998,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-89158","description":"A flaw was found in PCRE2. On 32-bit platforms, an integer overflow in the `pcre2_compile_32` function can lead to an out-of-bounds write. This vulnerability could allow a remote attacker to achieve a high integrity impact and a low availability impact, potentially leading to data corruption or denial of service."},"relatedVulnerabilities":[{"id":"CVE-2026-89158","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-89158","cwe":"CWE-190","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-89158","date":"2026-10-10","epss":0.00247,"percentile":0.14681}],"urls":["https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48","https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-fmgr-6ggq-9859"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-89158","description":"PCRE2 before 10.48, on 32-bit platforms, has a pcre2_compile_32 integer overflow and resultant out-of-bounds write."}]},{"artifact":{"id":"5717d3536e0a895a","cpes":["cpe:2.3:a:pcre2-syntax:pcre2-syntax:10.40-6.el9:*:*:*:*:*:*:*","cpe:2.3:a:pcre2-syntax:pcre2_syntax:10.40-6.el9:*:*:*:*:*:*:*","cpe:2.3:a:pcre2_syntax:pcre2-syntax:10.40-6.el9:*:*:*:*:*:*:*","cpe:2.3:a:pcre2_syntax:pcre2_syntax:10.40-6.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:pcre2-syntax:10.40-6.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:pcre2_syntax:10.40-6.el9:*:*:*:*:*:*:*","cpe:2.3:a:pcre2:pcre2-syntax:10.40-6.el9:*:*:*:*:*:*:*","cpe:2.3:a:pcre2:pcre2_syntax:10.40-6.el9:*:*:*:*:*:*:*"],"name":"pcre2-syntax","purl":"pkg:rpm/redhat/pcre2-syntax@10.40-6.el9?arch=noarch&distro=rhel-9.8&upstream=pcre2-10.40-6.el9.src.rpm","type":"rpm","version":"10.40-6.el9","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"pcre2","version":"10.40-6.el9"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-89158","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"pcre2","version":"10.40-6.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-89158","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-89158","cwe":"CWE-190","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-89158","date":"2026-10-10","epss":0.00247,"percentile":0.14681}],"risk":0.14202499999999998,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-89158","description":"A flaw was found in PCRE2. On 32-bit platforms, an integer overflow in the `pcre2_compile_32` function can lead to an out-of-bounds write. This vulnerability could allow a remote attacker to achieve a high integrity impact and a low availability impact, potentially leading to data corruption or denial of service."},"relatedVulnerabilities":[{"id":"CVE-2026-89158","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-89158","cwe":"CWE-190","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-89158","date":"2026-10-10","epss":0.00247,"percentile":0.14681}],"urls":["https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48","https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-fmgr-6ggq-9859"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-89158","description":"PCRE2 before 10.48, on 32-bit platforms, has a pcre2_compile_32 integer overflow and resultant out-of-bounds write."}]},{"artifact":{"id":"9eebaea2eda844dd","cpes":["cpe:2.3:a:curl-minimal:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl-minimal:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl_minimal:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl_minimal:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*"],"name":"curl-minimal","purl":"pkg:rpm/redhat/curl-minimal@7.76.1-40.el9_8.7?arch=x86_64&distro=rhel-9.8&upstream=curl-7.76.1-40.el9_8.7.src.rpm","type":"rpm","version":"7.76.1-40.el9_8.7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.76.1-40.el9_8.7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-13034","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"curl","version":"7.76.1-40.el9_8.7"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-13034","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":6.8,"impactScore":5.2,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-13034","cwe":"CWE-295","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2025-13034","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-13034","date":"2026-10-10","epss":0.00239,"percentile":0.13753}],"risk":0.14101,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-13034","description":"A flaw was found in curl. When configured to use public key pinning with QUIC connections and GnuTLS, and with standard certificate verification explicitly disabled, curl could bypass the intended public key check. This oversight allows a malicious server to impersonate a legitimate one, potentially leading to unauthorized access or information disclosure due to a failure in verifying the server's identity."},"relatedVulnerabilities":[{"id":"CVE-2025-13034","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-13034","cwe":"CWE-295","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2025-13034","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-13034","date":"2026-10-10","epss":0.00239,"percentile":0.13753}],"urls":["https://curl.se/docs/CVE-2025-13034.html","https://curl.se/docs/CVE-2025-13034.json"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-13034","description":"When using `CURLOPT_PINNEDPUBLICKEY` option with libcurl or `--pinnedpubkey`\nwith the curl tool, curl should check the public key of the server certificate\nto verify the peer.\n\nThis check was skipped in a certain condition that would then make curl allow\nthe connection without performing the proper check, thus not noticing a\npossible impostor. To skip this check, the connection had to be done with QUIC\nwith ngtcp2 built to use GnuTLS and the user had to explicitly disable the\nstandard certificate verification."}]},{"artifact":{"id":"b685606a6baf0f79","cpes":["cpe:2.3:a:libcurl-minimal:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl-minimal:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl_minimal:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl_minimal:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*"],"name":"libcurl-minimal","purl":"pkg:rpm/redhat/libcurl-minimal@7.76.1-40.el9_8.7?arch=x86_64&distro=rhel-9.8&upstream=curl-7.76.1-40.el9_8.7.src.rpm","type":"rpm","version":"7.76.1-40.el9_8.7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.76.1-40.el9_8.7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-13034","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"curl","version":"7.76.1-40.el9_8.7"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-13034","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":6.8,"impactScore":5.2,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-13034","cwe":"CWE-295","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2025-13034","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-13034","date":"2026-10-10","epss":0.00239,"percentile":0.13753}],"risk":0.14101,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-13034","description":"A flaw was found in curl. When configured to use public key pinning with QUIC connections and GnuTLS, and with standard certificate verification explicitly disabled, curl could bypass the intended public key check. This oversight allows a malicious server to impersonate a legitimate one, potentially leading to unauthorized access or information disclosure due to a failure in verifying the server's identity."},"relatedVulnerabilities":[{"id":"CVE-2025-13034","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-13034","cwe":"CWE-295","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2025-13034","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-13034","date":"2026-10-10","epss":0.00239,"percentile":0.13753}],"urls":["https://curl.se/docs/CVE-2025-13034.html","https://curl.se/docs/CVE-2025-13034.json"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-13034","description":"When using `CURLOPT_PINNEDPUBLICKEY` option with libcurl or `--pinnedpubkey`\nwith the curl tool, curl should check the public key of the server certificate\nto verify the peer.\n\nThis check was skipped in a certain condition that would then make curl allow\nthe connection without performing the proper check, thus not noticing a\npossible impostor. To skip this check, the connection had to be done with QUIC\nwith ngtcp2 built to use GnuTLS and the user had to explicitly disable the\nstandard certificate verification."}]},{"artifact":{"id":"8c51a4f9c22b5696","cpes":["cpe:2.3:a:perl-URI:perl-URI:5.09-3.el9:*:*:*:*:*:*:*","cpe:2.3:a:perl-URI:perl_URI:5.09-3.el9:*:*:*:*:*:*:*","cpe:2.3:a:perl_URI:perl-URI:5.09-3.el9:*:*:*:*:*:*:*","cpe:2.3:a:perl_URI:perl_URI:5.09-3.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-URI:5.09-3.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_URI:5.09-3.el9:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-URI:5.09-3.el9:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_URI:5.09-3.el9:*:*:*:*:*:*:*"],"name":"perl-URI","purl":"pkg:rpm/redhat/perl-URI@5.09-3.el9?arch=noarch&distro=rhel-9.8&upstream=perl-URI-5.09-3.el9.src.rpm","type":"rpm","version":"5.09-3.el9","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":null,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-19953","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl-URI","version":"0:5.09-3.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-19953","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","metrics":{"baseScore":7.2,"impactScore":2.8,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19953","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19953","date":"2026-10-10","epss":0.00229,"percentile":0.12657}],"risk":0.13969,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-19953","description":"A flaw was found in the URI component for Perl. This vulnerability occurs because the `nameprep` function, responsible for encoding hostnames, does not properly normalize Unicode characters. As a result, a hostname that is not in a standard Unicode form (non-NFC) can be encoded into a non-standard label. This discrepancy can lead to a situation where security checks, such as allow lists or Server-Side Request Forgery (SSRF) filters, may incorrectly process hostnames, potentially allowing an attacker to bypass security restrictions."},"relatedVulnerabilities":[{"id":"CVE-2026-19953","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19953","cwe":"CWE-1289","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-19953","date":"2026-10-10","epss":0.00229,"percentile":0.12657}],"urls":["https://github.com/libwww-perl/URI/commit/956619a9e94f86d8d2c529b4e06a3674c54a73e7.patch","https://github.com/libwww-perl/URI/pull/191","https://metacpan.org/release/OALDERS/URI-5.36/changes","https://www.rfc-editor.org/rfc/rfc5891#section-5.2","http://www.openwall.com/lists/oss-security/2026/08/31/14"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19953","description":"URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep.\n\nnameprep lowercases each host label but performs no Unicode normalization. IDNA requires a label to be normalized to Form C before it is encoded (RFC 5891), so a label that is not already in NFC is encoded to a different A-label than its normalized form. A label built from the precomposed Devanagari sequence U+0958 U+093E encodes to xn--72b5c without normalization but to xn--11b2fg after NFC normalization, and xn--72b5c does not round-trip back to the original label.\n\nAny caller that reads host() from a URI built from untrusted input and uses it for a security decision (an allow or deny list, an SSRF filter, deduplication, a cache key) sees the non-standard label, while a client that fetches the same URL resolves the NFC form, so the check and the fetch can disagree about the host."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-2849","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-2849","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.8,"impactScore":1.5,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2849","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2022-2849","date":"2026-10-10","epss":0.00477,"percentile":0.39282}],"risk":0.13832999999999998,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-2849","description":"Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0220."},"relatedVulnerabilities":[{"id":"CVE-2022-2849","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@huntr.dev","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2849","cwe":"CWE-122","type":"Secondary","source":"security@huntr.dev"}],"epss":[{"cve":"CVE-2022-2849","date":"2026-10-10","epss":0.00477,"percentile":0.39282}],"urls":["https://github.com/vim/vim/commit/f6d39c31d2177549a986d170e192d8351bd571e2","https://huntr.dev/bounties/389aeccd-deb9-49ae-9b6a-24c12d79b02e","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWOJOA7PZZAMBI5GFTL6PWHXMWSDLUXL/","https://security.gentoo.org/glsa/202305-16"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-2849","description":"Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0220."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-41957","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2024-41957","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":4.5,"impactScore":3.4,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-41957","cwe":"CWE-415","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-41957","cwe":"CWE-415","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-41957","date":"2026-10-10","epss":0.00366,"percentile":0.2846}],"risk":0.13725,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2024-41957","description":"A double-free and use-after-free vulnerability was found in the Vim editor. This flaw exists due to the corresponding tagstack being used twice when closing the window and if the quick fix list belonging to that window is also cleared using the same tagstack data. In this instance, Vim will try to free the memory again, causing a crash."},"relatedVulnerabilities":[{"id":"CVE-2024-41957","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.3,"impactScore":3.4,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":4.5,"impactScore":3.4,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-41957","cwe":"CWE-415","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-41957","cwe":"CWE-415","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-41957","date":"2026-10-10","epss":0.00366,"percentile":0.2846}],"urls":["https://github.com/vim/vim/commit/8a0bbe7b8aad6f8da28dee218c01bc8a0185a","https://github.com/vim/vim/security/advisories/GHSA-f9cr-gv85-hcr4","http://seclists.org/fulldisclosure/2024/Sep/33","http://www.openwall.com/lists/oss-security/2024/08/01/1","https://security.netapp.com/advisory/ntap-20241129-0007/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-41957","description":"Vim is an open source command line text editor. Vim < v9.1.0647 has double free in src/alloc.c:616. When closing a window, the corresponding tagstack data will be cleared and freed. However a bit later, the quickfix list belonging to that window will also be cleared and if that quickfix list points to the same tagstack data, Vim will try to free it again, resulting in a double-free/use-after-free access exception. Impact is low since the user must intentionally execute vim with several non-default flags,\nbut it may cause a crash of Vim. The issue has been fixed as of Vim patch v9.1.0647"}]},{"artifact":{"id":"8cf05c8343d9a4a8","cpes":["cpe:2.3:a:libxml2:libxml2:2.9.13-14.el9_8.5:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libxml2:2.9.13-14.el9_8.5:*:*:*:*:*:*:*"],"name":"libxml2","purl":"pkg:rpm/redhat/libxml2@2.9.13-14.el9_8.5?arch=x86_64&distro=rhel-9.8&upstream=libxml2-2.9.13-14.el9_8.5.src.rpm","type":"rpm","version":"2.9.13-14.el9_8.5","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-0992","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"libxml2","version":"0:2.9.13-14.el9_8.5"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-0992","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.9,"impactScore":1.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-0992","cwe":"CWE-400","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-0992","date":"2026-10-10","epss":0.00465,"percentile":0.38391}],"risk":0.137175,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-0992","description":"A flaw was found in the libxml2 library. This uncontrolled resource consumption vulnerability occurs when processing XML catalogs that contain repeated <nextCatalog> elements pointing to the same downstream catalog. A remote attacker can exploit this by supplying crafted catalogs, causing the parser to redundantly traverse catalog chains. This leads to excessive CPU consumption and degrades application availability, resulting in a denial-of-service condition."},"relatedVulnerabilities":[{"id":"CVE-2026-0992","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.9,"impactScore":1.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-0992","cwe":"CWE-400","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-0992","date":"2026-10-10","epss":0.00465,"percentile":0.38391}],"urls":["https://access.redhat.com/errata/RHSA-2026:7519","https://access.redhat.com/security/cve/CVE-2026-0992","https://bugzilla.redhat.com/show_bug.cgi?id=2429975","https://gitlab.gnome.org/GNOME/libxml2/-/issues/1019"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-0992","description":"A flaw was found in the libxml2 library. This uncontrolled resource consumption vulnerability occurs when processing XML catalogs that contain repeated <nextCatalog> elements pointing to the same downstream catalog. A remote attacker can exploit this by supplying crafted catalogs, causing the parser to redundantly traverse catalog chains. This leads to excessive CPU consumption and degrades application availability, resulting in a denial-of-service condition."}]},{"artifact":{"id":"6a400801b03158c5","cpes":["cpe:2.3:a:perl-AutoLoader:perl-AutoLoader:0\\:5.74-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-AutoLoader:perl_AutoLoader:0\\:5.74-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_AutoLoader:perl-AutoLoader:0\\:5.74-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_AutoLoader:perl_AutoLoader:0\\:5.74-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-AutoLoader:0\\:5.74-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_AutoLoader:0\\:5.74-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-AutoLoader:0\\:5.74-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_AutoLoader:0\\:5.74-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-AutoLoader","purl":"pkg:rpm/redhat/perl-AutoLoader@5.74-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:5.74-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-15534","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-15534","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"risk":0.13696,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-15534","description":"A flaw was found in Perl. An integer overflow vulnerability in the regular expression engine's superlinear cache calculation can lead to out-of-bounds memory reads and writes. A remote attacker could exploit this by providing a specially crafted, large input string during regular expression matching. This could result in a denial of service (DoS) due to a process crash or potentially lead to heap memory corruption, enabling arbitrary code execution."},"relatedVulnerabilities":[{"id":"CVE-2026-15534","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"urls":["https://github.com/Perl/perl5/commit/54cf3d44cbbedd17d774e9a37921963e8fd5d0cb.patch","https://github.com/Perl/perl5/commit/568e6fd238867bb9e99fa3f47cba3169009239e0.patch","http://www.openwall.com/lists/oss-security/2026/08/09/12","http://www.openwall.com/lists/oss-security/2026/08/09/13"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15534","description":"Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch.\n\nThe regex engine's superlinear cache holds one bit per subject position for each participating WHILEM node, so the bit count is the subject length plus one times the number of nodes. Nothing checks that product for positive overflow of the signed 32-bit count: a 286331153 byte subject matched against a pattern with 15 participating nodes stores the count as 14, leaving a two byte cache. The cache is then indexed from the real match position and node number, so reads go past the end of the allocation, and on failure CACHEsayNO sets a bit past it.\n\nA caller that matches an attacker controlled subject of this size against a pattern of this shape can crash the process or corrupt heap memory."}]},{"artifact":{"id":"aae7e303a752a1c7","cpes":["cpe:2.3:a:perl-B:perl-B:0\\:1.80-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-B:perl_B:0\\:1.80-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_B:perl-B:0\\:1.80-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_B:perl_B:0\\:1.80-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-B:0\\:1.80-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_B:0\\:1.80-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-B:0\\:1.80-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_B:0\\:1.80-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-B","purl":"pkg:rpm/redhat/perl-B@1.80-484.el9_8?arch=x86_64&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.80-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-15534","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-15534","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"risk":0.13696,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-15534","description":"A flaw was found in Perl. An integer overflow vulnerability in the regular expression engine's superlinear cache calculation can lead to out-of-bounds memory reads and writes. A remote attacker could exploit this by providing a specially crafted, large input string during regular expression matching. This could result in a denial of service (DoS) due to a process crash or potentially lead to heap memory corruption, enabling arbitrary code execution."},"relatedVulnerabilities":[{"id":"CVE-2026-15534","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"urls":["https://github.com/Perl/perl5/commit/54cf3d44cbbedd17d774e9a37921963e8fd5d0cb.patch","https://github.com/Perl/perl5/commit/568e6fd238867bb9e99fa3f47cba3169009239e0.patch","http://www.openwall.com/lists/oss-security/2026/08/09/12","http://www.openwall.com/lists/oss-security/2026/08/09/13"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15534","description":"Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch.\n\nThe regex engine's superlinear cache holds one bit per subject position for each participating WHILEM node, so the bit count is the subject length plus one times the number of nodes. Nothing checks that product for positive overflow of the signed 32-bit count: a 286331153 byte subject matched against a pattern with 15 participating nodes stores the count as 14, leaving a two byte cache. The cache is then indexed from the real match position and node number, so reads go past the end of the allocation, and on failure CACHEsayNO sets a bit past it.\n\nA caller that matches an attacker controlled subject of this size against a pattern of this shape can crash the process or corrupt heap memory."}]},{"artifact":{"id":"64f2bf74d87051e4","cpes":["cpe:2.3:a:perl-Class-Struct:perl-Class-Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-Class-Struct:perl_Class_Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Class_Struct:perl-Class-Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Class_Struct:perl_Class_Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-Class:perl-Class-Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-Class:perl_Class_Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Class:perl-Class-Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Class:perl_Class_Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-Class-Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_Class_Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-Class-Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_Class_Struct:0\\:0.66-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-Class-Struct","purl":"pkg:rpm/redhat/perl-Class-Struct@0.66-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:0.66-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-15534","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-15534","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"risk":0.13696,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-15534","description":"A flaw was found in Perl. An integer overflow vulnerability in the regular expression engine's superlinear cache calculation can lead to out-of-bounds memory reads and writes. A remote attacker could exploit this by providing a specially crafted, large input string during regular expression matching. This could result in a denial of service (DoS) due to a process crash or potentially lead to heap memory corruption, enabling arbitrary code execution."},"relatedVulnerabilities":[{"id":"CVE-2026-15534","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"urls":["https://github.com/Perl/perl5/commit/54cf3d44cbbedd17d774e9a37921963e8fd5d0cb.patch","https://github.com/Perl/perl5/commit/568e6fd238867bb9e99fa3f47cba3169009239e0.patch","http://www.openwall.com/lists/oss-security/2026/08/09/12","http://www.openwall.com/lists/oss-security/2026/08/09/13"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15534","description":"Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch.\n\nThe regex engine's superlinear cache holds one bit per subject position for each participating WHILEM node, so the bit count is the subject length plus one times the number of nodes. Nothing checks that product for positive overflow of the signed 32-bit count: a 286331153 byte subject matched against a pattern with 15 participating nodes stores the count as 14, leaving a two byte cache. The cache is then indexed from the real match position and node number, so reads go past the end of the allocation, and on failure CACHEsayNO sets a bit past it.\n\nA caller that matches an attacker controlled subject of this size against a pattern of this shape can crash the process or corrupt heap memory."}]},{"artifact":{"id":"0ee020f622eb09ee","cpes":["cpe:2.3:a:perl-DynaLoader:perl-DynaLoader:0\\:1.47-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-DynaLoader:perl_DynaLoader:0\\:1.47-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_DynaLoader:perl-DynaLoader:0\\:1.47-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_DynaLoader:perl_DynaLoader:0\\:1.47-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-DynaLoader:0\\:1.47-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_DynaLoader:0\\:1.47-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-DynaLoader:0\\:1.47-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_DynaLoader:0\\:1.47-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-DynaLoader","purl":"pkg:rpm/redhat/perl-DynaLoader@1.47-484.el9_8?arch=x86_64&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.47-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-15534","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-15534","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"risk":0.13696,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-15534","description":"A flaw was found in Perl. An integer overflow vulnerability in the regular expression engine's superlinear cache calculation can lead to out-of-bounds memory reads and writes. A remote attacker could exploit this by providing a specially crafted, large input string during regular expression matching. This could result in a denial of service (DoS) due to a process crash or potentially lead to heap memory corruption, enabling arbitrary code execution."},"relatedVulnerabilities":[{"id":"CVE-2026-15534","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"urls":["https://github.com/Perl/perl5/commit/54cf3d44cbbedd17d774e9a37921963e8fd5d0cb.patch","https://github.com/Perl/perl5/commit/568e6fd238867bb9e99fa3f47cba3169009239e0.patch","http://www.openwall.com/lists/oss-security/2026/08/09/12","http://www.openwall.com/lists/oss-security/2026/08/09/13"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15534","description":"Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch.\n\nThe regex engine's superlinear cache holds one bit per subject position for each participating WHILEM node, so the bit count is the subject length plus one times the number of nodes. Nothing checks that product for positive overflow of the signed 32-bit count: a 286331153 byte subject matched against a pattern with 15 participating nodes stores the count as 14, leaving a two byte cache. The cache is then indexed from the real match position and node number, so reads go past the end of the allocation, and on failure CACHEsayNO sets a bit past it.\n\nA caller that matches an attacker controlled subject of this size against a pattern of this shape can crash the process or corrupt heap memory."}]},{"artifact":{"id":"2c29c58595b13830","cpes":["cpe:2.3:a:perl-Errno:perl-Errno:0\\:1.30-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-Errno:perl_Errno:0\\:1.30-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Errno:perl-Errno:0\\:1.30-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Errno:perl_Errno:0\\:1.30-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-Errno:0\\:1.30-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_Errno:0\\:1.30-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-Errno:0\\:1.30-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_Errno:0\\:1.30-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-Errno","purl":"pkg:rpm/redhat/perl-Errno@1.30-484.el9_8?arch=x86_64&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.30-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-15534","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-15534","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"risk":0.13696,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-15534","description":"A flaw was found in Perl. An integer overflow vulnerability in the regular expression engine's superlinear cache calculation can lead to out-of-bounds memory reads and writes. A remote attacker could exploit this by providing a specially crafted, large input string during regular expression matching. This could result in a denial of service (DoS) due to a process crash or potentially lead to heap memory corruption, enabling arbitrary code execution."},"relatedVulnerabilities":[{"id":"CVE-2026-15534","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"urls":["https://github.com/Perl/perl5/commit/54cf3d44cbbedd17d774e9a37921963e8fd5d0cb.patch","https://github.com/Perl/perl5/commit/568e6fd238867bb9e99fa3f47cba3169009239e0.patch","http://www.openwall.com/lists/oss-security/2026/08/09/12","http://www.openwall.com/lists/oss-security/2026/08/09/13"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15534","description":"Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch.\n\nThe regex engine's superlinear cache holds one bit per subject position for each participating WHILEM node, so the bit count is the subject length plus one times the number of nodes. Nothing checks that product for positive overflow of the signed 32-bit count: a 286331153 byte subject matched against a pattern with 15 participating nodes stores the count as 14, leaving a two byte cache. The cache is then indexed from the real match position and node number, so reads go past the end of the allocation, and on failure CACHEsayNO sets a bit past it.\n\nA caller that matches an attacker controlled subject of this size against a pattern of this shape can crash the process or corrupt heap memory."}]},{"artifact":{"id":"9a350f67e34cc0a6","cpes":["cpe:2.3:a:perl-Fcntl:perl-Fcntl:0\\:1.13-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-Fcntl:perl_Fcntl:0\\:1.13-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Fcntl:perl-Fcntl:0\\:1.13-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Fcntl:perl_Fcntl:0\\:1.13-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-Fcntl:0\\:1.13-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_Fcntl:0\\:1.13-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-Fcntl:0\\:1.13-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_Fcntl:0\\:1.13-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-Fcntl","purl":"pkg:rpm/redhat/perl-Fcntl@1.13-484.el9_8?arch=x86_64&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.13-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-15534","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-15534","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"risk":0.13696,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-15534","description":"A flaw was found in Perl. An integer overflow vulnerability in the regular expression engine's superlinear cache calculation can lead to out-of-bounds memory reads and writes. A remote attacker could exploit this by providing a specially crafted, large input string during regular expression matching. This could result in a denial of service (DoS) due to a process crash or potentially lead to heap memory corruption, enabling arbitrary code execution."},"relatedVulnerabilities":[{"id":"CVE-2026-15534","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"urls":["https://github.com/Perl/perl5/commit/54cf3d44cbbedd17d774e9a37921963e8fd5d0cb.patch","https://github.com/Perl/perl5/commit/568e6fd238867bb9e99fa3f47cba3169009239e0.patch","http://www.openwall.com/lists/oss-security/2026/08/09/12","http://www.openwall.com/lists/oss-security/2026/08/09/13"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15534","description":"Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch.\n\nThe regex engine's superlinear cache holds one bit per subject position for each participating WHILEM node, so the bit count is the subject length plus one times the number of nodes. Nothing checks that product for positive overflow of the signed 32-bit count: a 286331153 byte subject matched against a pattern with 15 participating nodes stores the count as 14, leaving a two byte cache. The cache is then indexed from the real match position and node number, so reads go past the end of the allocation, and on failure CACHEsayNO sets a bit past it.\n\nA caller that matches an attacker controlled subject of this size against a pattern of this shape can crash the process or corrupt heap memory."}]},{"artifact":{"id":"ccc96546d7bf7925","cpes":["cpe:2.3:a:perl-File-Basename:perl-File-Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-File-Basename:perl_File_Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_File_Basename:perl-File-Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_File_Basename:perl_File_Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-File:perl-File-Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-File:perl_File_Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_File:perl-File-Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_File:perl_File_Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-File-Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_File_Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-File-Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_File_Basename:0\\:2.85-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-File-Basename","purl":"pkg:rpm/redhat/perl-File-Basename@2.85-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:2.85-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-15534","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-15534","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"risk":0.13696,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-15534","description":"A flaw was found in Perl. An integer overflow vulnerability in the regular expression engine's superlinear cache calculation can lead to out-of-bounds memory reads and writes. A remote attacker could exploit this by providing a specially crafted, large input string during regular expression matching. This could result in a denial of service (DoS) due to a process crash or potentially lead to heap memory corruption, enabling arbitrary code execution."},"relatedVulnerabilities":[{"id":"CVE-2026-15534","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"urls":["https://github.com/Perl/perl5/commit/54cf3d44cbbedd17d774e9a37921963e8fd5d0cb.patch","https://github.com/Perl/perl5/commit/568e6fd238867bb9e99fa3f47cba3169009239e0.patch","http://www.openwall.com/lists/oss-security/2026/08/09/12","http://www.openwall.com/lists/oss-security/2026/08/09/13"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15534","description":"Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch.\n\nThe regex engine's superlinear cache holds one bit per subject position for each participating WHILEM node, so the bit count is the subject length plus one times the number of nodes. Nothing checks that product for positive overflow of the signed 32-bit count: a 286331153 byte subject matched against a pattern with 15 participating nodes stores the count as 14, leaving a two byte cache. The cache is then indexed from the real match position and node number, so reads go past the end of the allocation, and on failure CACHEsayNO sets a bit past it.\n\nA caller that matches an attacker controlled subject of this size against a pattern of this shape can crash the process or corrupt heap memory."}]},{"artifact":{"id":"2c4e8249c7be919b","cpes":["cpe:2.3:a:perl-File-stat:perl-File-stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-File-stat:perl_File_stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_File_stat:perl-File-stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_File_stat:perl_File_stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-File:perl-File-stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-File:perl_File_stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_File:perl-File-stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_File:perl_File_stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-File-stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_File_stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-File-stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_File_stat:0\\:1.09-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-File-stat","purl":"pkg:rpm/redhat/perl-File-stat@1.09-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.09-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-15534","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-15534","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"risk":0.13696,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-15534","description":"A flaw was found in Perl. An integer overflow vulnerability in the regular expression engine's superlinear cache calculation can lead to out-of-bounds memory reads and writes. A remote attacker could exploit this by providing a specially crafted, large input string during regular expression matching. This could result in a denial of service (DoS) due to a process crash or potentially lead to heap memory corruption, enabling arbitrary code execution."},"relatedVulnerabilities":[{"id":"CVE-2026-15534","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"urls":["https://github.com/Perl/perl5/commit/54cf3d44cbbedd17d774e9a37921963e8fd5d0cb.patch","https://github.com/Perl/perl5/commit/568e6fd238867bb9e99fa3f47cba3169009239e0.patch","http://www.openwall.com/lists/oss-security/2026/08/09/12","http://www.openwall.com/lists/oss-security/2026/08/09/13"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15534","description":"Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch.\n\nThe regex engine's superlinear cache holds one bit per subject position for each participating WHILEM node, so the bit count is the subject length plus one times the number of nodes. Nothing checks that product for positive overflow of the signed 32-bit count: a 286331153 byte subject matched against a pattern with 15 participating nodes stores the count as 14, leaving a two byte cache. The cache is then indexed from the real match position and node number, so reads go past the end of the allocation, and on failure CACHEsayNO sets a bit past it.\n\nA caller that matches an attacker controlled subject of this size against a pattern of this shape can crash the process or corrupt heap memory."}]},{"artifact":{"id":"4afdea7b02a85f83","cpes":["cpe:2.3:a:perl-FileHandle:perl-FileHandle:0\\:2.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-FileHandle:perl_FileHandle:0\\:2.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_FileHandle:perl-FileHandle:0\\:2.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_FileHandle:perl_FileHandle:0\\:2.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-FileHandle:0\\:2.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_FileHandle:0\\:2.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-FileHandle:0\\:2.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_FileHandle:0\\:2.03-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-FileHandle","purl":"pkg:rpm/redhat/perl-FileHandle@2.03-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:2.03-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-15534","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-15534","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"risk":0.13696,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-15534","description":"A flaw was found in Perl. An integer overflow vulnerability in the regular expression engine's superlinear cache calculation can lead to out-of-bounds memory reads and writes. A remote attacker could exploit this by providing a specially crafted, large input string during regular expression matching. This could result in a denial of service (DoS) due to a process crash or potentially lead to heap memory corruption, enabling arbitrary code execution."},"relatedVulnerabilities":[{"id":"CVE-2026-15534","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"urls":["https://github.com/Perl/perl5/commit/54cf3d44cbbedd17d774e9a37921963e8fd5d0cb.patch","https://github.com/Perl/perl5/commit/568e6fd238867bb9e99fa3f47cba3169009239e0.patch","http://www.openwall.com/lists/oss-security/2026/08/09/12","http://www.openwall.com/lists/oss-security/2026/08/09/13"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15534","description":"Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch.\n\nThe regex engine's superlinear cache holds one bit per subject position for each participating WHILEM node, so the bit count is the subject length plus one times the number of nodes. Nothing checks that product for positive overflow of the signed 32-bit count: a 286331153 byte subject matched against a pattern with 15 participating nodes stores the count as 14, leaving a two byte cache. The cache is then indexed from the real match position and node number, so reads go past the end of the allocation, and on failure CACHEsayNO sets a bit past it.\n\nA caller that matches an attacker controlled subject of this size against a pattern of this shape can crash the process or corrupt heap memory."}]},{"artifact":{"id":"3e595c731988d8d7","cpes":["cpe:2.3:a:perl-Getopt-Std:perl-Getopt-Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-Getopt-Std:perl_Getopt_Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Getopt_Std:perl-Getopt-Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Getopt_Std:perl_Getopt_Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-Getopt:perl-Getopt-Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-Getopt:perl_Getopt_Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Getopt:perl-Getopt-Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Getopt:perl_Getopt_Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-Getopt-Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_Getopt_Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-Getopt-Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_Getopt_Std:0\\:1.12-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-Getopt-Std","purl":"pkg:rpm/redhat/perl-Getopt-Std@1.12-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.12-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-15534","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-15534","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"risk":0.13696,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-15534","description":"A flaw was found in Perl. An integer overflow vulnerability in the regular expression engine's superlinear cache calculation can lead to out-of-bounds memory reads and writes. A remote attacker could exploit this by providing a specially crafted, large input string during regular expression matching. This could result in a denial of service (DoS) due to a process crash or potentially lead to heap memory corruption, enabling arbitrary code execution."},"relatedVulnerabilities":[{"id":"CVE-2026-15534","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"urls":["https://github.com/Perl/perl5/commit/54cf3d44cbbedd17d774e9a37921963e8fd5d0cb.patch","https://github.com/Perl/perl5/commit/568e6fd238867bb9e99fa3f47cba3169009239e0.patch","http://www.openwall.com/lists/oss-security/2026/08/09/12","http://www.openwall.com/lists/oss-security/2026/08/09/13"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15534","description":"Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch.\n\nThe regex engine's superlinear cache holds one bit per subject position for each participating WHILEM node, so the bit count is the subject length plus one times the number of nodes. Nothing checks that product for positive overflow of the signed 32-bit count: a 286331153 byte subject matched against a pattern with 15 participating nodes stores the count as 14, leaving a two byte cache. The cache is then indexed from the real match position and node number, so reads go past the end of the allocation, and on failure CACHEsayNO sets a bit past it.\n\nA caller that matches an attacker controlled subject of this size against a pattern of this shape can crash the process or corrupt heap memory."}]},{"artifact":{"id":"8e1068a3ad769685","cpes":["cpe:2.3:a:perl-IO:perl-IO:0\\:1.43-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-IO:perl_IO:0\\:1.43-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_IO:perl-IO:0\\:1.43-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_IO:perl_IO:0\\:1.43-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-IO:0\\:1.43-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_IO:0\\:1.43-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-IO:0\\:1.43-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_IO:0\\:1.43-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-IO","purl":"pkg:rpm/redhat/perl-IO@1.43-484.el9_8?arch=x86_64&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.43-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-15534","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-15534","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"risk":0.13696,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-15534","description":"A flaw was found in Perl. An integer overflow vulnerability in the regular expression engine's superlinear cache calculation can lead to out-of-bounds memory reads and writes. A remote attacker could exploit this by providing a specially crafted, large input string during regular expression matching. This could result in a denial of service (DoS) due to a process crash or potentially lead to heap memory corruption, enabling arbitrary code execution."},"relatedVulnerabilities":[{"id":"CVE-2026-15534","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"urls":["https://github.com/Perl/perl5/commit/54cf3d44cbbedd17d774e9a37921963e8fd5d0cb.patch","https://github.com/Perl/perl5/commit/568e6fd238867bb9e99fa3f47cba3169009239e0.patch","http://www.openwall.com/lists/oss-security/2026/08/09/12","http://www.openwall.com/lists/oss-security/2026/08/09/13"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15534","description":"Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch.\n\nThe regex engine's superlinear cache holds one bit per subject position for each participating WHILEM node, so the bit count is the subject length plus one times the number of nodes. Nothing checks that product for positive overflow of the signed 32-bit count: a 286331153 byte subject matched against a pattern with 15 participating nodes stores the count as 14, leaving a two byte cache. The cache is then indexed from the real match position and node number, so reads go past the end of the allocation, and on failure CACHEsayNO sets a bit past it.\n\nA caller that matches an attacker controlled subject of this size against a pattern of this shape can crash the process or corrupt heap memory."}]},{"artifact":{"id":"fe624a2355bcc9a0","cpes":["cpe:2.3:a:perl-IPC-Open3:perl-IPC-Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-IPC-Open3:perl_IPC_Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_IPC_Open3:perl-IPC-Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_IPC_Open3:perl_IPC_Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-IPC:perl-IPC-Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-IPC:perl_IPC_Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_IPC:perl-IPC-Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_IPC:perl_IPC_Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-IPC-Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_IPC_Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-IPC-Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_IPC_Open3:0\\:1.21-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-IPC-Open3","purl":"pkg:rpm/redhat/perl-IPC-Open3@1.21-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.21-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-15534","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-15534","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"risk":0.13696,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-15534","description":"A flaw was found in Perl. An integer overflow vulnerability in the regular expression engine's superlinear cache calculation can lead to out-of-bounds memory reads and writes. A remote attacker could exploit this by providing a specially crafted, large input string during regular expression matching. This could result in a denial of service (DoS) due to a process crash or potentially lead to heap memory corruption, enabling arbitrary code execution."},"relatedVulnerabilities":[{"id":"CVE-2026-15534","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"urls":["https://github.com/Perl/perl5/commit/54cf3d44cbbedd17d774e9a37921963e8fd5d0cb.patch","https://github.com/Perl/perl5/commit/568e6fd238867bb9e99fa3f47cba3169009239e0.patch","http://www.openwall.com/lists/oss-security/2026/08/09/12","http://www.openwall.com/lists/oss-security/2026/08/09/13"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15534","description":"Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch.\n\nThe regex engine's superlinear cache holds one bit per subject position for each participating WHILEM node, so the bit count is the subject length plus one times the number of nodes. Nothing checks that product for positive overflow of the signed 32-bit count: a 286331153 byte subject matched against a pattern with 15 participating nodes stores the count as 14, leaving a two byte cache. The cache is then indexed from the real match position and node number, so reads go past the end of the allocation, and on failure CACHEsayNO sets a bit past it.\n\nA caller that matches an attacker controlled subject of this size against a pattern of this shape can crash the process or corrupt heap memory."}]},{"artifact":{"id":"966429419a0c4e60","cpes":["cpe:2.3:a:perl-POSIX:perl-POSIX:0\\:1.94-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-POSIX:perl_POSIX:0\\:1.94-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_POSIX:perl-POSIX:0\\:1.94-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_POSIX:perl_POSIX:0\\:1.94-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-POSIX:0\\:1.94-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_POSIX:0\\:1.94-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-POSIX:0\\:1.94-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_POSIX:0\\:1.94-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-POSIX","purl":"pkg:rpm/redhat/perl-POSIX@1.94-484.el9_8?arch=x86_64&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.94-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-15534","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-15534","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"risk":0.13696,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-15534","description":"A flaw was found in Perl. An integer overflow vulnerability in the regular expression engine's superlinear cache calculation can lead to out-of-bounds memory reads and writes. A remote attacker could exploit this by providing a specially crafted, large input string during regular expression matching. This could result in a denial of service (DoS) due to a process crash or potentially lead to heap memory corruption, enabling arbitrary code execution."},"relatedVulnerabilities":[{"id":"CVE-2026-15534","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"urls":["https://github.com/Perl/perl5/commit/54cf3d44cbbedd17d774e9a37921963e8fd5d0cb.patch","https://github.com/Perl/perl5/commit/568e6fd238867bb9e99fa3f47cba3169009239e0.patch","http://www.openwall.com/lists/oss-security/2026/08/09/12","http://www.openwall.com/lists/oss-security/2026/08/09/13"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15534","description":"Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch.\n\nThe regex engine's superlinear cache holds one bit per subject position for each participating WHILEM node, so the bit count is the subject length plus one times the number of nodes. Nothing checks that product for positive overflow of the signed 32-bit count: a 286331153 byte subject matched against a pattern with 15 participating nodes stores the count as 14, leaving a two byte cache. The cache is then indexed from the real match position and node number, so reads go past the end of the allocation, and on failure CACHEsayNO sets a bit past it.\n\nA caller that matches an attacker controlled subject of this size against a pattern of this shape can crash the process or corrupt heap memory."}]},{"artifact":{"id":"ed8cd6cbedb5c087","cpes":["cpe:2.3:a:perl-SelectSaver:perl-SelectSaver:0\\:1.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-SelectSaver:perl_SelectSaver:0\\:1.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_SelectSaver:perl-SelectSaver:0\\:1.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_SelectSaver:perl_SelectSaver:0\\:1.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-SelectSaver:0\\:1.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_SelectSaver:0\\:1.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-SelectSaver:0\\:1.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_SelectSaver:0\\:1.02-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-SelectSaver","purl":"pkg:rpm/redhat/perl-SelectSaver@1.02-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.02-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-15534","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-15534","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"risk":0.13696,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-15534","description":"A flaw was found in Perl. An integer overflow vulnerability in the regular expression engine's superlinear cache calculation can lead to out-of-bounds memory reads and writes. A remote attacker could exploit this by providing a specially crafted, large input string during regular expression matching. This could result in a denial of service (DoS) due to a process crash or potentially lead to heap memory corruption, enabling arbitrary code execution."},"relatedVulnerabilities":[{"id":"CVE-2026-15534","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"urls":["https://github.com/Perl/perl5/commit/54cf3d44cbbedd17d774e9a37921963e8fd5d0cb.patch","https://github.com/Perl/perl5/commit/568e6fd238867bb9e99fa3f47cba3169009239e0.patch","http://www.openwall.com/lists/oss-security/2026/08/09/12","http://www.openwall.com/lists/oss-security/2026/08/09/13"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15534","description":"Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch.\n\nThe regex engine's superlinear cache holds one bit per subject position for each participating WHILEM node, so the bit count is the subject length plus one times the number of nodes. Nothing checks that product for positive overflow of the signed 32-bit count: a 286331153 byte subject matched against a pattern with 15 participating nodes stores the count as 14, leaving a two byte cache. The cache is then indexed from the real match position and node number, so reads go past the end of the allocation, and on failure CACHEsayNO sets a bit past it.\n\nA caller that matches an attacker controlled subject of this size against a pattern of this shape can crash the process or corrupt heap memory."}]},{"artifact":{"id":"9bf020807c3348c1","cpes":["cpe:2.3:a:perl-Symbol:perl-Symbol:0\\:1.08-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-Symbol:perl_Symbol:0\\:1.08-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Symbol:perl-Symbol:0\\:1.08-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_Symbol:perl_Symbol:0\\:1.08-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-Symbol:0\\:1.08-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_Symbol:0\\:1.08-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-Symbol:0\\:1.08-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_Symbol:0\\:1.08-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-Symbol","purl":"pkg:rpm/redhat/perl-Symbol@1.08-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.08-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-15534","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-15534","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"risk":0.13696,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-15534","description":"A flaw was found in Perl. An integer overflow vulnerability in the regular expression engine's superlinear cache calculation can lead to out-of-bounds memory reads and writes. A remote attacker could exploit this by providing a specially crafted, large input string during regular expression matching. This could result in a denial of service (DoS) due to a process crash or potentially lead to heap memory corruption, enabling arbitrary code execution."},"relatedVulnerabilities":[{"id":"CVE-2026-15534","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"urls":["https://github.com/Perl/perl5/commit/54cf3d44cbbedd17d774e9a37921963e8fd5d0cb.patch","https://github.com/Perl/perl5/commit/568e6fd238867bb9e99fa3f47cba3169009239e0.patch","http://www.openwall.com/lists/oss-security/2026/08/09/12","http://www.openwall.com/lists/oss-security/2026/08/09/13"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15534","description":"Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch.\n\nThe regex engine's superlinear cache holds one bit per subject position for each participating WHILEM node, so the bit count is the subject length plus one times the number of nodes. Nothing checks that product for positive overflow of the signed 32-bit count: a 286331153 byte subject matched against a pattern with 15 participating nodes stores the count as 14, leaving a two byte cache. The cache is then indexed from the real match position and node number, so reads go past the end of the allocation, and on failure CACHEsayNO sets a bit past it.\n\nA caller that matches an attacker controlled subject of this size against a pattern of this shape can crash the process or corrupt heap memory."}]},{"artifact":{"id":"f7b1f706a4c8603f","cpes":["cpe:2.3:a:perl-base:perl-base:0\\:2.27-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-base:perl_base:0\\:2.27-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl-base:0\\:2.27-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl_base:0\\:2.27-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-base:0\\:2.27-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_base:0\\:2.27-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-base:0\\:2.27-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_base:0\\:2.27-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-base","purl":"pkg:rpm/redhat/perl-base@2.27-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:2.27-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-15534","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-15534","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"risk":0.13696,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-15534","description":"A flaw was found in Perl. An integer overflow vulnerability in the regular expression engine's superlinear cache calculation can lead to out-of-bounds memory reads and writes. A remote attacker could exploit this by providing a specially crafted, large input string during regular expression matching. This could result in a denial of service (DoS) due to a process crash or potentially lead to heap memory corruption, enabling arbitrary code execution."},"relatedVulnerabilities":[{"id":"CVE-2026-15534","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"urls":["https://github.com/Perl/perl5/commit/54cf3d44cbbedd17d774e9a37921963e8fd5d0cb.patch","https://github.com/Perl/perl5/commit/568e6fd238867bb9e99fa3f47cba3169009239e0.patch","http://www.openwall.com/lists/oss-security/2026/08/09/12","http://www.openwall.com/lists/oss-security/2026/08/09/13"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15534","description":"Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch.\n\nThe regex engine's superlinear cache holds one bit per subject position for each participating WHILEM node, so the bit count is the subject length plus one times the number of nodes. Nothing checks that product for positive overflow of the signed 32-bit count: a 286331153 byte subject matched against a pattern with 15 participating nodes stores the count as 14, leaving a two byte cache. The cache is then indexed from the real match position and node number, so reads go past the end of the allocation, and on failure CACHEsayNO sets a bit past it.\n\nA caller that matches an attacker controlled subject of this size against a pattern of this shape can crash the process or corrupt heap memory."}]},{"artifact":{"id":"51a4d5612497e394","cpes":["cpe:2.3:a:perl-if:perl-if:0\\:0.60.800-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-if:perl_if:0\\:0.60.800-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_if:perl-if:0\\:0.60.800-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_if:perl_if:0\\:0.60.800-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-if:0\\:0.60.800-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_if:0\\:0.60.800-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-if:0\\:0.60.800-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_if:0\\:0.60.800-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-if","purl":"pkg:rpm/redhat/perl-if@0.60.800-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:0.60.800-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-15534","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-15534","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"risk":0.13696,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-15534","description":"A flaw was found in Perl. An integer overflow vulnerability in the regular expression engine's superlinear cache calculation can lead to out-of-bounds memory reads and writes. A remote attacker could exploit this by providing a specially crafted, large input string during regular expression matching. This could result in a denial of service (DoS) due to a process crash or potentially lead to heap memory corruption, enabling arbitrary code execution."},"relatedVulnerabilities":[{"id":"CVE-2026-15534","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"urls":["https://github.com/Perl/perl5/commit/54cf3d44cbbedd17d774e9a37921963e8fd5d0cb.patch","https://github.com/Perl/perl5/commit/568e6fd238867bb9e99fa3f47cba3169009239e0.patch","http://www.openwall.com/lists/oss-security/2026/08/09/12","http://www.openwall.com/lists/oss-security/2026/08/09/13"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15534","description":"Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch.\n\nThe regex engine's superlinear cache holds one bit per subject position for each participating WHILEM node, so the bit count is the subject length plus one times the number of nodes. Nothing checks that product for positive overflow of the signed 32-bit count: a 286331153 byte subject matched against a pattern with 15 participating nodes stores the count as 14, leaving a two byte cache. The cache is then indexed from the real match position and node number, so reads go past the end of the allocation, and on failure CACHEsayNO sets a bit past it.\n\nA caller that matches an attacker controlled subject of this size against a pattern of this shape can crash the process or corrupt heap memory."}]},{"artifact":{"id":"aa8ec3d3a0c8cb51","cpes":["cpe:2.3:a:perl-interpreter:perl-interpreter:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-interpreter:perl_interpreter:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_interpreter:perl-interpreter:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_interpreter:perl_interpreter:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-interpreter:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_interpreter:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-interpreter:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_interpreter:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-interpreter","purl":"pkg:rpm/redhat/perl-interpreter@5.32.1-484.el9_8?arch=x86_64&distro=rhel-9.8&epoch=4&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"4:5.32.1-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":4,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-15534","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-15534","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"risk":0.13696,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-15534","description":"A flaw was found in Perl. An integer overflow vulnerability in the regular expression engine's superlinear cache calculation can lead to out-of-bounds memory reads and writes. A remote attacker could exploit this by providing a specially crafted, large input string during regular expression matching. This could result in a denial of service (DoS) due to a process crash or potentially lead to heap memory corruption, enabling arbitrary code execution."},"relatedVulnerabilities":[{"id":"CVE-2026-15534","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"urls":["https://github.com/Perl/perl5/commit/54cf3d44cbbedd17d774e9a37921963e8fd5d0cb.patch","https://github.com/Perl/perl5/commit/568e6fd238867bb9e99fa3f47cba3169009239e0.patch","http://www.openwall.com/lists/oss-security/2026/08/09/12","http://www.openwall.com/lists/oss-security/2026/08/09/13"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15534","description":"Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch.\n\nThe regex engine's superlinear cache holds one bit per subject position for each participating WHILEM node, so the bit count is the subject length plus one times the number of nodes. Nothing checks that product for positive overflow of the signed 32-bit count: a 286331153 byte subject matched against a pattern with 15 participating nodes stores the count as 14, leaving a two byte cache. The cache is then indexed from the real match position and node number, so reads go past the end of the allocation, and on failure CACHEsayNO sets a bit past it.\n\nA caller that matches an attacker controlled subject of this size against a pattern of this shape can crash the process or corrupt heap memory."}]},{"artifact":{"id":"767f57c8ab68452b","cpes":["cpe:2.3:a:perl-lib:perl-lib:0\\:0.65-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-lib:perl_lib:0\\:0.65-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_lib:perl-lib:0\\:0.65-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_lib:perl_lib:0\\:0.65-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-lib:0\\:0.65-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_lib:0\\:0.65-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-lib:0\\:0.65-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_lib:0\\:0.65-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-lib","purl":"pkg:rpm/redhat/perl-lib@0.65-484.el9_8?arch=x86_64&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:0.65-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-15534","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-15534","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"risk":0.13696,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-15534","description":"A flaw was found in Perl. An integer overflow vulnerability in the regular expression engine's superlinear cache calculation can lead to out-of-bounds memory reads and writes. A remote attacker could exploit this by providing a specially crafted, large input string during regular expression matching. This could result in a denial of service (DoS) due to a process crash or potentially lead to heap memory corruption, enabling arbitrary code execution."},"relatedVulnerabilities":[{"id":"CVE-2026-15534","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"urls":["https://github.com/Perl/perl5/commit/54cf3d44cbbedd17d774e9a37921963e8fd5d0cb.patch","https://github.com/Perl/perl5/commit/568e6fd238867bb9e99fa3f47cba3169009239e0.patch","http://www.openwall.com/lists/oss-security/2026/08/09/12","http://www.openwall.com/lists/oss-security/2026/08/09/13"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15534","description":"Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch.\n\nThe regex engine's superlinear cache holds one bit per subject position for each participating WHILEM node, so the bit count is the subject length plus one times the number of nodes. Nothing checks that product for positive overflow of the signed 32-bit count: a 286331153 byte subject matched against a pattern with 15 participating nodes stores the count as 14, leaving a two byte cache. The cache is then indexed from the real match position and node number, so reads go past the end of the allocation, and on failure CACHEsayNO sets a bit past it.\n\nA caller that matches an attacker controlled subject of this size against a pattern of this shape can crash the process or corrupt heap memory."}]},{"artifact":{"id":"afda1e38bc7344c3","cpes":["cpe:2.3:a:perl-libs:perl-libs:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-libs:perl_libs:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_libs:perl-libs:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_libs:perl_libs:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-libs:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_libs:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-libs:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_libs:4\\:5.32.1-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-libs","purl":"pkg:rpm/redhat/perl-libs@5.32.1-484.el9_8?arch=x86_64&distro=rhel-9.8&epoch=4&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"4:5.32.1-484.el9_8","language":"","licenses":["(GPL+ or Artistic) and BSD and HSRL and MIT and UCD and Public domain"],"metadata":{"epoch":4,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-15534","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-15534","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"risk":0.13696,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-15534","description":"A flaw was found in Perl. An integer overflow vulnerability in the regular expression engine's superlinear cache calculation can lead to out-of-bounds memory reads and writes. A remote attacker could exploit this by providing a specially crafted, large input string during regular expression matching. This could result in a denial of service (DoS) due to a process crash or potentially lead to heap memory corruption, enabling arbitrary code execution."},"relatedVulnerabilities":[{"id":"CVE-2026-15534","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"urls":["https://github.com/Perl/perl5/commit/54cf3d44cbbedd17d774e9a37921963e8fd5d0cb.patch","https://github.com/Perl/perl5/commit/568e6fd238867bb9e99fa3f47cba3169009239e0.patch","http://www.openwall.com/lists/oss-security/2026/08/09/12","http://www.openwall.com/lists/oss-security/2026/08/09/13"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15534","description":"Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch.\n\nThe regex engine's superlinear cache holds one bit per subject position for each participating WHILEM node, so the bit count is the subject length plus one times the number of nodes. Nothing checks that product for positive overflow of the signed 32-bit count: a 286331153 byte subject matched against a pattern with 15 participating nodes stores the count as 14, leaving a two byte cache. The cache is then indexed from the real match position and node number, so reads go past the end of the allocation, and on failure CACHEsayNO sets a bit past it.\n\nA caller that matches an attacker controlled subject of this size against a pattern of this shape can crash the process or corrupt heap memory."}]},{"artifact":{"id":"84662c3c03211d25","cpes":["cpe:2.3:a:perl-mro:perl-mro:0\\:1.23-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-mro:perl_mro:0\\:1.23-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_mro:perl-mro:0\\:1.23-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_mro:perl_mro:0\\:1.23-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-mro:0\\:1.23-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_mro:0\\:1.23-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-mro:0\\:1.23-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_mro:0\\:1.23-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-mro","purl":"pkg:rpm/redhat/perl-mro@1.23-484.el9_8?arch=x86_64&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.23-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-15534","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-15534","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"risk":0.13696,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-15534","description":"A flaw was found in Perl. An integer overflow vulnerability in the regular expression engine's superlinear cache calculation can lead to out-of-bounds memory reads and writes. A remote attacker could exploit this by providing a specially crafted, large input string during regular expression matching. This could result in a denial of service (DoS) due to a process crash or potentially lead to heap memory corruption, enabling arbitrary code execution."},"relatedVulnerabilities":[{"id":"CVE-2026-15534","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"urls":["https://github.com/Perl/perl5/commit/54cf3d44cbbedd17d774e9a37921963e8fd5d0cb.patch","https://github.com/Perl/perl5/commit/568e6fd238867bb9e99fa3f47cba3169009239e0.patch","http://www.openwall.com/lists/oss-security/2026/08/09/12","http://www.openwall.com/lists/oss-security/2026/08/09/13"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15534","description":"Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch.\n\nThe regex engine's superlinear cache holds one bit per subject position for each participating WHILEM node, so the bit count is the subject length plus one times the number of nodes. Nothing checks that product for positive overflow of the signed 32-bit count: a 286331153 byte subject matched against a pattern with 15 participating nodes stores the count as 14, leaving a two byte cache. The cache is then indexed from the real match position and node number, so reads go past the end of the allocation, and on failure CACHEsayNO sets a bit past it.\n\nA caller that matches an attacker controlled subject of this size against a pattern of this shape can crash the process or corrupt heap memory."}]},{"artifact":{"id":"cfd33bba5b1551d2","cpes":["cpe:2.3:a:perl-overload:perl-overload:0\\:1.31-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-overload:perl_overload:0\\:1.31-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_overload:perl-overload:0\\:1.31-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_overload:perl_overload:0\\:1.31-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-overload:0\\:1.31-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_overload:0\\:1.31-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-overload:0\\:1.31-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_overload:0\\:1.31-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-overload","purl":"pkg:rpm/redhat/perl-overload@1.31-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.31-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-15534","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-15534","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"risk":0.13696,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-15534","description":"A flaw was found in Perl. An integer overflow vulnerability in the regular expression engine's superlinear cache calculation can lead to out-of-bounds memory reads and writes. A remote attacker could exploit this by providing a specially crafted, large input string during regular expression matching. This could result in a denial of service (DoS) due to a process crash or potentially lead to heap memory corruption, enabling arbitrary code execution."},"relatedVulnerabilities":[{"id":"CVE-2026-15534","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"urls":["https://github.com/Perl/perl5/commit/54cf3d44cbbedd17d774e9a37921963e8fd5d0cb.patch","https://github.com/Perl/perl5/commit/568e6fd238867bb9e99fa3f47cba3169009239e0.patch","http://www.openwall.com/lists/oss-security/2026/08/09/12","http://www.openwall.com/lists/oss-security/2026/08/09/13"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15534","description":"Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch.\n\nThe regex engine's superlinear cache holds one bit per subject position for each participating WHILEM node, so the bit count is the subject length plus one times the number of nodes. Nothing checks that product for positive overflow of the signed 32-bit count: a 286331153 byte subject matched against a pattern with 15 participating nodes stores the count as 14, leaving a two byte cache. The cache is then indexed from the real match position and node number, so reads go past the end of the allocation, and on failure CACHEsayNO sets a bit past it.\n\nA caller that matches an attacker controlled subject of this size against a pattern of this shape can crash the process or corrupt heap memory."}]},{"artifact":{"id":"15c2c34f0c45d893","cpes":["cpe:2.3:a:perl-overloading:perl-overloading:0\\:0.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-overloading:perl_overloading:0\\:0.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_overloading:perl-overloading:0\\:0.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_overloading:perl_overloading:0\\:0.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-overloading:0\\:0.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_overloading:0\\:0.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-overloading:0\\:0.02-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_overloading:0\\:0.02-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-overloading","purl":"pkg:rpm/redhat/perl-overloading@0.02-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:0.02-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-15534","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-15534","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"risk":0.13696,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-15534","description":"A flaw was found in Perl. An integer overflow vulnerability in the regular expression engine's superlinear cache calculation can lead to out-of-bounds memory reads and writes. A remote attacker could exploit this by providing a specially crafted, large input string during regular expression matching. This could result in a denial of service (DoS) due to a process crash or potentially lead to heap memory corruption, enabling arbitrary code execution."},"relatedVulnerabilities":[{"id":"CVE-2026-15534","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"urls":["https://github.com/Perl/perl5/commit/54cf3d44cbbedd17d774e9a37921963e8fd5d0cb.patch","https://github.com/Perl/perl5/commit/568e6fd238867bb9e99fa3f47cba3169009239e0.patch","http://www.openwall.com/lists/oss-security/2026/08/09/12","http://www.openwall.com/lists/oss-security/2026/08/09/13"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15534","description":"Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch.\n\nThe regex engine's superlinear cache holds one bit per subject position for each participating WHILEM node, so the bit count is the subject length plus one times the number of nodes. Nothing checks that product for positive overflow of the signed 32-bit count: a 286331153 byte subject matched against a pattern with 15 participating nodes stores the count as 14, leaving a two byte cache. The cache is then indexed from the real match position and node number, so reads go past the end of the allocation, and on failure CACHEsayNO sets a bit past it.\n\nA caller that matches an attacker controlled subject of this size against a pattern of this shape can crash the process or corrupt heap memory."}]},{"artifact":{"id":"84db60c0f6c9abcf","cpes":["cpe:2.3:a:perl-subs:perl-subs:0\\:1.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-subs:perl_subs:0\\:1.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_subs:perl-subs:0\\:1.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_subs:perl_subs:0\\:1.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-subs:0\\:1.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_subs:0\\:1.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-subs:0\\:1.03-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_subs:0\\:1.03-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-subs","purl":"pkg:rpm/redhat/perl-subs@1.03-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.03-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-15534","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-15534","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"risk":0.13696,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-15534","description":"A flaw was found in Perl. An integer overflow vulnerability in the regular expression engine's superlinear cache calculation can lead to out-of-bounds memory reads and writes. A remote attacker could exploit this by providing a specially crafted, large input string during regular expression matching. This could result in a denial of service (DoS) due to a process crash or potentially lead to heap memory corruption, enabling arbitrary code execution."},"relatedVulnerabilities":[{"id":"CVE-2026-15534","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"urls":["https://github.com/Perl/perl5/commit/54cf3d44cbbedd17d774e9a37921963e8fd5d0cb.patch","https://github.com/Perl/perl5/commit/568e6fd238867bb9e99fa3f47cba3169009239e0.patch","http://www.openwall.com/lists/oss-security/2026/08/09/12","http://www.openwall.com/lists/oss-security/2026/08/09/13"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15534","description":"Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch.\n\nThe regex engine's superlinear cache holds one bit per subject position for each participating WHILEM node, so the bit count is the subject length plus one times the number of nodes. Nothing checks that product for positive overflow of the signed 32-bit count: a 286331153 byte subject matched against a pattern with 15 participating nodes stores the count as 14, leaving a two byte cache. The cache is then indexed from the real match position and node number, so reads go past the end of the allocation, and on failure CACHEsayNO sets a bit past it.\n\nA caller that matches an attacker controlled subject of this size against a pattern of this shape can crash the process or corrupt heap memory."}]},{"artifact":{"id":"0ad1840c208a6594","cpes":["cpe:2.3:a:perl-vars:perl-vars:0\\:1.05-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl-vars:perl_vars:0\\:1.05-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_vars:perl-vars:0\\:1.05-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl_vars:perl_vars:0\\:1.05-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl-vars:0\\:1.05-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:perl_vars:0\\:1.05-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-vars:0\\:1.05-484.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_vars:0\\:1.05-484.el9_8:*:*:*:*:*:*:*"],"name":"perl-vars","purl":"pkg:rpm/redhat/perl-vars@1.05-484.el9_8?arch=noarch&distro=rhel-9.8&epoch=0&upstream=perl-5.32.1-484.el9_8.src.rpm","type":"rpm","version":"0:1.05-484.el9_8","language":"","licenses":["GPL+ or Artistic"],"metadata":{"epoch":0,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"perl","version":"5.32.1-484.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-15534","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"perl","version":"5.32.1-484.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-15534","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"risk":0.13696,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-15534","description":"A flaw was found in Perl. An integer overflow vulnerability in the regular expression engine's superlinear cache calculation can lead to out-of-bounds memory reads and writes. A remote attacker could exploit this by providing a specially crafted, large input string during regular expression matching. This could result in a denial of service (DoS) due to a process crash or potentially lead to heap memory corruption, enabling arbitrary code execution."},"relatedVulnerabilities":[{"id":"CVE-2026-15534","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.7,"impactScore":4.3,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15534","cwe":"CWE-125","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-190","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"},{"cve":"CVE-2026-15534","cwe":"CWE-787","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-15534","date":"2026-10-10","epss":0.00256,"percentile":0.15884}],"urls":["https://github.com/Perl/perl5/commit/54cf3d44cbbedd17d774e9a37921963e8fd5d0cb.patch","https://github.com/Perl/perl5/commit/568e6fd238867bb9e99fa3f47cba3169009239e0.patch","http://www.openwall.com/lists/oss-security/2026/08/09/12","http://www.openwall.com/lists/oss-security/2026/08/09/13"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15534","description":"Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch.\n\nThe regex engine's superlinear cache holds one bit per subject position for each participating WHILEM node, so the bit count is the subject length plus one times the number of nodes. Nothing checks that product for positive overflow of the signed 32-bit count: a 286331153 byte subject matched against a pattern with 15 participating nodes stores the count as 14, leaving a two byte cache. The cache is then indexed from the real match position and node number, so reads go past the end of the allocation, and on failure CACHEsayNO sets a bit past it.\n\nA caller that matches an attacker controlled subject of this size against a pattern of this shape can crash the process or corrupt heap memory."}]},{"artifact":{"id":"7e23f8149f581507","cpes":["cpe:2.3:a:krb5-libs:krb5-libs:1.21.1-10.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:krb5-libs:krb5_libs:1.21.1-10.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:krb5_libs:krb5-libs:1.21.1-10.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:krb5_libs:krb5_libs:1.21.1-10.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:krb5-libs:1.21.1-10.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:krb5_libs:1.21.1-10.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5-libs:1.21.1-10.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5_libs:1.21.1-10.el9_8:*:*:*:*:*:*:*"],"name":"krb5-libs","purl":"pkg:rpm/redhat/krb5-libs@1.21.1-10.el9_8?arch=x86_64&distro=rhel-9.8&upstream=krb5-1.21.1-10.el9_8.src.rpm","type":"rpm","version":"1.21.1-10.el9_8","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"krb5","version":"1.21.1-10.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-11850","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"krb5","version":"1.21.1-10.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-11850","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H","metrics":{"baseScore":5,"impactScore":4.3,"exploitabilityScore":0.8},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-11850","cwe":"CWE-191","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-11850","date":"2026-10-10","epss":0.00271,"percentile":0.17769}],"risk":0.1355,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-11850","description":"An integer underflow vulnerability was found in MIT krb5 in the berval2tl_data() function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c. The function performs an unsigned subtraction (bv_len - 2) without a prior bounds check. When bv_len is 0 or 1, the subtraction wraps to a large value which is then truncated to uint16_t, yielding 0xFFFE (65534) or 0xFFFF (65535). The subsequent malloc succeeds and memcpy reads up to 65534 bytes from a 0-1 byte buffer, resulting in a heap out-of-bounds read.\nThe attack vector involves a malicious or compromised LDAP KDB backend returning a krbExtraData attribute with bv_len < 2, triggering the underflow when the KDC or kadmind reads principal data."},"relatedVulnerabilities":[{"id":"CVE-2026-11850","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H","metrics":{"baseScore":5,"impactScore":4.3,"exploitabilityScore":0.8},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-11850","cwe":"CWE-191","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-11850","date":"2026-10-10","epss":0.00271,"percentile":0.17769}],"urls":["https://access.redhat.com/errata/RHSA-2026:25520","https://access.redhat.com/security/cve/CVE-2026-11850","https://bugzilla.redhat.com/show_bug.cgi?id=2459970"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-11850","description":"An integer underflow vulnerability was found in MIT krb5 in the berval2tl_data() function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c. The function performs an unsigned subtraction (bv_len - 2) without a prior bounds check. When bv_len is 0 or 1, the subtraction wraps to a large value which is then truncated to uint16_t, yielding 0xFFFE (65534) or 0xFFFF (65535). The subsequent malloc succeeds and memcpy reads up to 65534 bytes from a 0-1 byte buffer, resulting in a heap out-of-bounds read.\nThe attack vector involves a malicious or compromised LDAP KDB backend returning a krbExtraData attribute with bv_len < 2, triggering the underflow when the KDC or kadmind reads principal data."}]},{"artifact":{"id":"386d9731ec4d1b22","cpes":["cpe:2.3:a:gnupg2:gnupg2:2.3.3-5.el9_7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:gnupg2:2.3.3-5.el9_7:*:*:*:*:*:*:*"],"name":"gnupg2","purl":"pkg:rpm/redhat/gnupg2@2.3.3-5.el9_7?arch=x86_64&distro=rhel-9.8&upstream=gnupg2-2.3.3-5.el9_7.src.rpm","type":"rpm","version":"2.3.3-5.el9_7","language":"","licenses":["GPLv3+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-3219","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"gnupg2","version":"0:2.3.3-5.el9_7"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2022-3219","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.2,"impactScore":3.6,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-3219","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-3219","cwe":"CWE-787","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-3219","date":"2026-10-10","epss":0.00293,"percentile":0.20114}],"risk":0.13477999999999998,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-3219","description":"A vulnerability was found in GnuPG. GnuPG can spin on a relatively small input by crafting a public key with thousands of signatures attached and compressed down to a few kilobytes. This issue can potentially cause a denial of service."},"relatedVulnerabilities":[{"id":"CVE-2022-3219","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-3219","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-3219","cwe":"CWE-787","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-3219","date":"2026-10-10","epss":0.00293,"percentile":0.20114}],"urls":["https://access.redhat.com/security/cve/CVE-2022-3219","https://bugzilla.redhat.com/show_bug.cgi?id=2127010","https://dev.gnupg.org/D556","https://dev.gnupg.org/T5993","https://marc.info/?l=oss-security&m=165696590211434&w=4","https://security.netapp.com/advisory/ntap-20230324-0001/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-3219","description":"GnuPG can be made to spin on a relatively small input by (for example) crafting a public key with thousands of signatures attached, compressed down to just a few KB."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-22134","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-22134","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":4.2,"impactScore":3.4,"exploitabilityScore":0.8},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-22134","cwe":"CWE-122","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-22134","date":"2026-10-10","epss":0.00374,"percentile":0.29373}],"risk":0.13464,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-22134","description":"A flaw was found in Vim. Due to Vim not properly terminating visual mode, a heap buffer overflow condition may be triggered when a user switches buffers using the `:all` command. This issue may lead to unexpected behavior, such as an application crash or memory corruption."},"relatedVulnerabilities":[{"id":"CVE-2025-22134","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":4.2,"impactScore":3.4,"exploitabilityScore":0.8},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-22134","cwe":"CWE-122","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-22134","date":"2026-10-10","epss":0.00374,"percentile":0.29373}],"urls":["https://github.com/vim/vim/commit/c9a1e257f1630a0866447e53a564f7ff96a80ead","https://github.com/vim/vim/security/advisories/GHSA-5rgf-26wj-48v8","http://www.openwall.com/lists/oss-security/2025/01/11/1","https://security.netapp.com/advisory/ntap-20250314-0004/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-22134","description":"When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does not properly end visual mode and therefore may try to access beyond the end of a line in a buffer. In Patch 9.1.1003 Vim will correctly reset the visual mode before opening other windows and buffers and therefore fix this bug. In addition it does verify that it won't try to access a position if the position is greater than the corresponding buffer line. Impact is medium since the user must have switched on visual mode when executing the :all ex command. The Vim project would like to thank github user gandalf4a for reporting this issue. The issue has been fixed as of Vim patch v9.1.1003"}]},{"artifact":{"id":"b900134ce800c270","cpes":["cpe:2.3:a:redhat:expat:2.5.0-6.el9_8.5:*:*:*:*:*:*:*","cpe:2.3:a:expat:expat:2.5.0-6.el9_8.5:*:*:*:*:*:*:*"],"name":"expat","purl":"pkg:rpm/redhat/expat@2.5.0-6.el9_8.5?arch=x86_64&distro=rhel-9.8&upstream=expat-2.5.0-6.el9_8.5.src.rpm","type":"rpm","version":"2.5.0-6.el9_8.5","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-41080","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"expat","version":"0:2.5.0-6.el9_8.5"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-41080","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-41080","cwe":"CWE-331","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-41080","date":"2026-10-10","epss":0.00398,"percentile":0.31995}],"risk":0.13333,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-41080","description":"A flaw was found in libexpat. A remote attacker could exploit this vulnerability by providing a specially crafted XML document that leverages insufficient entropy in the hash function. This can lead to hash flooding, a type of Denial of Service (DoS) attack, where the system becomes unresponsive or crashes due to excessive resource consumption."},"relatedVulnerabilities":[{"id":"CVE-2026-41080","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.9,"impactScore":1.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-41080","cwe":"CWE-331","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-41080","date":"2026-10-10","epss":0.00398,"percentile":0.31995}],"urls":["https://blog.hartwork.org/posts/expat-2-8-0-released/","https://github.com/libexpat/libexpat/issues/47","https://github.com/libexpat/libexpat/pull/1183","https://www.openwall.com/lists/oss-security/2026/04/26/1","http://www.openwall.com/lists/oss-security/2026/04/26/1","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-41080","description":"libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document."}]},{"artifact":{"id":"cfb83fcea89d51fa","cpes":["cpe:2.3:a:redhat:glib2:2.68.4-19.el9_8.10:*:*:*:*:*:*:*","cpe:2.3:a:glib2:glib2:2.68.4-19.el9_8.10:*:*:*:*:*:*:*"],"name":"glib2","purl":"pkg:rpm/redhat/glib2@2.68.4-19.el9_8.10?arch=x86_64&distro=rhel-9.8&upstream=glib2-2.68.4-19.el9_8.10.src.rpm","type":"rpm","version":"2.68.4-19.el9_8.10","language":"","licenses":["LGPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-7039","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"glib2","version":"0:2.68.4-19.el9_8.10"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-7039","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-7039","cwe":"CWE-22","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-7039","date":"2026-10-10","epss":0.00397,"percentile":0.31879}],"risk":0.13299499999999997,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-7039","description":"A flaw was found in glib. An integer overflow during temporary file creation leads to an out-of-bounds memory access, allowing an attacker to potentially perform path traversal or access private temporary file content by creating symbolic links. This vulnerability allows a local attacker to manipulate file paths and access unauthorized data. The core issue stems from insufficient validation of file path lengths during temporary file operations."},"relatedVulnerabilities":[{"id":"CVE-2025-7039","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-7039","cwe":"CWE-22","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-7039","date":"2026-10-10","epss":0.00397,"percentile":0.31879}],"urls":["https://access.redhat.com/security/cve/CVE-2025-7039","https://bugzilla.redhat.com/show_bug.cgi?id=2392423","https://cert-portal.siemens.com/productcert/html/ssa-253495.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-7039","description":"A flaw was found in glib. An integer overflow during temporary file creation leads to an out-of-bounds memory access, allowing an attacker to potentially perform path traversal or access private temporary file content by creating symbolic links. This vulnerability allows a local attacker to manipulate file paths and access unauthorized data. The core issue stems from insufficient validation of file path lengths during temporary file operations."}]},{"artifact":{"id":"73ec63868795f316","cpes":["cpe:2.3:a:openssl:openssl:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:rpm/redhat/openssl@3.5.8-1.el9_8?arch=x86_64&distro=rhel-9.8&epoch=1&upstream=openssl-3.5.8-1.el9_8.src.rpm","type":"rpm","version":"1:3.5.8-1.el9_8","language":"","licenses":["Apache-2.0"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-77696","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"openssl","version":"1:3.5.8-1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-77696","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-77696","cwe":"CWE-208","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-77696","date":"2026-10-10","epss":0.00243,"percentile":0.14308}],"risk":0.132435,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-77696","description":"A flaw was found in OpenSSL. During SM2 signature generation, variable-time arithmetic operations are performed on secret values, creating an observable timing side-channel. An attacker capable of measuring signature generation times can collect timing data across multiple signing operations, which may allow them to recover the private key."},"relatedVulnerabilities":[{"id":"CVE-2026-77696","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-77696","cwe":"CWE-208","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-77696","date":"2026-10-10","epss":0.00243,"percentile":0.14308}],"urls":["https://github.com/openssl/openssl/commit/1c4aed808a7aea32d2d013049c2e0d9fef164fc9","https://github.com/openssl/openssl/commit/20b20628d39b2dcc4677194bd68c7c060fa598cb","https://github.com/openssl/openssl/commit/419f5cb519721dceed393dbc524d79e487c72e64","https://github.com/openssl/openssl/commit/6b90445a56b99a328ac1feba058abf976504f440","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-77696","description":"Issue summary: SM2 signature generation uses non-constant-time arithmetic\non secret values, forming a timing side-channel.\n\nImpact summary: An attacker able to measure SM2 signing times may learn\ninformation about the per-signature secret nonce, which over many signatures\ncan, via a lattice / Hidden Number Problem attack, lead to recovery of the\nprivate key.\n\nCWE: CWE-208: Observable Timing Discrepancy\n\nDescription: SM2 signature generation computes the signature value using\nvariable-time BIGNUM operations on the secret nonce and the private key, so\nthe time taken to produce an SM2 signature depends on these secret values,\nforming a timing side-channel.\n\nApplications performing SM2 signature generation are affected on all\nplatforms.\n\nFIPS Impact: no\nSM2 is not a FIPS algorithm."}]},{"artifact":{"id":"753337be7fe19d16","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/redhat/openssl-libs@3.5.8-1.el9_8?arch=x86_64&distro=rhel-9.8&epoch=1&upstream=openssl-3.5.8-1.el9_8.src.rpm","type":"rpm","version":"1:3.5.8-1.el9_8","language":"","licenses":["Apache-2.0"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"3.5.8-1.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-77696","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"openssl","version":"3.5.8-1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-77696","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-77696","cwe":"CWE-208","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-77696","date":"2026-10-10","epss":0.00243,"percentile":0.14308}],"risk":0.132435,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-77696","description":"A flaw was found in OpenSSL. During SM2 signature generation, variable-time arithmetic operations are performed on secret values, creating an observable timing side-channel. An attacker capable of measuring signature generation times can collect timing data across multiple signing operations, which may allow them to recover the private key."},"relatedVulnerabilities":[{"id":"CVE-2026-77696","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-77696","cwe":"CWE-208","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-77696","date":"2026-10-10","epss":0.00243,"percentile":0.14308}],"urls":["https://github.com/openssl/openssl/commit/1c4aed808a7aea32d2d013049c2e0d9fef164fc9","https://github.com/openssl/openssl/commit/20b20628d39b2dcc4677194bd68c7c060fa598cb","https://github.com/openssl/openssl/commit/419f5cb519721dceed393dbc524d79e487c72e64","https://github.com/openssl/openssl/commit/6b90445a56b99a328ac1feba058abf976504f440","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-77696","description":"Issue summary: SM2 signature generation uses non-constant-time arithmetic\non secret values, forming a timing side-channel.\n\nImpact summary: An attacker able to measure SM2 signing times may learn\ninformation about the per-signature secret nonce, which over many signatures\ncan, via a lattice / Hidden Number Problem attack, lead to recovery of the\nprivate key.\n\nCWE: CWE-208: Observable Timing Discrepancy\n\nDescription: SM2 signature generation computes the signature value using\nvariable-time BIGNUM operations on the secret nonce and the private key, so\nthe time taken to produce an SM2 signature depends on these secret values,\nforming a timing side-channel.\n\nApplications performing SM2 signature generation are affected on all\nplatforms.\n\nFIPS Impact: no\nSM2 is not a FIPS algorithm."}]},{"artifact":{"id":"2ac7f6262c1f6abe","cpes":["cpe:2.3:a:gdb-gdbserver:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb-gdbserver:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb_gdbserver:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb_gdbserver:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*"],"name":"gdb-gdbserver","purl":"pkg:rpm/redhat/gdb-gdbserver@16.3-3.1.el9_8?arch=x86_64&distro=rhel-9.8&upstream=gdb-16.3-3.1.el9_8.src.rpm","type":"rpm","version":"16.3-3.1.el9_8","language":"","licenses":["GPL-3.0-or-later AND BSD-3-Clause AND FSFAP AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain AND GFDL-1.3-or-later AND LGPL-2.0-or-later WITH GCC-exception-2.0 AND GPL-3.0-or-later WITH GCC-exception-3.1 AND GPL-2.0-or-later WITH GNU-compiler-exception AND MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"gdb","version":"16.3-3.1.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-11083","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"gdb","version":"16.3-3.1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-11083","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.3,"impactScore":3.4,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-11083","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-11083","cwe":"CWE-122","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-11083","date":"2026-10-10","epss":0.00255,"percentile":0.15724}],"risk":0.13132500000000003,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-11083","description":"A head based buffer overflow flaw has been discovered in GNU bin utilities. The affected element is the function elf_swap_shdr in the library bfd/elfcode.h of the component Linker. The manipulation leads to heap-based buffer overflow. The attack must be carried out locally."},"relatedVulnerabilities":[{"id":"CVE-2025-11083","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":1.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.3,"impactScore":3.4,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:L/AC:L/Au:S/C:P/I:P/A:P","metrics":{"baseScore":4.3,"impactScore":6.5,"exploitabilityScore":3.2},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-11083","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-11083","cwe":"CWE-122","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-11083","date":"2026-10-10","epss":0.00255,"percentile":0.15724}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=16353","https://sourceware.org/bugzilla/show_bug.cgi?id=33457","https://sourceware.org/bugzilla/show_bug.cgi?id=33457#c1","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=9ca499644a21ceb3f946d1c179c38a83be084490","https://vuldb.com/?ctiid.326124","https://vuldb.com/?id.326124","https://vuldb.com/?submit.661277","https://www.gnu.org/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-11083","description":"A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elf_swap_shdr in the library bfd/elfcode.h of the component Linker. The manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is 9ca499644a21ceb3f946d1c179c38a83be084490. To fix this issue, it is recommended to deploy a patch. The code maintainer replied with \"[f]ixed for 2.46\"."}]},{"artifact":{"id":"2ac7f6262c1f6abe","cpes":["cpe:2.3:a:gdb-gdbserver:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb-gdbserver:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb_gdbserver:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb_gdbserver:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*"],"name":"gdb-gdbserver","purl":"pkg:rpm/redhat/gdb-gdbserver@16.3-3.1.el9_8?arch=x86_64&distro=rhel-9.8&upstream=gdb-16.3-3.1.el9_8.src.rpm","type":"rpm","version":"16.3-3.1.el9_8","language":"","licenses":["GPL-3.0-or-later AND BSD-3-Clause AND FSFAP AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain AND GFDL-1.3-or-later AND LGPL-2.0-or-later WITH GCC-exception-2.0 AND GPL-3.0-or-later WITH GCC-exception-3.1 AND GPL-2.0-or-later WITH GNU-compiler-exception AND MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"gdb","version":"16.3-3.1.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-11082","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"gdb","version":"16.3-3.1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-11082","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.3,"impactScore":3.4,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-11082","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-11082","cwe":"CWE-122","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-11082","date":"2026-10-10","epss":0.00254,"percentile":0.15597}],"risk":0.13081,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-11082","description":"A head based buffer overflow flaw has been discovered in GNU bin utilities. Impacted is the function _bfd_elf_parse_eh_frame of the file bfd/elf-eh-frame.c of the component Linker. Executing manipulation can lead to heap-based buffer overflow. The attack is restricted to local execution."},"relatedVulnerabilities":[{"id":"CVE-2025-11082","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":1.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.3,"impactScore":3.4,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:L/AC:L/Au:S/C:P/I:P/A:P","metrics":{"baseScore":4.3,"impactScore":6.5,"exploitabilityScore":3.2},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-11082","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-11082","cwe":"CWE-122","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-11082","date":"2026-10-10","epss":0.00254,"percentile":0.15597}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=16358","https://sourceware.org/bugzilla/show_bug.cgi?id=33464","https://sourceware.org/bugzilla/show_bug.cgi?id=33464#c2","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ea1a0737c7692737a644af0486b71e4a392cbca8","https://vuldb.com/?ctiid.326123","https://vuldb.com/?id.326123","https://vuldb.com/?submit.661276","https://www.gnu.org/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-11082","description":"A flaw has been found in GNU Binutils 2.45. Impacted is the function _bfd_elf_parse_eh_frame of the file bfd/elf-eh-frame.c of the component Linker. Executing manipulation can lead to heap-based buffer overflow. The attack is restricted to local execution. The exploit has been published and may be used. This patch is called ea1a0737c7692737a644af0486b71e4a392cbca8. A patch should be applied to remediate this issue. The code maintainer replied with \"[f]ixed for 2.46\"."}]},{"artifact":{"id":"2ac7f6262c1f6abe","cpes":["cpe:2.3:a:gdb-gdbserver:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb-gdbserver:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb_gdbserver:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb_gdbserver:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*"],"name":"gdb-gdbserver","purl":"pkg:rpm/redhat/gdb-gdbserver@16.3-3.1.el9_8?arch=x86_64&distro=rhel-9.8&upstream=gdb-16.3-3.1.el9_8.src.rpm","type":"rpm","version":"16.3-3.1.el9_8","language":"","licenses":["GPL-3.0-or-later AND BSD-3-Clause AND FSFAP AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain AND GFDL-1.3-or-later AND LGPL-2.0-or-later WITH GCC-exception-2.0 AND GPL-3.0-or-later WITH GCC-exception-3.1 AND GPL-2.0-or-later WITH GNU-compiler-exception AND MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"gdb","version":"16.3-3.1.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-5245","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"gdb","version":"16.3-3.1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-5245","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":4,"impactScore":1.5,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-5245","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-5245","date":"2026-10-10","epss":0.00286,"percentile":0.19389}],"risk":0.1287,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-5245","description":"A denial-of-service vulnerability has been identified in GNU Binutils, affecting versions up to 2.44. The flaw resides within the debug_type_samep function in the /binutils/debug.c file of the objdump component. An attacker with local access can trigger a program crash by manipulating input data, leading to a denial of service for the objdump utility."},"relatedVulnerabilities":[{"id":"CVE-2025-5245","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.3,"impactScore":3.4,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:L/AC:L/Au:S/C:P/I:P/A:P","metrics":{"baseScore":4.3,"impactScore":6.5,"exploitabilityScore":3.2},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-5245","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-5245","date":"2026-10-10","epss":0.00286,"percentile":0.19389}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=16004","https://sourceware.org/bugzilla/show_bug.cgi?id=32829","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=6c3458a8b7ee7d39f070c7b2350851cb2110c65a","https://vuldb.com/?ctiid.310347","https://vuldb.com/?id.310347","https://vuldb.com/?submit.584635","https://www.gnu.org/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-5245","description":"A vulnerability classified as critical has been found in GNU Binutils up to 2.44. This affects the function debug_type_samep of the file /binutils/debug.c of the component objdump. The manipulation leads to memory corruption. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-46246","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2023-46246","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":4,"impactScore":1.5,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-46246","cwe":"CWE-190","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2023-46246","cwe":"CWE-416","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2023-46246","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-46246","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-46246","date":"2026-10-10","epss":0.00366,"percentile":0.28507}],"risk":0.1281,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-46246","description":"Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function `ga_grow_inner` in in the file `src/alloc.c` at line 748, which is freed in the file `src/ex_docmd.c` in the function `do_cmdline` at line 1010 and then used again in `src/cmdhist.c` at line 759. When using the `:history` command, it's possible that the provided argument overflows the accepted value. Causing an Integer Overflow and potentially later an use-after-free. This vulnerability has been patched in version 9.0.2068."},"relatedVulnerabilities":[{"id":"CVE-2023-46246","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":4,"impactScore":1.5,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-46246","cwe":"CWE-190","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2023-46246","cwe":"CWE-416","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2023-46246","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-46246","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-46246","date":"2026-10-10","epss":0.00366,"percentile":0.28507}],"urls":["https://github.com/vim/vim/commit/9198c1f2b1ddecde22af918541e0de2a32f0f45a","https://github.com/vim/vim/security/advisories/GHSA-q22m-h7m2-9mgm","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DNMFS3IH74KEMMESOA3EOB6MZ56TWGFF/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IVA7K73WHQH4KVFDJQ7ELIUD2WK5ZT5E/","https://security.netapp.com/advisory/ntap-20231208-0006/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-46246","description":"Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function `ga_grow_inner` in in the file `src/alloc.c` at line 748, which is freed in the file `src/ex_docmd.c` in the function `do_cmdline` at line 1010 and then used again in `src/cmdhist.c` at line 759. When using the `:history` command, it's possible that the provided argument overflows the accepted value. Causing an Integer Overflow and potentially later an use-after-free. This vulnerability has been patched in version 9.0.2068."}]},{"artifact":{"id":"e1b413eca8446714","cpes":["cpe:2.3:a:libarchive:libarchive:3.5.3-11.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libarchive:3.5.3-11.el9_8:*:*:*:*:*:*:*"],"name":"libarchive","purl":"pkg:rpm/redhat/libarchive@3.5.3-11.el9_8?arch=x86_64&distro=rhel-9.8&upstream=libarchive-3.5.3-11.el9_8.src.rpm","type":"rpm","version":"3.5.3-11.el9_8","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-5918","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"libarchive","version":"0:3.5.3-11.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-5918","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L","metrics":{"baseScore":3.9,"impactScore":2.6,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-5918","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-5918","date":"2026-10-10","epss":0.00368,"percentile":0.28675}],"risk":0.12696,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-5918","description":"A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for reading past the end of the file. This out-of-bounds read can lead to unintended consequences, including unpredictable program behavior, memory corruption, or a denial-of-service condition."},"relatedVulnerabilities":[{"id":"CVE-2025-5918","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H","metrics":{"baseScore":6.6,"impactScore":5.2,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L","metrics":{"baseScore":3.9,"impactScore":2.6,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-5918","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-5918","date":"2026-10-10","epss":0.00368,"percentile":0.28675}],"urls":["https://access.redhat.com/security/cve/CVE-2025-5918","https://bugzilla.redhat.com/show_bug.cgi?id=2370877","https://github.com/libarchive/libarchive/pull/2584","https://github.com/libarchive/libarchive/releases/tag/v3.8.0"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-5918","description":"A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for reading past the end of the file. This out-of-bounds read can lead to unintended consequences, including unpredictable program behavior, memory corruption, or a denial-of-service condition."}]},{"artifact":{"id":"ea0f2a7e0eb5d962","cpes":["cpe:2.3:a:python3:python3:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3:3.9.25-7.el9_8.3:*:*:*:*:*:*:*"],"name":"python3","purl":"pkg:rpm/redhat/python3@3.9.25-7.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=python3.9-3.9.25-7.el9_8.3.src.rpm","type":"rpm","version":"3.9.25-7.el9_8.3","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python3.9","version":"3.9.25-7.el9_8.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6019","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"python3.9","version":"3.9.25-7.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-6019","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":6.8,"impactScore":5.2,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6019","cwe":"CWE-150","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-6019","cwe":"CWE-116","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-6019","date":"2026-10-10","epss":0.00211,"percentile":0.1046}],"risk":0.12448999999999999,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-6019","description":"A flaw was found in Python's `http.cookies` module. The `Morsel.js_output()` function, responsible for generating JavaScript output for cookies, does not properly neutralize the `</script>` HTML sequence. This oversight could allow a remote attacker to inject malicious script into a web page, potentially leading to Cross-Site Scripting (XSS) attacks. Such an attack could result in information disclosure or arbitrary code execution within the user's browser."},"relatedVulnerabilities":[{"id":"CVE-2026-6019","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6019","cwe":"CWE-150","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-6019","cwe":"CWE-116","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-6019","date":"2026-10-10","epss":0.00211,"percentile":0.1046}],"urls":["https://github.com/python/cpython/commit/3c59b8b53fc75c7f9578d16fb8201ceb43e8f76c","https://github.com/python/cpython/commit/76b3923d688c0efc580658476c5f525ec8735104","https://github.com/python/cpython/commit/f795e042043dfe26c42e1971d4502c1cdc4c65b8","https://github.com/python/cpython/issues/90309","https://github.com/python/cpython/pull/148848","https://mail.python.org/archives/list/security-announce@python.org/thread/IVNWGV2BBNC3RHQAFS22UP4DY56SAXX3/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6019","description":"http.cookies.Morsel.js_output() returns an inline <script> snippet and only escapes \" for JavaScript string context. It does not neutralize the HTML parser-sensitive sequence </script> inside the generated script element. Mitigation base64-encodes the cookie value to disallow escaping using cookie value."}]},{"artifact":{"id":"0ed3c72bb9ee9391","cpes":["cpe:2.3:a:python3-libs:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3-libs:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3_libs:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3_libs:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*"],"name":"python3-libs","purl":"pkg:rpm/redhat/python3-libs@3.9.25-7.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=python3.9-3.9.25-7.el9_8.3.src.rpm","type":"rpm","version":"3.9.25-7.el9_8.3","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python3.9","version":"3.9.25-7.el9_8.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6019","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"python3.9","version":"3.9.25-7.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-6019","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":6.8,"impactScore":5.2,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6019","cwe":"CWE-150","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-6019","cwe":"CWE-116","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-6019","date":"2026-10-10","epss":0.00211,"percentile":0.1046}],"risk":0.12448999999999999,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-6019","description":"A flaw was found in Python's `http.cookies` module. The `Morsel.js_output()` function, responsible for generating JavaScript output for cookies, does not properly neutralize the `</script>` HTML sequence. This oversight could allow a remote attacker to inject malicious script into a web page, potentially leading to Cross-Site Scripting (XSS) attacks. Such an attack could result in information disclosure or arbitrary code execution within the user's browser."},"relatedVulnerabilities":[{"id":"CVE-2026-6019","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6019","cwe":"CWE-150","type":"Secondary","source":"cna@python.org"},{"cve":"CVE-2026-6019","cwe":"CWE-116","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-6019","date":"2026-10-10","epss":0.00211,"percentile":0.1046}],"urls":["https://github.com/python/cpython/commit/3c59b8b53fc75c7f9578d16fb8201ceb43e8f76c","https://github.com/python/cpython/commit/76b3923d688c0efc580658476c5f525ec8735104","https://github.com/python/cpython/commit/f795e042043dfe26c42e1971d4502c1cdc4c65b8","https://github.com/python/cpython/issues/90309","https://github.com/python/cpython/pull/148848","https://mail.python.org/archives/list/security-announce@python.org/thread/IVNWGV2BBNC3RHQAFS22UP4DY56SAXX3/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6019","description":"http.cookies.Morsel.js_output() returns an inline <script> snippet and only escapes \" for JavaScript string context. It does not neutralize the HTML parser-sensitive sequence </script> inside the generated script element. Mitigation base64-encodes the cookie value to disallow escaping using cookie value."}]},{"artifact":{"id":"9eebaea2eda844dd","cpes":["cpe:2.3:a:curl-minimal:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl-minimal:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl_minimal:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl_minimal:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*"],"name":"curl-minimal","purl":"pkg:rpm/redhat/curl-minimal@7.76.1-40.el9_8.7?arch=x86_64&distro=rhel-9.8&upstream=curl-7.76.1-40.el9_8.7.src.rpm","type":"rpm","version":"7.76.1-40.el9_8.7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.76.1-40.el9_8.7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-80230","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"curl","version":"7.76.1-40.el9_8.7"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-80230","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-80230","cwe":"CWE-295","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-80230","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-80230","date":"2026-10-10","epss":0.00371,"percentile":0.29087}],"risk":0.12428499999999999,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-80230","description":"A flaw was found in libcurl, a client-side URL transfer library. When public key pinning is configured, but standard peer verification is explicitly disabled, libcurl incorrectly allows connections to proceed without enforcing the public key pinning. This bypass enables unauthenticated connections that should have been rejected, potentially compromising the integrity of the connection."},"relatedVulnerabilities":[{"id":"CVE-2026-80230","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-80230","cwe":"CWE-295","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-80230","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-80230","date":"2026-10-10","epss":0.00371,"percentile":0.29087}],"urls":["https://curl.se/docs/CVE-2026-80230.html","https://curl.se/docs/CVE-2026-80230.json","https://hackerone.com/reports/3969300"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-80230","description":"When `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that disable\nstandard peer verification (`CURLOPT_SSL_VERIFYPEER = 0` and\n`CURLOPT_SSL_VERIFYHOST = 0`), libcurl fails to enforce public key pinning on\nconnections established without a presented server certificate. Bypassing the\npinning check under these disabled-verification conditions allows\nunauthenticated connections to succeed when they should be rejected."}]},{"artifact":{"id":"b685606a6baf0f79","cpes":["cpe:2.3:a:libcurl-minimal:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl-minimal:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl_minimal:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl_minimal:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*"],"name":"libcurl-minimal","purl":"pkg:rpm/redhat/libcurl-minimal@7.76.1-40.el9_8.7?arch=x86_64&distro=rhel-9.8&upstream=curl-7.76.1-40.el9_8.7.src.rpm","type":"rpm","version":"7.76.1-40.el9_8.7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.76.1-40.el9_8.7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-80230","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"curl","version":"7.76.1-40.el9_8.7"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-80230","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-80230","cwe":"CWE-295","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-80230","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-80230","date":"2026-10-10","epss":0.00371,"percentile":0.29087}],"risk":0.12428499999999999,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-80230","description":"A flaw was found in libcurl, a client-side URL transfer library. When public key pinning is configured, but standard peer verification is explicitly disabled, libcurl incorrectly allows connections to proceed without enforcing the public key pinning. This bypass enables unauthenticated connections that should have been rejected, potentially compromising the integrity of the connection."},"relatedVulnerabilities":[{"id":"CVE-2026-80230","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-80230","cwe":"CWE-295","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-80230","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-80230","date":"2026-10-10","epss":0.00371,"percentile":0.29087}],"urls":["https://curl.se/docs/CVE-2026-80230.html","https://curl.se/docs/CVE-2026-80230.json","https://hackerone.com/reports/3969300"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-80230","description":"When `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that disable\nstandard peer verification (`CURLOPT_SSL_VERIFYPEER = 0` and\n`CURLOPT_SSL_VERIFYHOST = 0`), libcurl fails to enforce public key pinning on\nconnections established without a presented server certificate. Bypassing the\npinning check under these disabled-verification conditions allows\nunauthenticated connections to succeed when they should be rejected."}]},{"artifact":{"id":"8cf05c8343d9a4a8","cpes":["cpe:2.3:a:libxml2:libxml2:2.9.13-14.el9_8.5:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libxml2:2.9.13-14.el9_8.5:*:*:*:*:*:*:*"],"name":"libxml2","purl":"pkg:rpm/redhat/libxml2@2.9.13-14.el9_8.5?arch=x86_64&distro=rhel-9.8&upstream=libxml2-2.9.13-14.el9_8.5.src.rpm","type":"rpm","version":"2.9.13-14.el9_8.5","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-1757","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"libxml2","version":"0:2.9.13-14.el9_8.5"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-1757","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.2,"impactScore":3.6,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-1757","cwe":"CWE-401","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-1757","date":"2026-10-10","epss":0.00221,"percentile":0.11623}],"risk":0.12376000000000001,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-1757","description":"A flaw was identified in the interactive shell of the xmllint utility, part of the libxml2 project, where memory allocated for user input is not properly released under certain conditions. When a user submits input consisting only of whitespace, the program skips command execution but fails to free the allocated buffer. Repeating this action causes memory to continuously accumulate. Over time, this can exhaust system memory and terminate the xmllint process, creating a denial-of-service condition on the local system."},"relatedVulnerabilities":[{"id":"CVE-2026-1757","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.2,"impactScore":3.6,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-1757","cwe":"CWE-401","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-1757","date":"2026-10-10","epss":0.00221,"percentile":0.11623}],"urls":["https://access.redhat.com/errata/RHSA-2026:7519","https://access.redhat.com/security/cve/CVE-2026-1757","https://bugzilla.redhat.com/show_bug.cgi?id=2435940","https://gitlab.gnome.org/GNOME/libxml2/-/issues/1009"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-1757","description":"A flaw was identified in the interactive shell of the xmllint utility, part of the libxml2 project, where memory allocated for user input is not properly released under certain conditions. When a user submits input consisting only of whitespace, the program skips command execution but fails to free the allocated buffer. Repeating this action causes memory to continuously accumulate. Over time, this can exhaust system memory and terminate the xmllint process, creating a denial-of-service condition on the local system."}]},{"artifact":{"id":"a3c55d7a5e4bf54f","cpes":["cpe:2.3:a:redhat:glibc:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc:2.34-275.el9_8:*:*:*:*:*:*:*"],"name":"glibc","purl":"pkg:rpm/redhat/glibc@2.34-275.el9_8?arch=x86_64&distro=rhel-9.8&upstream=glibc-2.34-275.el9_8.src.rpm","type":"rpm","version":"2.34-275.el9_8","language":"","licenses":["LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-89092","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"glibc","version":"0:2.34-275.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-89092","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":4.2,"impactScore":2.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-89092","cwe":"CWE-789","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-89092","date":"2026-10-10","epss":0.00265,"percentile":0.16969}],"risk":0.12190000000000001,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-89092","description":"A flaw was found in glibc, specifically within the nscd service. A remote attacker, operating a malicious Domain Name System (DNS) server, could send an overly large DNS response. This could trigger a stack overflow in the nscd service, causing it to crash and leading to degraded DNS resolution for the system. There is also a remote possibility of nscd cache corruption."},"relatedVulnerabilities":[{"id":"CVE-2026-89092","cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":4.2,"impactScore":2.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-89092","cwe":"CWE-789","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-89092","date":"2026-10-10","epss":0.00265,"percentile":0.16969}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=34624","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0016","http://www.openwall.com/lists/oss-security/2026/09/11/2"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-89092","description":"The nscd service in the GNU C Library 2.3.4 onwards may crash due to a \nstack overflow when a malicious DNS server returns too large a response \nfor a DNS query, resulting in degraded DNS resolution for the system.\n\n\n\nExploitation of this bug needs a system that has nscd enabled and using \nan untrusted DNS server for name resolution, with the compromised DNS \nserver being capable of processing records large enough to result in a \nstack overflow in an nscd thread stack.  During experimentation, bind 9 \nwas unable to handle large records, but that could change in future or \nwith a different name server.  In typical installations, nscd is \nexecuted in an isolated context as its own user without a shell, due to \nwhich any compromise of that service is isolated.\n\n\n\nThere is a remote possibility of nscd cache corruption if an attacker \nmanages to get the stack pointer into a desired point in the heap, \npotentially resulting in other caches in nscd being overwritten with \ncorrupt data through the stack overflow, until the buggy code path \neventually results in a crash.\n\n\n\nFinally, a crash in nscd may result in performance degradation when \nresolving names, but it does not result in a denial of service."}]},{"artifact":{"id":"88cf218ecaac1f25","cpes":["cpe:2.3:a:glibc-common:glibc-common:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc-common:glibc_common:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc-common:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc_common:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:glibc-common:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:glibc_common:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc-common:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc_common:2.34-275.el9_8:*:*:*:*:*:*:*"],"name":"glibc-common","purl":"pkg:rpm/redhat/glibc-common@2.34-275.el9_8?arch=x86_64&distro=rhel-9.8&upstream=glibc-2.34-275.el9_8.src.rpm","type":"rpm","version":"2.34-275.el9_8","language":"","licenses":["LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"glibc","version":"2.34-275.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-89092","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"glibc","version":"2.34-275.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-89092","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":4.2,"impactScore":2.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-89092","cwe":"CWE-789","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-89092","date":"2026-10-10","epss":0.00265,"percentile":0.16969}],"risk":0.12190000000000001,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-89092","description":"A flaw was found in glibc, specifically within the nscd service. A remote attacker, operating a malicious Domain Name System (DNS) server, could send an overly large DNS response. This could trigger a stack overflow in the nscd service, causing it to crash and leading to degraded DNS resolution for the system. There is also a remote possibility of nscd cache corruption."},"relatedVulnerabilities":[{"id":"CVE-2026-89092","cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":4.2,"impactScore":2.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-89092","cwe":"CWE-789","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-89092","date":"2026-10-10","epss":0.00265,"percentile":0.16969}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=34624","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0016","http://www.openwall.com/lists/oss-security/2026/09/11/2"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-89092","description":"The nscd service in the GNU C Library 2.3.4 onwards may crash due to a \nstack overflow when a malicious DNS server returns too large a response \nfor a DNS query, resulting in degraded DNS resolution for the system.\n\n\n\nExploitation of this bug needs a system that has nscd enabled and using \nan untrusted DNS server for name resolution, with the compromised DNS \nserver being capable of processing records large enough to result in a \nstack overflow in an nscd thread stack.  During experimentation, bind 9 \nwas unable to handle large records, but that could change in future or \nwith a different name server.  In typical installations, nscd is \nexecuted in an isolated context as its own user without a shell, due to \nwhich any compromise of that service is isolated.\n\n\n\nThere is a remote possibility of nscd cache corruption if an attacker \nmanages to get the stack pointer into a desired point in the heap, \npotentially resulting in other caches in nscd being overwritten with \ncorrupt data through the stack overflow, until the buggy code path \neventually results in a crash.\n\n\n\nFinally, a crash in nscd may result in performance degradation when \nresolving names, but it does not result in a denial of service."}]},{"artifact":{"id":"20293a554663f535","cpes":["cpe:2.3:a:glibc-minimal-langpack:glibc-minimal-langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc-minimal-langpack:glibc_minimal_langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc_minimal_langpack:glibc-minimal-langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc_minimal_langpack:glibc_minimal_langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc-minimal:glibc-minimal-langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc-minimal:glibc_minimal_langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc_minimal:glibc-minimal-langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc_minimal:glibc_minimal_langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:glibc-minimal-langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:glibc_minimal_langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc-minimal-langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc_minimal_langpack:2.34-275.el9_8:*:*:*:*:*:*:*"],"name":"glibc-minimal-langpack","purl":"pkg:rpm/redhat/glibc-minimal-langpack@2.34-275.el9_8?arch=x86_64&distro=rhel-9.8&upstream=glibc-2.34-275.el9_8.src.rpm","type":"rpm","version":"2.34-275.el9_8","language":"","licenses":["LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"glibc","version":"2.34-275.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-89092","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"glibc","version":"2.34-275.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-89092","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":4.2,"impactScore":2.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-89092","cwe":"CWE-789","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-89092","date":"2026-10-10","epss":0.00265,"percentile":0.16969}],"risk":0.12190000000000001,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-89092","description":"A flaw was found in glibc, specifically within the nscd service. A remote attacker, operating a malicious Domain Name System (DNS) server, could send an overly large DNS response. This could trigger a stack overflow in the nscd service, causing it to crash and leading to degraded DNS resolution for the system. There is also a remote possibility of nscd cache corruption."},"relatedVulnerabilities":[{"id":"CVE-2026-89092","cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":4.2,"impactScore":2.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-89092","cwe":"CWE-789","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-89092","date":"2026-10-10","epss":0.00265,"percentile":0.16969}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=34624","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0016","http://www.openwall.com/lists/oss-security/2026/09/11/2"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-89092","description":"The nscd service in the GNU C Library 2.3.4 onwards may crash due to a \nstack overflow when a malicious DNS server returns too large a response \nfor a DNS query, resulting in degraded DNS resolution for the system.\n\n\n\nExploitation of this bug needs a system that has nscd enabled and using \nan untrusted DNS server for name resolution, with the compromised DNS \nserver being capable of processing records large enough to result in a \nstack overflow in an nscd thread stack.  During experimentation, bind 9 \nwas unable to handle large records, but that could change in future or \nwith a different name server.  In typical installations, nscd is \nexecuted in an isolated context as its own user without a shell, due to \nwhich any compromise of that service is isolated.\n\n\n\nThere is a remote possibility of nscd cache corruption if an attacker \nmanages to get the stack pointer into a desired point in the heap, \npotentially resulting in other caches in nscd being overwritten with \ncorrupt data through the stack overflow, until the buggy code path \neventually results in a crash.\n\n\n\nFinally, a crash in nscd may result in performance degradation when \nresolving names, but it does not result in a denial of service."}]},{"artifact":{"id":"ea0f2a7e0eb5d962","cpes":["cpe:2.3:a:python3:python3:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3:3.9.25-7.el9_8.3:*:*:*:*:*:*:*"],"name":"python3","purl":"pkg:rpm/redhat/python3@3.9.25-7.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=python3.9-3.9.25-7.el9_8.3.src.rpm","type":"rpm","version":"3.9.25-7.el9_8.3","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python3.9","version":"3.9.25-7.el9_8.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-13837","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"python3.9","version":"3.9.25-7.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-13837","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":4,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-13837","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-13837","date":"2026-10-10","epss":0.00223,"percentile":0.11887}],"risk":0.12153500000000002,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-13837","description":"A flaw was found in the plistlib module in the Python standard library. The amount of data to read from a Plist file is specified in the file itself. This issue allows a specially crafted Plist file to cause an application to allocate a large amount of memory, potentially resulting in allocations errors, swapping, out-of-memory conditions or even system freezes."},"relatedVulnerabilities":[{"id":"CVE-2025-13837","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-13837","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-13837","date":"2026-10-10","epss":0.00223,"percentile":0.11887}],"urls":["https://github.com/python/cpython/commit/568342cfc8f002d9a15f30238f26b9d2e0e79036","https://github.com/python/cpython/commit/5a8b19677d818fb41ee55f310233772e15aa1a2b","https://github.com/python/cpython/commit/694922cf40aa3a28f898b5f5ee08b71b4922df70","https://github.com/python/cpython/commit/71fa8eb8233b37f16c88b6e3e583b461b205d1ba","https://github.com/python/cpython/commit/b64441e4852383645af5b435411a6f849dd1b4cb","https://github.com/python/cpython/commit/cefee7d118a26ef6cd43db59bb9d98ca9a331111","https://github.com/python/cpython/issues/119342","https://github.com/python/cpython/pull/119343","https://mail.python.org/archives/list/security-announce@python.org/thread/2X5IBCJXRQAZ5PSERLHMSJFBHFR3QM2C/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-13837","description":"When loading a plist file, the plistlib module reads data in size specified by the file itself, meaning a malicious file can cause OOM and DoS issues"}]},{"artifact":{"id":"0ed3c72bb9ee9391","cpes":["cpe:2.3:a:python3-libs:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3-libs:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3_libs:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3_libs:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3-libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3_libs:3.9.25-7.el9_8.3:*:*:*:*:*:*:*"],"name":"python3-libs","purl":"pkg:rpm/redhat/python3-libs@3.9.25-7.el9_8.3?arch=x86_64&distro=rhel-9.8&upstream=python3.9-3.9.25-7.el9_8.3.src.rpm","type":"rpm","version":"3.9.25-7.el9_8.3","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python3.9","version":"3.9.25-7.el9_8.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-13837","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"python3.9","version":"3.9.25-7.el9_8.3"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-13837","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":4,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-13837","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-13837","date":"2026-10-10","epss":0.00223,"percentile":0.11887}],"risk":0.12153500000000002,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-13837","description":"A flaw was found in the plistlib module in the Python standard library. The amount of data to read from a Plist file is specified in the file itself. This issue allows a specially crafted Plist file to cause an application to allocate a large amount of memory, potentially resulting in allocations errors, swapping, out-of-memory conditions or even system freezes."},"relatedVulnerabilities":[{"id":"CVE-2025-13837","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-13837","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-13837","date":"2026-10-10","epss":0.00223,"percentile":0.11887}],"urls":["https://github.com/python/cpython/commit/568342cfc8f002d9a15f30238f26b9d2e0e79036","https://github.com/python/cpython/commit/5a8b19677d818fb41ee55f310233772e15aa1a2b","https://github.com/python/cpython/commit/694922cf40aa3a28f898b5f5ee08b71b4922df70","https://github.com/python/cpython/commit/71fa8eb8233b37f16c88b6e3e583b461b205d1ba","https://github.com/python/cpython/commit/b64441e4852383645af5b435411a6f849dd1b4cb","https://github.com/python/cpython/commit/cefee7d118a26ef6cd43db59bb9d98ca9a331111","https://github.com/python/cpython/issues/119342","https://github.com/python/cpython/pull/119343","https://mail.python.org/archives/list/security-announce@python.org/thread/2X5IBCJXRQAZ5PSERLHMSJFBHFR3QM2C/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-13837","description":"When loading a plist file, the plistlib module reads data in size specified by the file itself, meaning a malicious file can cause OOM and DoS issues"}]},{"artifact":{"id":"73ec63868795f316","cpes":["cpe:2.3:a:openssl:openssl:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:rpm/redhat/openssl@3.5.8-1.el9_8?arch=x86_64&distro=rhel-9.8&epoch=1&upstream=openssl-3.5.8-1.el9_8.src.rpm","type":"rpm","version":"1:3.5.8-1.el9_8","language":"","licenses":["Apache-2.0"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-75805","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"openssl","version":"1:3.5.8-1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-75805","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75805","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-75805","date":"2026-10-10","epss":0.00222,"percentile":0.1175}],"risk":0.12099000000000001,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-75805","description":"A flaw was found in OpenSSL. When a Certificate Management Protocol (CMP) client requests certificate revocation using a PKCS#10 Certificate Signing Request (CSR), it omits the certificate issuer name and serial number. A malicious or compromised CMP server, or an attacker possessing valid message protection credentials, can exploit this flaw by returning a crafted revocation response. This triggers a NULL pointer dereference when the client attempts to compare response data, causing the client application to crash and resulting in a Denial of Service (DoS)."},"relatedVulnerabilities":[{"id":"CVE-2026-75805","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75805","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-75805","date":"2026-10-10","epss":0.00222,"percentile":0.1175}],"urls":["https://github.com/openssl/openssl/commit/7588db7fef14209c3caa3a101d11a02006b19166","https://github.com/openssl/openssl/commit/7ca0ccb5172a577e9b87267d77bfe21e5481a5e7","https://github.com/openssl/openssl/commit/9eb2a8a9b86136cdb39d6d7d50644dd66941cdc3","https://github.com/openssl/openssl/commit/abf02872a4b71767ecc72293424420f5b009190f","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-75805","description":"Issue summary: A CMP client that requests certificate revocation on the basis\nof a PKCS#10 CSR may dereference a NULL pointer and terminate abnormally when\nprocessing a crafted revocation response. \n\nImpact summary: The NULL pointer dereference happens on a read which \nleads to a crash and a Denial of Service for the affected client application.\n\nCWE: CWE-476: NULL-pointer dereference\n\nDescription: A CMP client revoking a certificate has to tell the server which\ncertificate to revoke, and may do so by supplying a PKCS#10 CSR instead of the\ncertificate itself or its issuer name and serial number. This is\n'openssl cmp -cmd rr -csr <file>' on the command line, or\nOSSL_CMP_exec_RR_ses() with the certificate supplied via\nOSSL_CMP_CTX_set1_p10CSR() through the API.\n\nA CSR does not contain the issuer name and serial number of the certificate,\nso the client does not send them. A server may optionally name the\ncertificate it revoked in its response, and the client then compares that\nname against what it sent. Having sent neither an issuer name nor a serial\nnumber, it has nothing to compare against, and a server returning a specially\ncrafted name causes the client to read from a NULL pointer and crash.\n\nThe revocation response is checked for valid message protection before\nthe affected code is reached, so an attacker must be a malicious or\ncompromised CMP server, or a man-in-the-middle in possession of the\nsecret used for message protection. Clients that identify the certificate\nto be revoked by a certificate or by issuer and serial number rather\nthan by a PKCS#10 CSR are not affected.\n\nFIPS impact: no\nNo FIPS modules are affected by this issue, as the CMP protocol\nimplementation is outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"753337be7fe19d16","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/redhat/openssl-libs@3.5.8-1.el9_8?arch=x86_64&distro=rhel-9.8&epoch=1&upstream=openssl-3.5.8-1.el9_8.src.rpm","type":"rpm","version":"1:3.5.8-1.el9_8","language":"","licenses":["Apache-2.0"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"3.5.8-1.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-75805","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"openssl","version":"3.5.8-1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-75805","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75805","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-75805","date":"2026-10-10","epss":0.00222,"percentile":0.1175}],"risk":0.12099000000000001,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-75805","description":"A flaw was found in OpenSSL. When a Certificate Management Protocol (CMP) client requests certificate revocation using a PKCS#10 Certificate Signing Request (CSR), it omits the certificate issuer name and serial number. A malicious or compromised CMP server, or an attacker possessing valid message protection credentials, can exploit this flaw by returning a crafted revocation response. This triggers a NULL pointer dereference when the client attempts to compare response data, causing the client application to crash and resulting in a Denial of Service (DoS)."},"relatedVulnerabilities":[{"id":"CVE-2026-75805","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75805","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-75805","date":"2026-10-10","epss":0.00222,"percentile":0.1175}],"urls":["https://github.com/openssl/openssl/commit/7588db7fef14209c3caa3a101d11a02006b19166","https://github.com/openssl/openssl/commit/7ca0ccb5172a577e9b87267d77bfe21e5481a5e7","https://github.com/openssl/openssl/commit/9eb2a8a9b86136cdb39d6d7d50644dd66941cdc3","https://github.com/openssl/openssl/commit/abf02872a4b71767ecc72293424420f5b009190f","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-75805","description":"Issue summary: A CMP client that requests certificate revocation on the basis\nof a PKCS#10 CSR may dereference a NULL pointer and terminate abnormally when\nprocessing a crafted revocation response. \n\nImpact summary: The NULL pointer dereference happens on a read which \nleads to a crash and a Denial of Service for the affected client application.\n\nCWE: CWE-476: NULL-pointer dereference\n\nDescription: A CMP client revoking a certificate has to tell the server which\ncertificate to revoke, and may do so by supplying a PKCS#10 CSR instead of the\ncertificate itself or its issuer name and serial number. This is\n'openssl cmp -cmd rr -csr <file>' on the command line, or\nOSSL_CMP_exec_RR_ses() with the certificate supplied via\nOSSL_CMP_CTX_set1_p10CSR() through the API.\n\nA CSR does not contain the issuer name and serial number of the certificate,\nso the client does not send them. A server may optionally name the\ncertificate it revoked in its response, and the client then compares that\nname against what it sent. Having sent neither an issuer name nor a serial\nnumber, it has nothing to compare against, and a server returning a specially\ncrafted name causes the client to read from a NULL pointer and crash.\n\nThe revocation response is checked for valid message protection before\nthe affected code is reached, so an attacker must be a malicious or\ncompromised CMP server, or a man-in-the-middle in possession of the\nsecret used for message protection. Clients that identify the certificate\nto be revoked by a certificate or by issuer and serial number rather\nthan by a PKCS#10 CSR are not affected.\n\nFIPS impact: no\nNo FIPS modules are affected by this issue, as the CMP protocol\nimplementation is outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"a3c55d7a5e4bf54f","cpes":["cpe:2.3:a:redhat:glibc:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc:2.34-275.el9_8:*:*:*:*:*:*:*"],"name":"glibc","purl":"pkg:rpm/redhat/glibc@2.34-275.el9_8?arch=x86_64&distro=rhel-9.8&upstream=glibc-2.34-275.el9_8.src.rpm","type":"rpm","version":"2.34-275.el9_8","language":"","licenses":["LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.34-283.el9_8"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-6791","versionConstraint":"< 0:2.34-283.el9_8 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"glibc","version":"0:2.34-275.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-6791","fix":{"state":"fixed","versions":["0:2.34-283.el9_8"],"available":[{"date":"2026-10-09","kind":"first-observed","version":"0:2.34-283.el9_8"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6791","cwe":"CWE-121","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-6791","date":"2026-10-10","epss":0.0022,"percentile":0.1142}],"risk":0.11990000000000002,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[{"id":"RHSA-2026:79281","link":"https://access.redhat.com/errata/RHSA-2026:79281"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-6791","description":"A flaw was found in glibc. When processing paths that start with a tilde (~) followed by a username, the `wordexp` function can be forced to allocate an excessive amount of memory on the program's stack. A remote attacker could exploit this by providing a very long username, leading to a stack exhaustion and causing a denial of service (DoS) for the affected application."},"relatedVulnerabilities":[{"id":"CVE-2026-6791","cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:L/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6791","cwe":"CWE-121","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-6791","date":"2026-10-10","epss":0.0022,"percentile":0.1142}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=34091"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6791","description":"When expanding paths that begin with a tilde (~) followed by a username, the internal parse_tilde function extracts the username to determine the user's home directory.  The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this allocation was determined by the length of the user-supplied input without any bounds checks, passing an excessively long username e.g. thousands of characters, forces the thread to exhaust its stack space. Thus if an application passes untrusted, attacker-controlled input to the wordexp function, an attacker can trigger a stack clash."}]},{"artifact":{"id":"88cf218ecaac1f25","cpes":["cpe:2.3:a:glibc-common:glibc-common:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc-common:glibc_common:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc-common:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc_common:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:glibc-common:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:glibc_common:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc-common:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc_common:2.34-275.el9_8:*:*:*:*:*:*:*"],"name":"glibc-common","purl":"pkg:rpm/redhat/glibc-common@2.34-275.el9_8?arch=x86_64&distro=rhel-9.8&upstream=glibc-2.34-275.el9_8.src.rpm","type":"rpm","version":"2.34-275.el9_8","language":"","licenses":["LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"glibc","version":"2.34-275.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.34-283.el9_8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6791","versionConstraint":"< 0:2.34-283.el9_8 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"glibc","version":"2.34-275.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-6791","fix":{"state":"fixed","versions":["0:2.34-283.el9_8"],"available":[{"date":"2026-10-09","kind":"first-observed","version":"0:2.34-283.el9_8"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6791","cwe":"CWE-121","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-6791","date":"2026-10-10","epss":0.0022,"percentile":0.1142}],"risk":0.11990000000000002,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[{"id":"RHSA-2026:79281","link":"https://access.redhat.com/errata/RHSA-2026:79281"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-6791","description":"A flaw was found in glibc. When processing paths that start with a tilde (~) followed by a username, the `wordexp` function can be forced to allocate an excessive amount of memory on the program's stack. A remote attacker could exploit this by providing a very long username, leading to a stack exhaustion and causing a denial of service (DoS) for the affected application."},"relatedVulnerabilities":[{"id":"CVE-2026-6791","cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:L/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6791","cwe":"CWE-121","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-6791","date":"2026-10-10","epss":0.0022,"percentile":0.1142}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=34091"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6791","description":"When expanding paths that begin with a tilde (~) followed by a username, the internal parse_tilde function extracts the username to determine the user's home directory.  The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this allocation was determined by the length of the user-supplied input without any bounds checks, passing an excessively long username e.g. thousands of characters, forces the thread to exhaust its stack space. Thus if an application passes untrusted, attacker-controlled input to the wordexp function, an attacker can trigger a stack clash."}]},{"artifact":{"id":"20293a554663f535","cpes":["cpe:2.3:a:glibc-minimal-langpack:glibc-minimal-langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc-minimal-langpack:glibc_minimal_langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc_minimal_langpack:glibc-minimal-langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc_minimal_langpack:glibc_minimal_langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc-minimal:glibc-minimal-langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc-minimal:glibc_minimal_langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc_minimal:glibc-minimal-langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc_minimal:glibc_minimal_langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:glibc-minimal-langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:glibc_minimal_langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc-minimal-langpack:2.34-275.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc_minimal_langpack:2.34-275.el9_8:*:*:*:*:*:*:*"],"name":"glibc-minimal-langpack","purl":"pkg:rpm/redhat/glibc-minimal-langpack@2.34-275.el9_8?arch=x86_64&distro=rhel-9.8&upstream=glibc-2.34-275.el9_8.src.rpm","type":"rpm","version":"2.34-275.el9_8","language":"","licenses":["LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"glibc","version":"2.34-275.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.34-283.el9_8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6791","versionConstraint":"< 0:2.34-283.el9_8 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"glibc","version":"2.34-275.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-6791","fix":{"state":"fixed","versions":["0:2.34-283.el9_8"],"available":[{"date":"2026-10-09","kind":"first-observed","version":"0:2.34-283.el9_8"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6791","cwe":"CWE-121","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-6791","date":"2026-10-10","epss":0.0022,"percentile":0.1142}],"risk":0.11990000000000002,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[{"id":"RHSA-2026:79281","link":"https://access.redhat.com/errata/RHSA-2026:79281"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-6791","description":"A flaw was found in glibc. When processing paths that start with a tilde (~) followed by a username, the `wordexp` function can be forced to allocate an excessive amount of memory on the program's stack. A remote attacker could exploit this by providing a very long username, leading to a stack exhaustion and causing a denial of service (DoS) for the affected application."},"relatedVulnerabilities":[{"id":"CVE-2026-6791","cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:L/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6791","cwe":"CWE-121","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-6791","date":"2026-10-10","epss":0.0022,"percentile":0.1142}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=34091"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6791","description":"When expanding paths that begin with a tilde (~) followed by a username, the internal parse_tilde function extracts the username to determine the user's home directory.  The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this allocation was determined by the length of the user-supplied input without any bounds checks, passing an excessively long username e.g. thousands of characters, forces the thread to exhaust its stack space. Thus if an application passes untrusted, attacker-controlled input to the wordexp function, an attacker can trigger a stack clash."}]},{"artifact":{"id":"73ec63868795f316","cpes":["cpe:2.3:a:openssl:openssl:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:rpm/redhat/openssl@3.5.8-1.el9_8?arch=x86_64&distro=rhel-9.8&epoch=1&upstream=openssl-3.5.8-1.el9_8.src.rpm","type":"rpm","version":"1:3.5.8-1.el9_8","language":"","licenses":["Apache-2.0"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-35191","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"openssl","version":"1:3.5.8-1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-35191","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-35191","cwe":"CWE-440","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-35191","date":"2026-10-10","epss":0.00357,"percentile":0.27482}],"risk":0.11959499999999999,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-35191","description":"A flaw was found in OpenSSL. This vulnerability allows a remote attacker to abuse the server to amplify network traffic in a Denial of Service (DoS) attack. When the server is configured without client address validation, incoming datagrams containing multiple QUIC packets cause the server to calculate credit limits incorrectly by adding the total datagram size for each packet. Consequently, the server exceeds standard rate limits and transmits excessive response data to spoofed target addresses."},"relatedVulnerabilities":[{"id":"CVE-2026-35191","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-35191","cwe":"CWE-440","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-35191","date":"2026-10-10","epss":0.00357,"percentile":0.27482}],"urls":["https://github.com/openssl/openssl/commit/0fe4442d4f8ea3af8a174046dae176e0d4717239","https://github.com/openssl/openssl/commit/2de4c35fb13fc58f43fd8dc1d261700472ce72e5","https://github.com/openssl/openssl/commit/e44292e58b090014232ef75bd400393851b24d1a","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-35191","description":"Issue summary: The OpenSSL QUIC server, when configured to not preform address\nvalidation, can be forced to count incoming packets multiple times in its\nunvalidated credit computation, leading to a violation of the RFC 9000\nunvalidated connection amplification limit of 3 times the amount of data\nreceived.\n\nImpact summary: A remote attacker able to spoof packets to a server using the\nOpenSSL QUIC implementation might use the server for an amplification of\na DDoS attack.\n\nCWE: CWE-440: Expected Behavior Violation \n\nDescription: OpenSSL's QUIC stack, when operating as a server, enforces client\naddress validation (RFC 9000, Section 8), to confirm the peer address is not\nused for a traffic amplification attack.  If this feature is disabled on the\nserver, the QUIC stack limits the amount of server data that can be sent to 3\ntimes the amount of data received from the peer address, until such time as the\nTLS handshake is completed.\n\nThe OpenSSL QUIC server, when operating in non-validation mode, adds the\nlength of the whole datagram received to the unvalidated credit limit when\nprocessing each QUIC packet in the datagram. A remote peer may,\nafter establishing a connection with an initial client hello frame, send a\nsubsequent datagram containing multiple QUIC packets, leading the server to\naccount the entire datagram length for each packet in the datagram, resulting\nin the server believing that the peer has sent more data than it actually has,\nthereby violating the 3x amplification limit mandated by the RFC.\n\nFIPS impact: no\nAs the QUIC stack lives outside the FIPS module boundary, no FIPS modules\nare affected by this CVE."}]},{"artifact":{"id":"753337be7fe19d16","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl-libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openssl_libs:1\\:3.5.8-1.el9_8:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/redhat/openssl-libs@3.5.8-1.el9_8?arch=x86_64&distro=rhel-9.8&epoch=1&upstream=openssl-3.5.8-1.el9_8.src.rpm","type":"rpm","version":"1:3.5.8-1.el9_8","language":"","licenses":["Apache-2.0"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"3.5.8-1.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-35191","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"openssl","version":"3.5.8-1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-35191","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-35191","cwe":"CWE-440","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-35191","date":"2026-10-10","epss":0.00357,"percentile":0.27482}],"risk":0.11959499999999999,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-35191","description":"A flaw was found in OpenSSL. This vulnerability allows a remote attacker to abuse the server to amplify network traffic in a Denial of Service (DoS) attack. When the server is configured without client address validation, incoming datagrams containing multiple QUIC packets cause the server to calculate credit limits incorrectly by adding the total datagram size for each packet. Consequently, the server exceeds standard rate limits and transmits excessive response data to spoofed target addresses."},"relatedVulnerabilities":[{"id":"CVE-2026-35191","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-35191","cwe":"CWE-440","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-35191","date":"2026-10-10","epss":0.00357,"percentile":0.27482}],"urls":["https://github.com/openssl/openssl/commit/0fe4442d4f8ea3af8a174046dae176e0d4717239","https://github.com/openssl/openssl/commit/2de4c35fb13fc58f43fd8dc1d261700472ce72e5","https://github.com/openssl/openssl/commit/e44292e58b090014232ef75bd400393851b24d1a","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-35191","description":"Issue summary: The OpenSSL QUIC server, when configured to not preform address\nvalidation, can be forced to count incoming packets multiple times in its\nunvalidated credit computation, leading to a violation of the RFC 9000\nunvalidated connection amplification limit of 3 times the amount of data\nreceived.\n\nImpact summary: A remote attacker able to spoof packets to a server using the\nOpenSSL QUIC implementation might use the server for an amplification of\na DDoS attack.\n\nCWE: CWE-440: Expected Behavior Violation \n\nDescription: OpenSSL's QUIC stack, when operating as a server, enforces client\naddress validation (RFC 9000, Section 8), to confirm the peer address is not\nused for a traffic amplification attack.  If this feature is disabled on the\nserver, the QUIC stack limits the amount of server data that can be sent to 3\ntimes the amount of data received from the peer address, until such time as the\nTLS handshake is completed.\n\nThe OpenSSL QUIC server, when operating in non-validation mode, adds the\nlength of the whole datagram received to the unvalidated credit limit when\nprocessing each QUIC packet in the datagram. A remote peer may,\nafter establishing a connection with an initial client hello frame, send a\nsubsequent datagram containing multiple QUIC packets, leading the server to\naccount the entire datagram length for each packet in the datagram, resulting\nin the server believing that the peer has sent more data than it actually has,\nthereby violating the 3x amplification limit mandated by the RFC.\n\nFIPS impact: no\nAs the QUIC stack lives outside the FIPS module boundary, no FIPS modules\nare affected by this CVE."}]},{"artifact":{"id":"8c0b185ae38b3789","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:redhat:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:8.2.2637-26.el9_8.21:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/redhat/vim-minimal@8.2.2637-26.el9_8.21?arch=x86_64&distro=rhel-9.8&epoch=2&upstream=vim-8.2.2637-26.el9_8.21.src.rpm","type":"rpm","version":"2:8.2.2637-26.el9_8.21","language":"","licenses":["Vim and MIT"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"8.2.2637-26.el9_8.21"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-41965","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"vim","version":"8.2.2637-26.el9_8.21"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2024-41965","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":4.2,"impactScore":3.4,"exploitabilityScore":0.8},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-41965","cwe":"CWE-416","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-41965","cwe":"CWE-415","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-41965","date":"2026-10-10","epss":0.0033,"percentile":0.24202}],"risk":0.1188,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2024-41965","description":"A vulnerability was found in Vim versions before 9.1.0648 that can cause the program to crash. This issue happens when a user abandons a modified file, and Vim tries to save it as an Untitled file. Due to a mistake in handling this process, Vim accidentally tries to free up memory twice, which can lead to problems, causing the program to crash. This issue can be exploited by someone with local access to the system."},"relatedVulnerabilities":[{"id":"CVE-2024-41965","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":4.2,"impactScore":3.4,"exploitabilityScore":0.8},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":4.2,"impactScore":3.4,"exploitabilityScore":0.8},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-41965","cwe":"CWE-416","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-41965","cwe":"CWE-415","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-41965","date":"2026-10-10","epss":0.0033,"percentile":0.24202}],"urls":["https://github.com/vim/vim/commit/b29f4abcd4b3382fa746edd1d0562b7b48c","https://github.com/vim/vim/security/advisories/GHSA-46pw-v7qw-xc2f","https://security.netapp.com/advisory/ntap-20241115-0002/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-41965","description":"Vim is an open source command line text editor. double-free in dialog_changed() in Vim < v9.1.0648. When abandoning a buffer, Vim may ask the user what to do with the modified buffer. If the user wants the changed buffer to be saved, Vim may create a new Untitled file, if the buffer did not have a name yet. However, when setting the buffer name to Unnamed, Vim will falsely free a pointer twice, leading to a double-free and possibly later to a heap-use-after-free, which can lead to a crash. The issue has been fixed as of Vim patch v9.1.0648."}]},{"artifact":{"id":"2ac7f6262c1f6abe","cpes":["cpe:2.3:a:gdb-gdbserver:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb-gdbserver:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb_gdbserver:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb_gdbserver:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*"],"name":"gdb-gdbserver","purl":"pkg:rpm/redhat/gdb-gdbserver@16.3-3.1.el9_8?arch=x86_64&distro=rhel-9.8&upstream=gdb-16.3-3.1.el9_8.src.rpm","type":"rpm","version":"16.3-3.1.el9_8","language":"","licenses":["GPL-3.0-or-later AND BSD-3-Clause AND FSFAP AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain AND GFDL-1.3-or-later AND LGPL-2.0-or-later WITH GCC-exception-2.0 AND GPL-3.0-or-later WITH GCC-exception-3.1 AND GPL-2.0-or-later WITH GNU-compiler-exception AND MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"gdb","version":"16.3-3.1.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-66865","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"gdb","version":"16.3-3.1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-66865","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-66865","cwe":"CWE-121","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-66865","date":"2026-10-10","epss":0.00376,"percentile":0.29567}],"risk":0.11843999999999998,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-66865","description":"A flaw was found in binutils. Processing a specially crafted PE file with cxxfilt can trigger a stack overflow in the d_print_comp_inner function in the cp-demangle.c file, causing a crash and resulting in a denial of service."},"relatedVulnerabilities":[{"id":"CVE-2025-66865","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-66865","cwe":"CWE-121","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-66865","date":"2026-10-10","epss":0.00376,"percentile":0.29567}],"urls":["https://github.com/caozhzh/CRGF-Vul/blob/main/cxxfilt/crash4.md"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-66865","description":"An issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file."}]},{"artifact":{"id":"2ac7f6262c1f6abe","cpes":["cpe:2.3:a:gdb-gdbserver:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb-gdbserver:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb_gdbserver:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb_gdbserver:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*"],"name":"gdb-gdbserver","purl":"pkg:rpm/redhat/gdb-gdbserver@16.3-3.1.el9_8?arch=x86_64&distro=rhel-9.8&upstream=gdb-16.3-3.1.el9_8.src.rpm","type":"rpm","version":"16.3-3.1.el9_8","language":"","licenses":["GPL-3.0-or-later AND BSD-3-Clause AND FSFAP AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain AND GFDL-1.3-or-later AND LGPL-2.0-or-later WITH GCC-exception-2.0 AND GPL-3.0-or-later WITH GCC-exception-3.1 AND GPL-2.0-or-later WITH GNU-compiler-exception AND MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"gdb","version":"16.3-3.1.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-66863","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"gdb","version":"16.3-3.1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-66863","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-66863","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-66863","date":"2026-10-10","epss":0.00376,"percentile":0.29566}],"risk":0.11843999999999998,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-66863","description":"A flaw was found in BinUtils. Attackers can exploit this vulnerability by providing a specially crafted Portable Executable (PE) file. This can lead to a denial of service, making the affected application unavailable."},"relatedVulnerabilities":[{"id":"CVE-2025-66863","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-66863","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-66863","date":"2026-10-10","epss":0.00376,"percentile":0.29566}],"urls":["https://github.com/caozhzh/CRGF-Vul/blob/main/cxxfilt/crash2.md"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-66863","description":"An issue was discovered in function d_discriminator in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file."}]},{"artifact":{"id":"badc115167ed0f1b","cpes":["cpe:2.3:a:python3-rpm:python3-rpm:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:python3-rpm:python3_rpm:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:python3_rpm:python3-rpm:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:python3_rpm:python3_rpm:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3-rpm:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:python3:python3_rpm:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3-rpm:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:python3_rpm:4.16.1.3-40.el9:*:*:*:*:*:*:*"],"name":"python3-rpm","purl":"pkg:rpm/redhat/python3-rpm@4.16.1.3-40.el9?arch=x86_64&distro=rhel-9.8&upstream=rpm-4.16.1.3-40.el9.src.rpm","type":"rpm","version":"4.16.1.3-40.el9","language":"","licenses":["GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"rpm","version":"4.16.1.3-40.el9"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-78367","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"rpm","version":"4.16.1.3-40.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-78367","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78367","cwe":"CWE-94","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-78367","date":"2026-10-10","epss":0.00197,"percentile":0.08602}],"risk":0.11819999999999999,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-78367","description":"A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec() function in tools/rpmbuild.cc passes an attacker-controlled tar archive member name to rpmExpand() as part of a %{basename:...} macro expression. A specially crafted .spec member name can therefore inject RPM macros, including Lua expressions, resulting in arbitrary code execution with the privileges of the user running rpmbuild. This can be exploited when a victim or automated build system processes an attacker-controlled source tarball using rpmbuild tarball mode (such as -ts, -ta, or -tb)."},"relatedVulnerabilities":[{"id":"CVE-2026-78367","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78367","cwe":"CWE-94","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-78367","date":"2026-10-10","epss":0.00197,"percentile":0.08602}],"urls":["https://access.redhat.com/security/cve/CVE-2026-78367","https://bugzilla.redhat.com/show_bug.cgi?id=2521857","https://github.com/rpm-software-management/rpm/issues/4314"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78367","description":"A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec() function in tools/rpmbuild.cc passes an attacker-controlled tar archive member name to rpmExpand() as part of a %{basename:...} macro expression. A specially crafted .spec member name can therefore inject RPM macros, including Lua expressions, resulting in arbitrary code execution with the privileges of the user running rpmbuild. This can be exploited when a victim or automated build system processes an attacker-controlled source tarball using rpmbuild tarball mode (such as -ts, -ta, or -tb)."}]},{"artifact":{"id":"fe0a59036b95950c","cpes":["cpe:2.3:a:redhat:rpm:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm:rpm:4.16.1.3-40.el9:*:*:*:*:*:*:*"],"name":"rpm","purl":"pkg:rpm/redhat/rpm@4.16.1.3-40.el9?arch=x86_64&distro=rhel-9.8&upstream=rpm-4.16.1.3-40.el9.src.rpm","type":"rpm","version":"4.16.1.3-40.el9","language":"","licenses":["GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-78367","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"rpm","version":"0:4.16.1.3-40.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-78367","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78367","cwe":"CWE-94","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-78367","date":"2026-10-10","epss":0.00197,"percentile":0.08602}],"risk":0.11819999999999999,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-78367","description":"A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec() function in tools/rpmbuild.cc passes an attacker-controlled tar archive member name to rpmExpand() as part of a %{basename:...} macro expression. A specially crafted .spec member name can therefore inject RPM macros, including Lua expressions, resulting in arbitrary code execution with the privileges of the user running rpmbuild. This can be exploited when a victim or automated build system processes an attacker-controlled source tarball using rpmbuild tarball mode (such as -ts, -ta, or -tb)."},"relatedVulnerabilities":[{"id":"CVE-2026-78367","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78367","cwe":"CWE-94","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-78367","date":"2026-10-10","epss":0.00197,"percentile":0.08602}],"urls":["https://access.redhat.com/security/cve/CVE-2026-78367","https://bugzilla.redhat.com/show_bug.cgi?id=2521857","https://github.com/rpm-software-management/rpm/issues/4314"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78367","description":"A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec() function in tools/rpmbuild.cc passes an attacker-controlled tar archive member name to rpmExpand() as part of a %{basename:...} macro expression. A specially crafted .spec member name can therefore inject RPM macros, including Lua expressions, resulting in arbitrary code execution with the privileges of the user running rpmbuild. This can be exploited when a victim or automated build system processes an attacker-controlled source tarball using rpmbuild tarball mode (such as -ts, -ta, or -tb)."}]},{"artifact":{"id":"27707240ebd32452","cpes":["cpe:2.3:a:rpm-build-libs:rpm-build-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm-build-libs:rpm_build_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm_build_libs:rpm-build-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm_build_libs:rpm_build_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm-build:rpm-build-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm-build:rpm_build_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm_build:rpm-build-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm_build:rpm_build_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:rpm-build-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:rpm_build_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm:rpm-build-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm:rpm_build_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*"],"name":"rpm-build-libs","purl":"pkg:rpm/redhat/rpm-build-libs@4.16.1.3-40.el9?arch=x86_64&distro=rhel-9.8&upstream=rpm-4.16.1.3-40.el9.src.rpm","type":"rpm","version":"4.16.1.3-40.el9","language":"","licenses":["GPLv2+ and LGPLv2+ with exceptions"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"rpm","version":"4.16.1.3-40.el9"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-78367","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"rpm","version":"4.16.1.3-40.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-78367","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78367","cwe":"CWE-94","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-78367","date":"2026-10-10","epss":0.00197,"percentile":0.08602}],"risk":0.11819999999999999,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-78367","description":"A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec() function in tools/rpmbuild.cc passes an attacker-controlled tar archive member name to rpmExpand() as part of a %{basename:...} macro expression. A specially crafted .spec member name can therefore inject RPM macros, including Lua expressions, resulting in arbitrary code execution with the privileges of the user running rpmbuild. This can be exploited when a victim or automated build system processes an attacker-controlled source tarball using rpmbuild tarball mode (such as -ts, -ta, or -tb)."},"relatedVulnerabilities":[{"id":"CVE-2026-78367","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78367","cwe":"CWE-94","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-78367","date":"2026-10-10","epss":0.00197,"percentile":0.08602}],"urls":["https://access.redhat.com/security/cve/CVE-2026-78367","https://bugzilla.redhat.com/show_bug.cgi?id=2521857","https://github.com/rpm-software-management/rpm/issues/4314"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78367","description":"A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec() function in tools/rpmbuild.cc passes an attacker-controlled tar archive member name to rpmExpand() as part of a %{basename:...} macro expression. A specially crafted .spec member name can therefore inject RPM macros, including Lua expressions, resulting in arbitrary code execution with the privileges of the user running rpmbuild. This can be exploited when a victim or automated build system processes an attacker-controlled source tarball using rpmbuild tarball mode (such as -ts, -ta, or -tb)."}]},{"artifact":{"id":"108e4bcd5f0cf305","cpes":["cpe:2.3:a:rpm-libs:rpm-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm-libs:rpm_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm_libs:rpm-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm_libs:rpm_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:rpm-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:rpm_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm:rpm-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm:rpm_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*"],"name":"rpm-libs","purl":"pkg:rpm/redhat/rpm-libs@4.16.1.3-40.el9?arch=x86_64&distro=rhel-9.8&upstream=rpm-4.16.1.3-40.el9.src.rpm","type":"rpm","version":"4.16.1.3-40.el9","language":"","licenses":["GPLv2+ and LGPLv2+ with exceptions"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"rpm","version":"4.16.1.3-40.el9"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-78367","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"rpm","version":"4.16.1.3-40.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-78367","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78367","cwe":"CWE-94","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-78367","date":"2026-10-10","epss":0.00197,"percentile":0.08602}],"risk":0.11819999999999999,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-78367","description":"A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec() function in tools/rpmbuild.cc passes an attacker-controlled tar archive member name to rpmExpand() as part of a %{basename:...} macro expression. A specially crafted .spec member name can therefore inject RPM macros, including Lua expressions, resulting in arbitrary code execution with the privileges of the user running rpmbuild. This can be exploited when a victim or automated build system processes an attacker-controlled source tarball using rpmbuild tarball mode (such as -ts, -ta, or -tb)."},"relatedVulnerabilities":[{"id":"CVE-2026-78367","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78367","cwe":"CWE-94","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-78367","date":"2026-10-10","epss":0.00197,"percentile":0.08602}],"urls":["https://access.redhat.com/security/cve/CVE-2026-78367","https://bugzilla.redhat.com/show_bug.cgi?id=2521857","https://github.com/rpm-software-management/rpm/issues/4314"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78367","description":"A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec() function in tools/rpmbuild.cc passes an attacker-controlled tar archive member name to rpmExpand() as part of a %{basename:...} macro expression. A specially crafted .spec member name can therefore inject RPM macros, including Lua expressions, resulting in arbitrary code execution with the privileges of the user running rpmbuild. This can be exploited when a victim or automated build system processes an attacker-controlled source tarball using rpmbuild tarball mode (such as -ts, -ta, or -tb)."}]},{"artifact":{"id":"fd3a4056ba2de6c5","cpes":["cpe:2.3:a:rpm-sign-libs:rpm-sign-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm-sign-libs:rpm_sign_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm_sign_libs:rpm-sign-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm_sign_libs:rpm_sign_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm-sign:rpm-sign-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm-sign:rpm_sign_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm_sign:rpm-sign-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm_sign:rpm_sign_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:rpm-sign-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:redhat:rpm_sign_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm:rpm-sign-libs:4.16.1.3-40.el9:*:*:*:*:*:*:*","cpe:2.3:a:rpm:rpm_sign_libs:4.16.1.3-40.el9:*:*:*:*:*:*:*"],"name":"rpm-sign-libs","purl":"pkg:rpm/redhat/rpm-sign-libs@4.16.1.3-40.el9?arch=x86_64&distro=rhel-9.8&upstream=rpm-4.16.1.3-40.el9.src.rpm","type":"rpm","version":"4.16.1.3-40.el9","language":"","licenses":["GPLv2+ and LGPLv2+ with exceptions"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"rpm","version":"4.16.1.3-40.el9"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-78367","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"rpm","version":"4.16.1.3-40.el9"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-78367","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78367","cwe":"CWE-94","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-78367","date":"2026-10-10","epss":0.00197,"percentile":0.08602}],"risk":0.11819999999999999,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-78367","description":"A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec() function in tools/rpmbuild.cc passes an attacker-controlled tar archive member name to rpmExpand() as part of a %{basename:...} macro expression. A specially crafted .spec member name can therefore inject RPM macros, including Lua expressions, resulting in arbitrary code execution with the privileges of the user running rpmbuild. This can be exploited when a victim or automated build system processes an attacker-controlled source tarball using rpmbuild tarball mode (such as -ts, -ta, or -tb)."},"relatedVulnerabilities":[{"id":"CVE-2026-78367","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78367","cwe":"CWE-94","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-78367","date":"2026-10-10","epss":0.00197,"percentile":0.08602}],"urls":["https://access.redhat.com/security/cve/CVE-2026-78367","https://bugzilla.redhat.com/show_bug.cgi?id=2521857","https://github.com/rpm-software-management/rpm/issues/4314"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78367","description":"A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec() function in tools/rpmbuild.cc passes an attacker-controlled tar archive member name to rpmExpand() as part of a %{basename:...} macro expression. A specially crafted .spec member name can therefore inject RPM macros, including Lua expressions, resulting in arbitrary code execution with the privileges of the user running rpmbuild. This can be exploited when a victim or automated build system processes an attacker-controlled source tarball using rpmbuild tarball mode (such as -ts, -ta, or -tb)."}]},{"artifact":{"id":"9eebaea2eda844dd","cpes":["cpe:2.3:a:curl-minimal:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl-minimal:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl_minimal:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl_minimal:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*"],"name":"curl-minimal","purl":"pkg:rpm/redhat/curl-minimal@7.76.1-40.el9_8.7?arch=x86_64&distro=rhel-9.8&upstream=curl-7.76.1-40.el9_8.7.src.rpm","type":"rpm","version":"7.76.1-40.el9_8.7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.76.1-40.el9_8.7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6276","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"curl","version":"7.76.1-40.el9_8.7"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-6276","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6276","cwe":"CWE-346","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-6276","cwe":"CWE-319","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-6276","date":"2026-10-10","epss":0.00349,"percentile":0.26528}],"risk":0.11691499999999999,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-6276","description":"A flaw was found in libcurl. This vulnerability allows for information disclosure when a custom `Host:` header is used in an initial HTTP request, and a subsequent request reuses the same connection without specifying a new `Host:` header. This can lead to libcurl incorrectly sending cookies intended for the first host to the second host, resulting in a cookie leak. This issue is categorized as an Origin Validation Error (CWE-346). Exploitation typically requires specific debugging configurations."},"relatedVulnerabilities":[{"id":"CVE-2026-6276","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6276","cwe":"CWE-346","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-6276","cwe":"CWE-319","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-6276","date":"2026-10-10","epss":0.00349,"percentile":0.26528}],"urls":["https://curl.se/docs/CVE-2026-6276.html","https://curl.se/docs/CVE-2026-6276.json","https://hackerone.com/reports/3671818","http://www.openwall.com/lists/oss-security/2026/04/29/13"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6276","description":"Using libcurl, when a custom `Host:` header is first set for an HTTP request\nand a second request is subsequently done using the same *easy handle* but\nwithout the custom `Host:` header set, the second request would use stale\ninformation and pass on cookies meant for the first host in the second\nrequest. Leak them."}]},{"artifact":{"id":"b685606a6baf0f79","cpes":["cpe:2.3:a:libcurl-minimal:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl-minimal:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl_minimal:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl_minimal:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:libcurl:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libcurl-minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*","cpe:2.3:a:redhat:libcurl_minimal:7.76.1-40.el9_8.7:*:*:*:*:*:*:*"],"name":"libcurl-minimal","purl":"pkg:rpm/redhat/libcurl-minimal@7.76.1-40.el9_8.7?arch=x86_64&distro=rhel-9.8&upstream=curl-7.76.1-40.el9_8.7.src.rpm","type":"rpm","version":"7.76.1-40.el9_8.7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.76.1-40.el9_8.7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6276","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"curl","version":"7.76.1-40.el9_8.7"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2026-6276","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6276","cwe":"CWE-346","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-6276","cwe":"CWE-319","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-6276","date":"2026-10-10","epss":0.00349,"percentile":0.26528}],"risk":0.11691499999999999,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-6276","description":"A flaw was found in libcurl. This vulnerability allows for information disclosure when a custom `Host:` header is used in an initial HTTP request, and a subsequent request reuses the same connection without specifying a new `Host:` header. This can lead to libcurl incorrectly sending cookies intended for the first host to the second host, resulting in a cookie leak. This issue is categorized as an Origin Validation Error (CWE-346). Exploitation typically requires specific debugging configurations."},"relatedVulnerabilities":[{"id":"CVE-2026-6276","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6276","cwe":"CWE-346","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-6276","cwe":"CWE-319","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-6276","date":"2026-10-10","epss":0.00349,"percentile":0.26528}],"urls":["https://curl.se/docs/CVE-2026-6276.html","https://curl.se/docs/CVE-2026-6276.json","https://hackerone.com/reports/3671818","http://www.openwall.com/lists/oss-security/2026/04/29/13"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6276","description":"Using libcurl, when a custom `Host:` header is first set for an HTTP request\nand a second request is subsequently done using the same *easy handle* but\nwithout the custom `Host:` header set, the second request would use stale\ninformation and pass on cookies meant for the first host in the second\nrequest. Leak them."}]},{"artifact":{"id":"2ac7f6262c1f6abe","cpes":["cpe:2.3:a:gdb-gdbserver:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb-gdbserver:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb_gdbserver:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb_gdbserver:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:redhat:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb:gdb-gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*","cpe:2.3:a:gdb:gdb_gdbserver:16.3-3.1.el9_8:*:*:*:*:*:*:*"],"name":"gdb-gdbserver","purl":"pkg:rpm/redhat/gdb-gdbserver@16.3-3.1.el9_8?arch=x86_64&distro=rhel-9.8&upstream=gdb-16.3-3.1.el9_8.src.rpm","type":"rpm","version":"16.3-3.1.el9_8","language":"","licenses":["GPL-3.0-or-later AND BSD-3-Clause AND FSFAP AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain AND GFDL-1.3-or-later AND LGPL-2.0-or-later WITH GCC-exception-2.0 AND GPL-3.0-or-later WITH GCC-exception-3.1 AND GPL-2.0-or-later WITH GNU-compiler-exception AND MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/rpmdb.sqlite","layerID":"sha256:60752a2fddb30c2d5350593892f95bee646bfd3d575357123c042daeb37f5db6","accessPath":"/var/lib/rpm/rpmdb.sqlite","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"gdb","version":"16.3-3.1.el9_8"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-66862","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"redhat","version":"9.8"},"package":{"name":"gdb","version":"16.3-3.1.el9_8"},"namespace":"redhat:distro:redhat:9"}}],"vulnerability":{"id":"CVE-2025-66862","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-66862","cwe":"CWE-122","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-66862","date":"2026-10-10","epss":0.0037,"percentile":0.28983}],"risk":0.11654999999999999,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:9","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2025-66862","description":"A flaw was found in binutils. Processing a specially crafted PE file with cxxfilt can trigger a heap-based buffer over-read in the gnu_special function in the cplus-dem.c file, causing a crash and resulting in a denial of service."},"relatedVulnerabilities":[{"id":"CVE-2025-66862","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-66862","cwe":"CWE-122","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-66862","date":"2026-10-10","epss":0.0037,"percentile":0.28983}],"urls":["https://github.com/caozhzh/CRGF-Vul/blob/main/cxxfilt/crash3.md"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-66862","description":"A buffer overflow vulnerability in function gnu_special in file cplus-dem.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file."}]}],"grade":"F","score":"0.00","as_of":"2026-10-12T03:10:59.908Z","grype_db_version":"2026-10-11T06:30:42.000Z"}