{ "schema_version": 4, "kind": "backlog", "source_commit": "1d2e375649ac", "source_dirty": false, "generated_at": "2026-10-07T14:01:02+00:00", "snapshot_date": "2026-10-07", "launched": true, "profile": "weekly", "min_age_days": 7, "epoch": null, "counts": { "total": 2032, "undated_excluded": 55, "epoch_excluded": 0, "unmeasurable_rule": 2032, "named": 0 }, "coverage": { "cnas_effective": 274, "cnas_sighted": 320, "cnas_own_channel": 3, "total_cnas": 539, "pct_effective": 50.8, "min_sightings": 3 }, "caveats": { "count_is_a_floor": true, "owner_is_inferred": true, "days_public_is_a_floor_not_lateness": true, "must_is_never_established": true, "rule_mostly_unmeasurable": true, "not_a_cna_scorecard": true }, "degraded": true, "degraded_reasons": [ "1 feed(s) failed", "1 feed(s) stopped early, outside their configured limits", "2 feed(s) returned far fewer ids than last run" ], "limitations": [ "ubuntu:dates: dated 1 of 56 undated row(s) by name; 16 lookup(s) failed; the 600s budget was spent with 39 row(s) never asked for" ], "columns": [ "cve_id", "state", "days_public", "hours_public", "public_date", "public_date_origin", "clock_known", "rule", "rule_strength", "rule_certainty", "rule_basis", "self_disclosed", "owner_nameable", "veto_evaluated", "clock_origin", "advisory_date", "advisory_days_public", "sources", "feed_count", "refs", "source_urls", "package", "ecosystem", "description", "state_verified_this_run" ], "rows": [ { "cve_id": "CVE-2023-24036", "state": "RESERVED", "public_date": "2023-02-08", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2023-02-08" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2023-0316\thttps://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-0316.json", "description": "CVE-2023-24036", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 1337, "clock_known": true, "hours_public": 32088, "clock_origin": "advisory", "advisory_date": "2023-02-08", "advisory_days_public": 1337, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-0316.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2023-1658", "state": "RESERVED", "public_date": "2023-04-03", "sources": "jvn", "feed_count": 1, "dates": { "jvn": "2023-04-03" }, "refs": "jvn:JVNDB-2023-001400", "description": "CONPROSYS HMI System(CHS) vulnerable to SQL injection", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 1283, "clock_known": true, "hours_public": 30792, "clock_origin": "advisory", "advisory_date": "2023-04-03", "advisory_days_public": 1283, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "jvn": "https://jvndb.jvn.jp/en/contents/2023/JVNDB-2023-001400.html" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2023-28355", "state": "RESERVED", "public_date": "2023-04-11", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2023-04-11" }, "refs": "csaf:Schneider Electric CPCERT\tSEVD-2023-101-01\thttps://www.se.com/.well-known/csaf/2023/sevd-2023-101-01.json", "description": "CVE-2023-28355", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 1275, "clock_known": true, "hours_public": 30600, "clock_origin": "advisory", "advisory_date": "2023-04-11", "advisory_days_public": 1275, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://www.se.com/.well-known/csaf/2023/sevd-2023-101-01.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2023-21119", "state": "RESERVED", "public_date": "2023-05-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2023-05-01", "csaf": "2023-05-01" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2023-1101\thttps://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-1101.json;osv:Android::unknown:", "description": "In Gs101Pipeline::Update of gs101_displaycolor_pipeline.cc, there is a possible device reboot when watching a video due to improper input validation.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 1255, "clock_known": true, "hours_public": 30120, "clock_origin": "advisory", "advisory_date": "2023-05-01", "advisory_days_public": 1255, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-1101.json", "osv": "https://osv.dev/list?q=CVE-2023-21119" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2023-28641", "state": "RESERVED", "public_date": "2023-05-21", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2023-05-21" }, "refs": "ghsa-repos:autolab/Autolab\tGHSA-962r-m9fj-3hj9", "description": "autolab/Autolab repository advisory GHSA-962r-m9fj-3hj9", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 1235, "clock_known": true, "hours_public": 29640, "clock_origin": "advisory", "advisory_date": "2023-05-21", "advisory_days_public": 1235, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/autolab/Autolab/security/advisories/GHSA-962r-m9fj-3hj9" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2023-40316", "state": "RESERVED", "public_date": "2023-08-20", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2023-08-20" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2023-2102\thttps://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2102.json", "description": "CVE-2023-40316", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 1144, "clock_known": true, "hours_public": 27456, "clock_origin": "advisory", "advisory_date": "2023-08-20", "advisory_days_public": 1144, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2102.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2023-40317", "state": "RESERVED", "public_date": "2023-08-20", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2023-08-20" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2023-2102\thttps://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2102.json", "description": "CVE-2023-40317", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 1144, "clock_known": true, "hours_public": 27456, "clock_origin": "advisory", "advisory_date": "2023-08-20", "advisory_days_public": 1144, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2102.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2023-40318", "state": "RESERVED", "public_date": "2023-08-20", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2023-08-20" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2023-2102\thttps://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2102.json", "description": "CVE-2023-40318", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 1144, "clock_known": true, "hours_public": 27456, "clock_origin": "advisory", "advisory_date": "2023-08-20", "advisory_days_public": 1144, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2102.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2023-40319", "state": "RESERVED", "public_date": "2023-08-20", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2023-08-20" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2023-2102\thttps://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2102.json", "description": "CVE-2023-40319", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 1144, "clock_known": true, "hours_public": 27456, "clock_origin": "advisory", "advisory_date": "2023-08-20", "advisory_days_public": 1144, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2102.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2023-40320", "state": "RESERVED", "public_date": "2023-08-20", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2023-08-20" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2023-2102\thttps://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2102.json", "description": "CVE-2023-40320", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 1144, "clock_known": true, "hours_public": 27456, "clock_origin": "advisory", "advisory_date": "2023-08-20", "advisory_days_public": 1144, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2102.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2023-40321", "state": "RESERVED", "public_date": "2023-08-20", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2023-08-20" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2023-2102\thttps://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2102.json", "description": "CVE-2023-40321", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 1144, "clock_known": true, "hours_public": 27456, "clock_origin": "advisory", "advisory_date": "2023-08-20", "advisory_days_public": 1144, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2102.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2023-40322", "state": "RESERVED", "public_date": "2023-08-20", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2023-08-20" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2023-2102\thttps://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2102.json", "description": "CVE-2023-40322", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 1144, "clock_known": true, "hours_public": 27456, "clock_origin": "advisory", "advisory_date": "2023-08-20", "advisory_days_public": 1144, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2102.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2023-40323", "state": "RESERVED", "public_date": "2023-08-20", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2023-08-20" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2023-2102\thttps://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2102.json", "description": "CVE-2023-40323", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 1144, "clock_known": true, "hours_public": 27456, "clock_origin": "advisory", "advisory_date": "2023-08-20", "advisory_days_public": 1144, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2102.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2023-40324", "state": "RESERVED", "public_date": "2023-08-20", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2023-08-20" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2023-2102\thttps://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2102.json", "description": "CVE-2023-40324", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 1144, "clock_known": true, "hours_public": 27456, "clock_origin": "advisory", "advisory_date": "2023-08-20", "advisory_days_public": 1144, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2102.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2023-40325", "state": "RESERVED", "public_date": "2023-08-20", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2023-08-20" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2023-2102\thttps://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2102.json", "description": "CVE-2023-40325", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 1144, "clock_known": true, "hours_public": 27456, "clock_origin": "advisory", "advisory_date": "2023-08-20", "advisory_days_public": 1144, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2102.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2023-35758", "state": "RESERVED", "public_date": "2023-08-30", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2023-08-30" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2023-2237\thttps://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2237.json", "description": "CVE-2023-35758", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 1134, "clock_known": true, "hours_public": 27216, "clock_origin": "advisory", "advisory_date": "2023-08-30", "advisory_days_public": 1134, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2237.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2023-4638", "state": "RESERVED", "public_date": "2023-08-31", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2023-08-31" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2023-2244\thttps://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2244.json", "description": "CVE-2023-4638", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 1133, "clock_known": true, "hours_public": 27192, "clock_origin": "advisory", "advisory_date": "2023-08-31", "advisory_days_public": 1133, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2244.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2023-3281", "state": "RESERVED", "public_date": "2023-10-11", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2023-10-11" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2023-2635\thttps://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2635.json", "description": "CVE-2023-3281", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 1092, "clock_known": true, "hours_public": 26208, "clock_origin": "advisory", "advisory_date": "2023-10-11", "advisory_days_public": 1092, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2635.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2023-21386", "state": "RESERVED", "public_date": "2023-10-30", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2023-10-30" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2023-2778\thttps://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2778.json", "description": "CVE-2023-21386", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 1073, "clock_known": true, "hours_public": 25752, "clock_origin": "advisory", "advisory_date": "2023-10-30", "advisory_days_public": 1073, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2778.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2023-5649", "state": "RESERVED", "public_date": "2023-11-07", "sources": "broadcom", "feed_count": 1, "dates": { "broadcom": "2023-11-07" }, "refs": "broadcom:22716", "description": "An Improper Input Validation vulnerability for the registered case credentials (CVE-2023-5649)", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 1065, "clock_known": true, "hours_public": 25560, "clock_origin": "advisory", "advisory_date": "2023-11-07", "advisory_days_public": 1065, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "broadcom": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/22716" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2023-5648", "state": "RESERVED", "public_date": "2023-11-07", "sources": "broadcom", "feed_count": 1, "dates": { "broadcom": "2023-11-07" }, "refs": "broadcom:22715", "description": "Several security-related HTTP Headers were missing (CVE-2023-5648)", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 1065, "clock_known": true, "hours_public": 25560, "clock_origin": "advisory", "advisory_date": "2023-11-07", "advisory_days_public": 1065, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "broadcom": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/22715" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2023-48675", "state": "RESERVED", "public_date": "2023-11-17", "sources": "acronis,csaf", "feed_count": 2, "dates": { "csaf": "2023-11-19", "acronis": "2023-11-17" }, "refs": "acronis:SEC-5906;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2023-2966\thttps://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2966.json", "description": "CVE-2023-48675", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 1055, "clock_known": true, "hours_public": 25320, "clock_origin": "advisory", "advisory_date": "2023-11-17", "advisory_days_public": 1055, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "acronis": "https://security-advisory.acronis.com/advisories/SEC-5906", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2966.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2023-6670", "state": "RESERVED", "public_date": "2023-11-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2023-11-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2023-3026\thttps://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3026.json", "description": "CVE-2023-6670", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 1044, "clock_known": true, "hours_public": 25056, "clock_origin": "advisory", "advisory_date": "2023-11-28", "advisory_days_public": 1044, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3026.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2023-6661", "state": "RESERVED", "public_date": "2023-12-20", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2023-12-20" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2023-3199\thttps://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3199.json", "description": "CVE-2023-6661", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 1022, "clock_known": true, "hours_public": 24528, "clock_origin": "advisory", "advisory_date": "2023-12-20", "advisory_days_public": 1022, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3199.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2023-6662", "state": "RESERVED", "public_date": "2023-12-20", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2023-12-20" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2023-3199\thttps://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3199.json", "description": "CVE-2023-6662", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 1022, "clock_known": true, "hours_public": 24528, "clock_origin": "advisory", "advisory_date": "2023-12-20", "advisory_days_public": 1022, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3199.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2023-6663", "state": "RESERVED", "public_date": "2023-12-20", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2023-12-20" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2023-3199\thttps://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3199.json", "description": "CVE-2023-6663", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 1022, "clock_known": true, "hours_public": 24528, "clock_origin": "advisory", "advisory_date": "2023-12-20", "advisory_days_public": 1022, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3199.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2023-6664", "state": "RESERVED", "public_date": "2023-12-20", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2023-12-20" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2023-3199\thttps://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3199.json", "description": "CVE-2023-6664", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 1022, "clock_known": true, "hours_public": 24528, "clock_origin": "advisory", "advisory_date": "2023-12-20", "advisory_days_public": 1022, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3199.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2023-6665", "state": "RESERVED", "public_date": "2023-12-20", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2023-12-20" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2023-3199\thttps://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3199.json", "description": "CVE-2023-6665", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 1022, "clock_known": true, "hours_public": 24528, "clock_origin": "advisory", "advisory_date": "2023-12-20", "advisory_days_public": 1022, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3199.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2023-6666", "state": "RESERVED", "public_date": "2023-12-20", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2023-12-20" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2023-3199\thttps://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3199.json", "description": "CVE-2023-6666", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 1022, "clock_known": true, "hours_public": 24528, "clock_origin": "advisory", "advisory_date": "2023-12-20", "advisory_days_public": 1022, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3199.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2023-6667", "state": "RESERVED", "public_date": "2023-12-20", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2023-12-20" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2023-3199\thttps://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3199.json", "description": "CVE-2023-6667", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 1022, "clock_known": true, "hours_public": 24528, "clock_origin": "advisory", "advisory_date": "2023-12-20", "advisory_days_public": 1022, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3199.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2023-6668", "state": "RESERVED", "public_date": "2023-12-20", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2023-12-20" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2023-3199\thttps://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3199.json", "description": "CVE-2023-6668", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 1022, "clock_known": true, "hours_public": 24528, "clock_origin": "advisory", "advisory_date": "2023-12-20", "advisory_days_public": 1022, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3199.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2023-6669", "state": "RESERVED", "public_date": "2023-12-20", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2023-12-20" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2023-3199\thttps://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3199.json", "description": "CVE-2023-6669", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 1022, "clock_known": true, "hours_public": 24528, "clock_origin": "advisory", "advisory_date": "2023-12-20", "advisory_days_public": 1022, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3199.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-0234", "state": "RESERVED", "public_date": "2024-01-04", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2024-01-04", "csaf": "2024-01-04" }, "refs": "csaf:Red Hat Product Security\tCVE-2024-0234\thttps://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-0234.json;redhat:CVE-2024-0234", "description": "podman-desktop: Code injection Through Electron Fuses", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 1007, "clock_known": true, "hours_public": 24168, "clock_origin": "advisory", "advisory_date": "2024-01-04", "advisory_days_public": 1007, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2024-0234", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-0234.json", "redhat": "https://access.redhat.com/security/cve/CVE-2024-0234" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2023-49667", "state": "RESERVED", "public_date": "2024-02-01", "sources": "osv", "feed_count": 1, "dates": { "osv": "2024-02-01" }, "refs": "osv:Android::unknown:", "description": "", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 979, "clock_known": true, "hours_public": 23496, "clock_origin": "advisory", "advisory_date": "2024-02-01", "advisory_days_public": 979, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2023-49667" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2023-49668", "state": "RESERVED", "public_date": "2024-02-01", "sources": "osv", "feed_count": 1, "dates": { "osv": "2024-02-01" }, "refs": "osv:Android::unknown:", "description": "", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 979, "clock_known": true, "hours_public": 23496, "clock_origin": "advisory", "advisory_date": "2024-02-01", "advisory_days_public": 979, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2023-49668" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-23552", "state": "RESERVED", "public_date": "2024-02-04", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-02-04" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-0290\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0290.json", "description": "CVE-2024-23552", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 976, "clock_known": true, "hours_public": 23424, "clock_origin": "advisory", "advisory_date": "2024-02-04", "advisory_days_public": 976, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0290.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-1314", "state": "RESERVED", "public_date": "2024-02-08", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2024-02-08", "osv": "2024-02-08" }, "refs": "ghsa:GHSA-hvp4-vrv2-8wrq;osv:PyPI:kinto-attachment", "description": "Kinto Attachment's attachments can be replaced on read-only records", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 972, "clock_known": true, "hours_public": 23328, "clock_origin": "advisory", "advisory_date": "2024-02-08", "advisory_days_public": 972, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "kinto-attachment", "ecosystem": "PyPI", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-hvp4-vrv2-8wrq", "osv": "https://osv.dev/list?q=CVE-2024-1314" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-25555", "state": "RESERVED", "public_date": "2024-02-15", "sources": "jvn", "feed_count": 1, "dates": { "jvn": "2024-02-15" }, "refs": "jvn:JVNDB-2024-002560", "description": "Android App \"Mopria Print Service\" vulnerable to improper intent handling", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 965, "clock_known": true, "hours_public": 23160, "clock_origin": "advisory", "advisory_date": "2024-02-15", "advisory_days_public": 965, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "jvn": "https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-002560.html" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-26048", "state": "RESERVED", "public_date": "2024-03-12", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-03-12" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-0616\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0616.json", "description": "CVE-2024-26048", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 939, "clock_known": true, "hours_public": 22536, "clock_origin": "advisory", "advisory_date": "2024-03-12", "advisory_days_public": 939, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0616.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-30173", "state": "RESERVED", "public_date": "2024-04-01", "sources": "csaf,ghsa,osv", "feed_count": 3, "dates": { "ghsa": "2024-04-02", "osv": "2024-04-02", "csaf": "2024-04-01" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-0754\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0754.json;ghsa:GHSA-hhf8-f5w9-g6vh;osv:Packagist:causal/oidc", "description": "OpenID Connect Authentication (oidc) Typo3 extension Authentication Bypass", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 919, "clock_known": true, "hours_public": 22056, "clock_origin": "advisory", "advisory_date": "2024-04-01", "advisory_days_public": 919, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "causal/oidc", "ecosystem": "Packagist", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0754.json", "ghsa": "https://github.com/advisories/GHSA-hhf8-f5w9-g6vh", "osv": "https://osv.dev/list?q=CVE-2024-30173" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-28661", "state": "RESERVED", "public_date": "2024-04-04", "sources": "alpine,csaf", "feed_count": 2, "dates": { "csaf": "2024-04-04" }, "refs": "alpine:ffmpeg;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-0790\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0790.json", "description": "CVE-2024-28661", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 916, "clock_known": true, "hours_public": 21984, "clock_origin": "advisory", "advisory_date": "2024-04-04", "advisory_days_public": 916, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "ffmpeg", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2024-28661", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0790.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-28055", "state": "RESERVED", "public_date": "2024-04-09", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-04-09" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-0845\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0845.json", "description": "CVE-2024-28055", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 911, "clock_known": true, "hours_public": 21864, "clock_origin": "advisory", "advisory_date": "2024-04-09", "advisory_days_public": 911, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0845.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-3324", "state": "RESERVED", "public_date": "2024-04-09", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-04-09" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-0836\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0836.json", "description": "CVE-2024-3324", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 911, "clock_known": true, "hours_public": 21864, "clock_origin": "advisory", "advisory_date": "2024-04-09", "advisory_days_public": 911, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0836.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-3326", "state": "RESERVED", "public_date": "2024-04-09", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-04-09" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-0836\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0836.json", "description": "CVE-2024-3326", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 911, "clock_known": true, "hours_public": 21864, "clock_origin": "advisory", "advisory_date": "2024-04-09", "advisory_days_public": 911, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0836.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-3327", "state": "RESERVED", "public_date": "2024-04-09", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-04-09" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-0836\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0836.json", "description": "CVE-2024-3327", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 911, "clock_known": true, "hours_public": 21864, "clock_origin": "advisory", "advisory_date": "2024-04-09", "advisory_days_public": 911, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0836.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-26320", "state": "RESERVED", "public_date": "2024-04-18", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-04-18" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-0933\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0933.json", "description": "CVE-2024-26320", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 902, "clock_known": true, "hours_public": 21648, "clock_origin": "advisory", "advisory_date": "2024-04-18", "advisory_days_public": 902, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0933.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-26321", "state": "RESERVED", "public_date": "2024-04-18", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-04-18" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-0933\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0933.json", "description": "CVE-2024-26321", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 902, "clock_known": true, "hours_public": 21648, "clock_origin": "advisory", "advisory_date": "2024-04-18", "advisory_days_public": 902, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0933.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-26322", "state": "RESERVED", "public_date": "2024-04-18", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-04-18" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-0933\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0933.json", "description": "CVE-2024-26322", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 902, "clock_known": true, "hours_public": 21648, "clock_origin": "advisory", "advisory_date": "2024-04-18", "advisory_days_public": 902, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0933.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-26325", "state": "RESERVED", "public_date": "2024-04-18", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-04-18" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-0933\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0933.json", "description": "CVE-2024-26325", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 902, "clock_known": true, "hours_public": 21648, "clock_origin": "advisory", "advisory_date": "2024-04-18", "advisory_days_public": 902, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0933.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-26326", "state": "RESERVED", "public_date": "2024-04-18", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-04-18" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-0933\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0933.json", "description": "CVE-2024-26326", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 902, "clock_known": true, "hours_public": 21648, "clock_origin": "advisory", "advisory_date": "2024-04-18", "advisory_days_public": 902, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0933.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-23694", "state": "RESERVED", "public_date": "2024-05-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2024-05-01", "csaf": "2024-05-07" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-1065\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1065.json;osv:Android::unknown:", "description": "In multiple locations, there is a possible way to use a paired Bluetooth LE audio device to achieve code execution due to a use after free.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 889, "clock_known": true, "hours_public": 21336, "clock_origin": "advisory", "advisory_date": "2024-05-01", "advisory_days_public": 889, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1065.json", "osv": "https://osv.dev/list?q=CVE-2024-23694" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-34456", "state": "RESERVED", "public_date": "2024-05-05", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-05-05" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-1028\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1028.json", "description": "CVE-2024-34456", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 885, "clock_known": true, "hours_public": 21240, "clock_origin": "advisory", "advisory_date": "2024-05-05", "advisory_days_public": 885, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1028.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-4047", "state": "RESERVED", "public_date": "2024-05-09", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-05-09" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-1085\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1085.json", "description": "CVE-2024-4047", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 881, "clock_known": true, "hours_public": 21144, "clock_origin": "advisory", "advisory_date": "2024-05-09", "advisory_days_public": 881, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1085.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-4048", "state": "RESERVED", "public_date": "2024-05-09", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-05-09" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-1085\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1085.json", "description": "CVE-2024-4048", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 881, "clock_known": true, "hours_public": 21144, "clock_origin": "advisory", "advisory_date": "2024-05-09", "advisory_days_public": 881, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1085.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-4049", "state": "RESERVED", "public_date": "2024-05-09", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-05-09" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-1085\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1085.json", "description": "CVE-2024-4049", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 881, "clock_known": true, "hours_public": 21144, "clock_origin": "advisory", "advisory_date": "2024-05-09", "advisory_days_public": 881, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1085.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-4050", "state": "RESERVED", "public_date": "2024-05-09", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-05-09" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-1085\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1085.json", "description": "CVE-2024-4050", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 881, "clock_known": true, "hours_public": 21144, "clock_origin": "advisory", "advisory_date": "2024-05-09", "advisory_days_public": 881, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1085.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-4051", "state": "RESERVED", "public_date": "2024-05-09", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-05-09" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-1085\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1085.json", "description": "CVE-2024-4051", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 881, "clock_known": true, "hours_public": 21144, "clock_origin": "advisory", "advisory_date": "2024-05-09", "advisory_days_public": 881, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1085.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-4052", "state": "RESERVED", "public_date": "2024-05-09", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-05-09" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-1085\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1085.json", "description": "CVE-2024-4052", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 881, "clock_known": true, "hours_public": 21144, "clock_origin": "advisory", "advisory_date": "2024-05-09", "advisory_days_public": 881, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1085.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-4053", "state": "RESERVED", "public_date": "2024-05-09", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-05-09" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-1085\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1085.json", "description": "CVE-2024-4053", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 881, "clock_known": true, "hours_public": 21144, "clock_origin": "advisory", "advisory_date": "2024-05-09", "advisory_days_public": 881, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1085.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-4054", "state": "RESERVED", "public_date": "2024-05-09", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-05-09" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-1085\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1085.json", "description": "CVE-2024-4054", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 881, "clock_known": true, "hours_public": 21144, "clock_origin": "advisory", "advisory_date": "2024-05-09", "advisory_days_public": 881, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1085.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-27131", "state": "RESERVED", "public_date": "2024-05-20", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-05-20" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-1195\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1195.json", "description": "CVE-2024-27131", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 870, "clock_known": true, "hours_public": 20880, "clock_origin": "advisory", "advisory_date": "2024-05-20", "advisory_days_public": 870, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1195.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-31969", "state": "RESERVED", "public_date": "2024-05-28", "sources": "alas", "feed_count": 1, "dates": { "alas": "2024-05-28" }, "refs": "alas:CVE-2024-31969", "description": "In sudo-1.8.23-10.amzn2.3.6 (Amazon Linux 2) and sudo-1.8.23-10.58.amzn1 (Amazon Linux 1), a user with an entry in the sudoers file, enabling them to run commands as another unprivileged user, can leverage it to run commands as root.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 862, "clock_known": true, "hours_public": 20688, "clock_origin": "advisory", "advisory_date": "2024-05-28", "advisory_days_public": 862, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2024-31969.html" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-4407", "state": "RESERVED", "public_date": "2024-05-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-05-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-1247\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1247.json", "description": "CVE-2024-4407", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 862, "clock_known": true, "hours_public": 20688, "clock_origin": "advisory", "advisory_date": "2024-05-28", "advisory_days_public": 862, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1247.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-5027", "state": "RESERVED", "public_date": "2024-05-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-05-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-1245\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1245.json", "description": "CVE-2024-5027", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 862, "clock_known": true, "hours_public": 20688, "clock_origin": "advisory", "advisory_date": "2024-05-28", "advisory_days_public": 862, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1245.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-31329", "state": "RESERVED", "public_date": "2024-06-03", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-06-03" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-1278\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1278.json", "description": "CVE-2024-31329", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 856, "clock_known": true, "hours_public": 20544, "clock_origin": "advisory", "advisory_date": "2024-06-03", "advisory_days_public": 856, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1278.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-31330", "state": "RESERVED", "public_date": "2024-06-03", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-06-03" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-1278\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1278.json", "description": "CVE-2024-31330", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 856, "clock_known": true, "hours_public": 20544, "clock_origin": "advisory", "advisory_date": "2024-06-03", "advisory_days_public": 856, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1278.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-27369", "state": "RESERVED", "public_date": "2024-06-05", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-06-05" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-1304\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1304.json", "description": "CVE-2024-27369", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 854, "clock_known": true, "hours_public": 20496, "clock_origin": "advisory", "advisory_date": "2024-06-05", "advisory_days_public": 854, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1304.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2023-6537", "state": "RESERVED", "public_date": "2024-06-10", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2024-06-10" }, "refs": "ghsa-repos:SuiteCRM/SuiteCRM-Core\tGHSA-j482-m46g-v8r2", "description": "SuiteCRM/SuiteCRM-Core repository advisory GHSA-j482-m46g-v8r2", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 849, "clock_known": true, "hours_public": 20376, "clock_origin": "advisory", "advisory_date": "2024-06-10", "advisory_days_public": 849, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/SuiteCRM/SuiteCRM-Core/security/advisories/GHSA-j482-m46g-v8r2" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-36223", "state": "RESERVED", "public_date": "2024-06-14", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-06-14" }, "refs": "csaf:Nationaal Cyber Security Centrum\tNCSC-2024-0259\thttps://advisories.ncsc.nl/csaf/v2/2024/ncsc-2024-0259.json", "description": "CVE-2024-36223", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 845, "clock_known": true, "hours_public": 20280, "clock_origin": "advisory", "advisory_date": "2024-06-14", "advisory_days_public": 845, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://advisories.ncsc.nl/csaf/v2/2024/ncsc-2024-0259.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-33861", "state": "RESERVED", "public_date": "2024-06-15", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-06-15" }, "refs": "csaf:SUSE Product Security Team\topenSUSE-SU-2024:13925-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_13925-1.json", "description": "CVE-2024-33861", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 844, "clock_known": true, "hours_public": 20256, "clock_origin": "advisory", "advisory_date": "2024-06-15", "advisory_days_public": 844, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_13925-1.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-38445", "state": "RESERVED", "public_date": "2024-06-18", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-06-18" }, "refs": "csaf:SUSE Product Security Team\tCVE-2024-38445\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2024-38445.json", "description": "CVE-2024-38445", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 841, "clock_known": true, "hours_public": 20184, "clock_origin": "advisory", "advisory_date": "2024-06-18", "advisory_days_public": 841, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2024-38445.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-36592", "state": "RESERVED", "public_date": "2024-07-09", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-07-09" }, "refs": "csaf:SUSE Product Security Team\tSUSE-SU-2024:2360-1\thttps://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_2360-1.json", "description": "CVE-2024-36592", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 820, "clock_known": true, "hours_public": 19680, "clock_origin": "advisory", "advisory_date": "2024-07-09", "advisory_days_public": 820, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_2360-1.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-40606", "state": "RESERVED", "public_date": "2024-07-09", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-07-09" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-1585\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1585.json", "description": "CVE-2024-40606", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 820, "clock_known": true, "hours_public": 19680, "clock_origin": "advisory", "advisory_date": "2024-07-09", "advisory_days_public": 820, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1585.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-40607", "state": "RESERVED", "public_date": "2024-07-09", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-07-09" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-1585\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1585.json", "description": "CVE-2024-40607", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 820, "clock_known": true, "hours_public": 19680, "clock_origin": "advisory", "advisory_date": "2024-07-09", "advisory_days_public": 820, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1585.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-40608", "state": "RESERVED", "public_date": "2024-07-09", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-07-09" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-1585\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1585.json", "description": "CVE-2024-40608", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 820, "clock_known": true, "hours_public": 19680, "clock_origin": "advisory", "advisory_date": "2024-07-09", "advisory_days_public": 820, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1585.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-40609", "state": "RESERVED", "public_date": "2024-07-09", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-07-09" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-1585\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1585.json", "description": "CVE-2024-40609", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 820, "clock_known": true, "hours_public": 19680, "clock_origin": "advisory", "advisory_date": "2024-07-09", "advisory_days_public": 820, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1585.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-40610", "state": "RESERVED", "public_date": "2024-07-09", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-07-09" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-1585\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1585.json", "description": "CVE-2024-40610", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 820, "clock_known": true, "hours_public": 19680, "clock_origin": "advisory", "advisory_date": "2024-07-09", "advisory_days_public": 820, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1585.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-40611", "state": "RESERVED", "public_date": "2024-07-09", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-07-09" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-1585\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1585.json", "description": "CVE-2024-40611", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 820, "clock_known": true, "hours_public": 19680, "clock_origin": "advisory", "advisory_date": "2024-07-09", "advisory_days_public": 820, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1585.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-40612", "state": "RESERVED", "public_date": "2024-07-09", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-07-09" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-1585\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1585.json", "description": "CVE-2024-40612", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 820, "clock_known": true, "hours_public": 19680, "clock_origin": "advisory", "advisory_date": "2024-07-09", "advisory_days_public": 820, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1585.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-40613", "state": "RESERVED", "public_date": "2024-07-09", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-07-09" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-1585\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1585.json", "description": "CVE-2024-40613", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 820, "clock_known": true, "hours_public": 19680, "clock_origin": "advisory", "advisory_date": "2024-07-09", "advisory_days_public": 820, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1585.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-34735", "state": "RESERVED", "public_date": "2024-08-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2024-08-01", "csaf": "2024-08-06" }, "refs": "csaf:Nationaal Cyber Security Centrum\tNCSC-2024-0322\thttps://advisories.ncsc.nl/csaf/v2/2024/ncsc-2024-0322.json;osv:Android:platform/frameworks/base", "description": "In multiple locations, there is a possible background activity launch due to a logic error in the code.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 797, "clock_known": true, "hours_public": 19128, "clock_origin": "advisory", "advisory_date": "2024-08-01", "advisory_days_public": 797, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "platform/frameworks/base", "ecosystem": "Android", "source_urls": { "csaf": "https://advisories.ncsc.nl/csaf/v2/2024/ncsc-2024-0322.json", "osv": "https://osv.dev/list?q=CVE-2024-34735" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-20452", "state": "RESERVED", "public_date": "2024-08-07", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-08-07" }, "refs": "csaf:Cisco\tcisco-sa-spa-http-vulns-RJZmX2Xz\thttps://www.cisco.com/.well-known/csaf/2024/cisco-sa-spa-http-vulns-rjzmx2xz.json", "description": "Cisco Small Business SPA300 and SPA500 HTTP Web UI Authenticated Arbitrary Command Execution Vulnerability", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 791, "clock_known": true, "hours_public": 18984, "clock_origin": "advisory", "advisory_date": "2024-08-07", "advisory_days_public": 791, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://www.cisco.com/.well-known/csaf/2024/cisco-sa-spa-http-vulns-rjzmx2xz.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-20453", "state": "RESERVED", "public_date": "2024-08-07", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-08-07" }, "refs": "csaf:Cisco\tcisco-sa-spa-http-vulns-RJZmX2Xz\thttps://www.cisco.com/.well-known/csaf/2024/cisco-sa-spa-http-vulns-rjzmx2xz.json", "description": "Cisco Small Business SPA300 and SPA500 HTTP Web UI Authenticated Denial of Service Vulnerability", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 791, "clock_known": true, "hours_public": 18984, "clock_origin": "advisory", "advisory_date": "2024-08-07", "advisory_days_public": 791, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://www.cisco.com/.well-known/csaf/2024/cisco-sa-spa-http-vulns-rjzmx2xz.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-21969", "state": "RESERVED", "public_date": "2024-08-13", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-08-13" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-1837\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1837.json", "description": "CVE-2024-21969", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 785, "clock_known": true, "hours_public": 18840, "clock_origin": "advisory", "advisory_date": "2024-08-13", "advisory_days_public": 785, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1837.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-41993", "state": "RESERVED", "public_date": "2024-08-14", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-08-14" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-1855\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1855.json", "description": "CVE-2024-41993", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 784, "clock_known": true, "hours_public": 18816, "clock_origin": "advisory", "advisory_date": "2024-08-14", "advisory_days_public": 784, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1855.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-6992", "state": "RESERVED", "public_date": "2024-08-18", "sources": "alpine,csaf,debian", "feed_count": 3, "dates": { "csaf": "2024-08-18" }, "refs": "alpine:qt6-qtwebengine;csaf:SUSE Product Security Team\topenSUSE-SU-2024:14272-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_14272-1.json;debian:chromium", "description": "CVE-2024-6992", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 780, "clock_known": true, "hours_public": 18720, "clock_origin": "advisory", "advisory_date": "2024-08-18", "advisory_days_public": 780, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qt6-qtwebengine", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2024-6992", "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_14272-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2024-6992" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-6993", "state": "RESERVED", "public_date": "2024-08-18", "sources": "csaf,debian", "feed_count": 2, "dates": { "csaf": "2024-08-18" }, "refs": "csaf:SUSE Product Security Team\topenSUSE-SU-2024:14272-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_14272-1.json;debian:chromium", "description": "CVE-2024-6993", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 780, "clock_known": true, "hours_public": 18720, "clock_origin": "advisory", "advisory_date": "2024-08-18", "advisory_days_public": 780, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "chromium", "ecosystem": "", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_14272-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2024-6993" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-6597", "state": "RESERVED", "public_date": "2024-08-27", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-08-27" }, "refs": "csaf:SUSE Product Security Team\tCVE-2024-6597\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2024-6597.json", "description": "CVE-2024-6597", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 771, "clock_known": true, "hours_public": 18504, "clock_origin": "advisory", "advisory_date": "2024-08-27", "advisory_days_public": 771, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2024-6597.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-37009", "state": "RESERVED", "public_date": "2024-09-09", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-09-09" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-2090\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-2090.json", "description": "CVE-2024-37009", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 758, "clock_known": true, "hours_public": 18192, "clock_origin": "advisory", "advisory_date": "2024-09-09", "advisory_days_public": 758, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-2090.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-37010", "state": "RESERVED", "public_date": "2024-09-09", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-09-09" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-2090\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-2090.json", "description": "CVE-2024-37010", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 758, "clock_known": true, "hours_public": 18192, "clock_origin": "advisory", "advisory_date": "2024-09-09", "advisory_days_public": 758, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-2090.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-37011", "state": "RESERVED", "public_date": "2024-09-09", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-09-09" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-2090\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-2090.json", "description": "CVE-2024-37011", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 758, "clock_known": true, "hours_public": 18192, "clock_origin": "advisory", "advisory_date": "2024-09-09", "advisory_days_public": 758, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-2090.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-37012", "state": "RESERVED", "public_date": "2024-09-09", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-09-09" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-2090\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-2090.json", "description": "CVE-2024-37012", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 758, "clock_known": true, "hours_public": 18192, "clock_origin": "advisory", "advisory_date": "2024-09-09", "advisory_days_public": 758, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-2090.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-42014", "state": "RESERVED", "public_date": "2024-09-09", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-09-09" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-2090\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-2090.json", "description": "CVE-2024-42014", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 758, "clock_known": true, "hours_public": 18192, "clock_origin": "advisory", "advisory_date": "2024-09-09", "advisory_days_public": 758, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-2090.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-45110", "state": "RESERVED", "public_date": "2024-09-11", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-09-11" }, "refs": "csaf:Nationaal Cyber Security Centrum\tNCSC-2024-0368\thttps://advisories.ncsc.nl/csaf/v2/2024/ncsc-2024-0368.json", "description": "CVE-2024-45110", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 756, "clock_known": true, "hours_public": 18144, "clock_origin": "advisory", "advisory_date": "2024-09-11", "advisory_days_public": 756, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://advisories.ncsc.nl/csaf/v2/2024/ncsc-2024-0368.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-38393", "state": "RESERVED", "public_date": "2024-09-30", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-09-30" }, "refs": "csaf:Nationaal Cyber Security Centrum\tNCSC-2024-0385\thttps://advisories.ncsc.nl/csaf/v2/2024/ncsc-2024-0385.json", "description": "CVE-2024-38393", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 737, "clock_known": true, "hours_public": 17688, "clock_origin": "advisory", "advisory_date": "2024-09-30", "advisory_days_public": 737, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://advisories.ncsc.nl/csaf/v2/2024/ncsc-2024-0385.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-9370", "state": "RESERVED", "public_date": "2024-10-03", "sources": "csaf,debian,msrc", "feed_count": 3, "dates": { "csaf": "2024-10-04", "msrc": "2024-10-03" }, "refs": "csaf:SUSE Product Security Team\topenSUSE-SU-2024:14383-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_14383-1.json;debian:chromium;msrc:msrc:2024-Oct", "description": "CVE-2024-9370", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 734, "clock_known": true, "hours_public": 17616, "clock_origin": "advisory", "advisory_date": "2024-10-03", "advisory_days_public": 734, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "chromium", "ecosystem": "", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_14383-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2024-9370", "msrc": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-9370" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-8928", "state": "RESERVED", "public_date": "2024-10-08", "sources": "alas,csaf", "feed_count": 2, "dates": { "alas": "2024-10-12", "csaf": "2024-10-08" }, "refs": "alas:CVE-2024-8928;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-3116\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3116.json", "description": "php: Erroneous parsing of multipart form data", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 729, "clock_known": true, "hours_public": 17496, "clock_origin": "advisory", "advisory_date": "2024-10-08", "advisory_days_public": 729, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2024-8928.html", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3116.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-42511", "state": "RESERVED", "public_date": "2024-10-15", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-10-15" }, "refs": "csaf:SUSE Product Security Team\topenSUSE-SU-2024:14404-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_14404-1.json", "description": "CVE-2024-42511", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 722, "clock_known": true, "hours_public": 17328, "clock_origin": "advisory", "advisory_date": "2024-10-15", "advisory_days_public": 722, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_14404-1.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-11249", "state": "RESERVED", "public_date": "2024-11-14", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-11-14" }, "refs": "csaf:Red Hat Product Security\tCVE-2024-11249\thttps://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-11249.json", "description": "zlib-rs: zlib-rs stack overflow during decompression with malicious input", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 692, "clock_known": true, "hours_public": 16608, "clock_origin": "advisory", "advisory_date": "2024-11-14", "advisory_days_public": 692, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-11249.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-10512", "state": "RESERVED", "public_date": "2024-11-26", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-11-26" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-3548\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3548.json", "description": "CVE-2024-10512", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 680, "clock_known": true, "hours_public": 16320, "clock_origin": "advisory", "advisory_date": "2024-11-26", "advisory_days_public": 680, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3548.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-8257", "state": "RESERVED", "public_date": "2024-12-05", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2025-12-01", "csaf": "2024-12-05" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-3622\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3622.json;osv:Android::unknown:", "description": "In multiple locations, there is a possible bypass between two Java Card Applets due to a missing permission check.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 671, "clock_known": true, "hours_public": 16104, "clock_origin": "advisory", "advisory_date": "2024-12-05", "advisory_days_public": 671, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3622.json", "osv": "https://osv.dev/list?q=CVE-2024-8257" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-46185", "state": "RESERVED", "public_date": "2024-12-06", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-12-06" }, "refs": "csaf:SUSE Product Security Team\tSUSE-SU-2024:4079-1\thttps://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_4079-1.json", "description": "CVE-2024-46185", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 670, "clock_known": true, "hours_public": 16080, "clock_origin": "advisory", "advisory_date": "2024-12-06", "advisory_days_public": 670, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_4079-1.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-43711", "state": "RESERVED", "public_date": "2024-12-10", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-12-10" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-3669\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3669.json", "description": "CVE-2024-43711", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 666, "clock_known": true, "hours_public": 15984, "clock_origin": "advisory", "advisory_date": "2024-12-10", "advisory_days_public": 666, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3669.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-44074", "state": "RESERVED", "public_date": "2024-12-10", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-12-10" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-3668\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3668.json", "description": "CVE-2024-44074", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 666, "clock_known": true, "hours_public": 15984, "clock_origin": "advisory", "advisory_date": "2024-12-10", "advisory_days_public": 666, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3668.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-54033", "state": "RESERVED", "public_date": "2024-12-10", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-12-10" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-3677\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3677.json", "description": "CVE-2024-54033", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 666, "clock_known": true, "hours_public": 15984, "clock_origin": "advisory", "advisory_date": "2024-12-10", "advisory_days_public": 666, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3677.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-54052", "state": "RESERVED", "public_date": "2024-12-10", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-12-10" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-3677\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3677.json", "description": "CVE-2024-54052", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 666, "clock_known": true, "hours_public": 15984, "clock_origin": "advisory", "advisory_date": "2024-12-10", "advisory_days_public": 666, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3677.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-54035", "state": "RESERVED", "public_date": "2024-12-11", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-12-11" }, "refs": "csaf:Nationaal Cyber Security Centrum\tNCSC-2024-0483\thttps://advisories.ncsc.nl/csaf/v2/2024/ncsc-2024-0483.json", "description": "CVE-2024-54035", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 665, "clock_known": true, "hours_public": 15960, "clock_origin": "advisory", "advisory_date": "2024-12-11", "advisory_days_public": 665, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://advisories.ncsc.nl/csaf/v2/2024/ncsc-2024-0483.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-12455", "state": "RESERVED", "public_date": "2024-12-12", "sources": "alas,csaf,debian,redhat", "feed_count": 4, "dates": { "alas": "2024-12-20", "redhat": "2024-12-12", "csaf": "2024-12-14" }, "refs": "alas:CVE-2024-12455;csaf:SUSE Product Security Team\tCVE-2024-12455\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2024-12455.json;debian:glibc;redhat:CVE-2024-12455", "description": "glibc: glibc in Fedora 41 ships a broken getrandom/arc4random for ppc64le platform", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 664, "clock_known": true, "hours_public": 15936, "clock_origin": "advisory", "advisory_date": "2024-12-12", "advisory_days_public": 664, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "glibc", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2024-12455.html", "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2024-12455.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2024-12455", "redhat": "https://access.redhat.com/security/cve/CVE-2024-12455" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-55643", "state": "RESERVED", "public_date": "2024-12-16", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-12-16" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-3704\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3704.json", "description": "CVE-2024-55643", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 660, "clock_known": true, "hours_public": 15840, "clock_origin": "advisory", "advisory_date": "2024-12-16", "advisory_days_public": 660, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3704.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-55644", "state": "RESERVED", "public_date": "2024-12-16", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-12-16" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-3704\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3704.json", "description": "CVE-2024-55644", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 660, "clock_known": true, "hours_public": 15840, "clock_origin": "advisory", "advisory_date": "2024-12-16", "advisory_days_public": 660, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3704.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-55645", "state": "RESERVED", "public_date": "2024-12-16", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-12-16" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-3704\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3704.json", "description": "CVE-2024-55645", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 660, "clock_known": true, "hours_public": 15840, "clock_origin": "advisory", "advisory_date": "2024-12-16", "advisory_days_public": 660, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3704.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-55646", "state": "RESERVED", "public_date": "2024-12-16", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-12-16" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-3704\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3704.json", "description": "CVE-2024-55646", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 660, "clock_known": true, "hours_public": 15840, "clock_origin": "advisory", "advisory_date": "2024-12-16", "advisory_days_public": 660, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3704.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-55647", "state": "RESERVED", "public_date": "2024-12-16", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-12-16" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-3704\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3704.json", "description": "CVE-2024-55647", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 660, "clock_known": true, "hours_public": 15840, "clock_origin": "advisory", "advisory_date": "2024-12-16", "advisory_days_public": 660, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3704.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-55648", "state": "RESERVED", "public_date": "2024-12-16", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2024-12-16" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2024-3704\thttps://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3704.json", "description": "CVE-2024-55648", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 660, "clock_known": true, "hours_public": 15840, "clock_origin": "advisory", "advisory_date": "2024-12-16", "advisory_days_public": 660, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3704.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-9525", "state": "RESERVED", "public_date": "2025-01-09", "sources": "zdi", "feed_count": 1, "dates": { "zdi": "2025-01-09" }, "refs": "zdi:ZDI-25-025", "description": "ZDI advisory ZDI-25-025", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 636, "clock_known": true, "hours_public": 15264, "clock_origin": "advisory", "advisory_date": "2025-01-09", "advisory_days_public": 636, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "zdi": "https://www.zerodayinitiative.com/advisories/ZDI-25-025/" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-9523", "state": "RESERVED", "public_date": "2025-01-09", "sources": "zdi", "feed_count": 1, "dates": { "zdi": "2025-01-09" }, "refs": "zdi:ZDI-25-023", "description": "ZDI advisory ZDI-25-023", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 636, "clock_known": true, "hours_public": 15264, "clock_origin": "advisory", "advisory_date": "2025-01-09", "advisory_days_public": 636, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "zdi": "https://www.zerodayinitiative.com/advisories/ZDI-25-023/" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-53889", "state": "RESERVED", "public_date": "2025-01-16", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-01-16" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-0112\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0112.json", "description": "CVE-2024-53889", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 629, "clock_known": true, "hours_public": 15096, "clock_origin": "advisory", "advisory_date": "2025-01-16", "advisory_days_public": 629, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0112.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-52948", "state": "RESERVED", "public_date": "2025-01-22", "sources": "debian", "feed_count": 1, "dates": {}, "refs": "debian:lemonldap-ng", "description": "lemonldap-ng", "state_verified_this_run": true, "public_date_origin": "lookup", "days_public": 623, "clock_known": true, "hours_public": 14952, "clock_origin": "tracker", "advisory_date": null, "advisory_days_public": null, "past_expectation": false, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "lemonldap-ng", "ecosystem": "", "source_urls": { "debian": "https://security-tracker.debian.org/tracker/CVE-2024-52948" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-49743", "state": "RESERVED", "public_date": "2025-02-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2025-02-01", "csaf": "2025-02-04" }, "refs": "csaf:Nationaal Cyber Security Centrum\tNCSC-2025-0039\thttps://advisories.ncsc.nl/csaf/v2/2025/ncsc-2025-0039.json;osv:Android:platform/frameworks/base", "description": "In multiple locations, there is a possible way to launch an activity from the background due to BAL Bypass.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 613, "clock_known": true, "hours_public": 14712, "clock_origin": "advisory", "advisory_date": "2025-02-01", "advisory_days_public": 613, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "platform/frameworks/base", "ecosystem": "Android", "source_urls": { "csaf": "https://advisories.ncsc.nl/csaf/v2/2025/ncsc-2025-0039.json", "osv": "https://osv.dev/list?q=CVE-2024-49743" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-0094", "state": "RESERVED", "public_date": "2025-02-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2025-02-01", "csaf": "2025-02-04" }, "refs": "csaf:Nationaal Cyber Security Centrum\tNCSC-2025-0039\thttps://advisories.ncsc.nl/csaf/v2/2025/ncsc-2025-0039.json;osv:Android:platform/packages/apps/Settings", "description": "In onCreateOptionsMenu of UserSettings.java, there is a possible way to remove the work profile by opening a hidden activity due to a logic error in the code.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 613, "clock_known": true, "hours_public": 14712, "clock_origin": "advisory", "advisory_date": "2025-02-01", "advisory_days_public": 613, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "platform/packages/apps/Settings", "ecosystem": "Android", "source_urls": { "csaf": "https://advisories.ncsc.nl/csaf/v2/2025/ncsc-2025-0039.json", "osv": "https://osv.dev/list?q=CVE-2025-0094" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-49741", "state": "RESERVED", "public_date": "2025-02-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2025-02-01", "csaf": "2025-02-04" }, "refs": "csaf:Nationaal Cyber Security Centrum\tNCSC-2025-0039\thttps://advisories.ncsc.nl/csaf/v2/2025/ncsc-2025-0039.json;osv:Android:platform/frameworks/base", "description": "In multiple functions of AppWidgetServiceImpl.java, there is a possible persistent denial of service due to resource exhaustion.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 613, "clock_known": true, "hours_public": 14712, "clock_origin": "advisory", "advisory_date": "2025-02-01", "advisory_days_public": 613, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "platform/frameworks/base", "ecosystem": "Android", "source_urls": { "csaf": "https://advisories.ncsc.nl/csaf/v2/2025/ncsc-2025-0039.json", "osv": "https://osv.dev/list?q=CVE-2024-49741" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-49721", "state": "RESERVED", "public_date": "2025-02-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2025-02-01", "csaf": "2025-02-04" }, "refs": "csaf:Nationaal Cyber Security Centrum\tNCSC-2025-0039\thttps://advisories.ncsc.nl/csaf/v2/2025/ncsc-2025-0039.json;osv:Android:platform/frameworks/base", "description": "In InputMethodSubtypeArray of InputMethodSubtypeArray.java, there is a possible way to bypass a key intent check to launch arbitrary activity due to Parcel mismatch.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 613, "clock_known": true, "hours_public": 14712, "clock_origin": "advisory", "advisory_date": "2025-02-01", "advisory_days_public": 613, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "platform/frameworks/base", "ecosystem": "Android", "source_urls": { "csaf": "https://advisories.ncsc.nl/csaf/v2/2025/ncsc-2025-0039.json", "osv": "https://osv.dev/list?q=CVE-2024-49721" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-0095", "state": "RESERVED", "public_date": "2025-02-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2025-02-01", "csaf": "2025-02-04" }, "refs": "csaf:Nationaal Cyber Security Centrum\tNCSC-2025-0039\thttps://advisories.ncsc.nl/csaf/v2/2025/ncsc-2025-0039.json;osv:Android:platform/packages/apps/Settings", "description": "In AppTimeSpentPresenter of AppTimeSpentPreference.kt, there is a possible way to hijack implicit intent.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 613, "clock_known": true, "hours_public": 14712, "clock_origin": "advisory", "advisory_date": "2025-02-01", "advisory_days_public": 613, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "platform/packages/apps/Settings", "ecosystem": "Android", "source_urls": { "csaf": "https://advisories.ncsc.nl/csaf/v2/2025/ncsc-2025-0039.json", "osv": "https://osv.dev/list?q=CVE-2025-0095" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-0096", "state": "RESERVED", "public_date": "2025-02-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2025-02-01", "csaf": "2025-02-04" }, "refs": "csaf:Nationaal Cyber Security Centrum\tNCSC-2025-0039\thttps://advisories.ncsc.nl/csaf/v2/2025/ncsc-2025-0039.json;osv:Android:platform/hardware/st/nfc", "description": "In handlePollingLoopData of hal_fwlog.cc, there is a possible out of bounds write due to a heap buffer overflow.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 613, "clock_known": true, "hours_public": 14712, "clock_origin": "advisory", "advisory_date": "2025-02-01", "advisory_days_public": 613, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "platform/hardware/st/nfc", "ecosystem": "Android", "source_urls": { "csaf": "https://advisories.ncsc.nl/csaf/v2/2025/ncsc-2025-0039.json", "osv": "https://osv.dev/list?q=CVE-2025-0096" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-49723", "state": "RESERVED", "public_date": "2025-02-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2025-02-01", "csaf": "2025-02-04" }, "refs": "csaf:Nationaal Cyber Security Centrum\tNCSC-2025-0039\thttps://advisories.ncsc.nl/csaf/v2/2025/ncsc-2025-0039.json;osv:Android:platform/external/conscrypt", "description": "In static of NativeCrypto.java, there is a possible way to obtain clear-text data due to improperly used crypto.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 613, "clock_known": true, "hours_public": 14712, "clock_origin": "advisory", "advisory_date": "2025-02-01", "advisory_days_public": 613, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "platform/external/conscrypt", "ecosystem": "Android", "source_urls": { "csaf": "https://advisories.ncsc.nl/csaf/v2/2025/ncsc-2025-0039.json", "osv": "https://osv.dev/list?q=CVE-2024-49723" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-49746", "state": "RESERVED", "public_date": "2025-02-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2025-02-01", "csaf": "2025-02-04" }, "refs": "csaf:Nationaal Cyber Security Centrum\tNCSC-2025-0039\thttps://advisories.ncsc.nl/csaf/v2/2025/ncsc-2025-0039.json;osv:Android:platform/frameworks/native", "description": "In multiple functions of Parcel.cpp, there is a possible way to manipulate file descriptors and escalate privileges due to a logic error in the code.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 613, "clock_known": true, "hours_public": 14712, "clock_origin": "advisory", "advisory_date": "2025-02-01", "advisory_days_public": 613, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "platform/frameworks/native", "ecosystem": "Android", "source_urls": { "csaf": "https://advisories.ncsc.nl/csaf/v2/2025/ncsc-2025-0039.json", "osv": "https://osv.dev/list?q=CVE-2024-49746" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-0097", "state": "RESERVED", "public_date": "2025-02-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2025-02-01", "csaf": "2025-02-04" }, "refs": "csaf:Nationaal Cyber Security Centrum\tNCSC-2025-0039\thttps://advisories.ncsc.nl/csaf/v2/2025/ncsc-2025-0039.json;osv:Android:platform/frameworks/base", "description": "In transferTouchGesture of WindowManagerService.java , there is a possible way to steal sensitive user input due to a logic error in the code.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 613, "clock_known": true, "hours_public": 14712, "clock_origin": "advisory", "advisory_date": "2025-02-01", "advisory_days_public": 613, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "platform/frameworks/base", "ecosystem": "Android", "source_urls": { "csaf": "https://advisories.ncsc.nl/csaf/v2/2025/ncsc-2025-0039.json", "osv": "https://osv.dev/list?q=CVE-2025-0097" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-0091", "state": "RESERVED", "public_date": "2025-02-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2025-02-01", "csaf": "2025-02-04" }, "refs": "csaf:Nationaal Cyber Security Centrum\tNCSC-2025-0039\thttps://advisories.ncsc.nl/csaf/v2/2025/ncsc-2025-0039.json;osv:Android:platform/packages/apps/Settings", "description": "In isSafeIntent of AccountManagerService.java, there is a possible way to bypass an intent type check due to a confused deputy.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 613, "clock_known": true, "hours_public": 14712, "clock_origin": "advisory", "advisory_date": "2025-02-01", "advisory_days_public": 613, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "platform/packages/apps/Settings", "ecosystem": "Android", "source_urls": { "csaf": "https://advisories.ncsc.nl/csaf/v2/2025/ncsc-2025-0039.json", "osv": "https://osv.dev/list?q=CVE-2025-0091" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-0098", "state": "RESERVED", "public_date": "2025-02-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2025-02-01", "csaf": "2025-02-04" }, "refs": "csaf:Nationaal Cyber Security Centrum\tNCSC-2025-0039\thttps://advisories.ncsc.nl/csaf/v2/2025/ncsc-2025-0039.json;osv:Android:platform/frameworks/base", "description": "In multiple functions of TaskFragmentOrganizerController.java, there is a possible token leak due to a logic error in the code.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 613, "clock_known": true, "hours_public": 14712, "clock_origin": "advisory", "advisory_date": "2025-02-01", "advisory_days_public": 613, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "platform/frameworks/base", "ecosystem": "Android", "source_urls": { "csaf": "https://advisories.ncsc.nl/csaf/v2/2025/ncsc-2025-0039.json", "osv": "https://osv.dev/list?q=CVE-2025-0098" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-49729", "state": "RESERVED", "public_date": "2025-02-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2025-02-01", "csaf": "2025-02-04" }, "refs": "csaf:Nationaal Cyber Security Centrum\tNCSC-2025-0039\thttps://advisories.ncsc.nl/csaf/v2/2025/ncsc-2025-0039.json;osv:Android:platform/system/core", "description": "In GetTable of dm.cpp, there is a possible way to leak the raw FDE key in bug reports due to improperly used crypto.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 613, "clock_known": true, "hours_public": 14712, "clock_origin": "advisory", "advisory_date": "2025-02-01", "advisory_days_public": 613, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "platform/system/core", "ecosystem": "Android", "source_urls": { "csaf": "https://advisories.ncsc.nl/csaf/v2/2025/ncsc-2025-0039.json", "osv": "https://osv.dev/list?q=CVE-2024-49729" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-0099", "state": "RESERVED", "public_date": "2025-02-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2025-02-01", "csaf": "2025-02-04" }, "refs": "csaf:Nationaal Cyber Security Centrum\tNCSC-2025-0039\thttps://advisories.ncsc.nl/csaf/v2/2025/ncsc-2025-0039.json;osv:Android:platform/frameworks/base", "description": "In multiple functions of CompanionDeviceManagerService.java, there is a possible way to grant permissions due to a logic error in the code.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 613, "clock_known": true, "hours_public": 14712, "clock_origin": "advisory", "advisory_date": "2025-02-01", "advisory_days_public": 613, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "platform/frameworks/base", "ecosystem": "Android", "source_urls": { "csaf": "https://advisories.ncsc.nl/csaf/v2/2025/ncsc-2025-0039.json", "osv": "https://osv.dev/list?q=CVE-2025-0099" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-0100", "state": "RESERVED", "public_date": "2025-02-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2025-02-01", "csaf": "2025-02-04" }, "refs": "csaf:Nationaal Cyber Security Centrum\tNCSC-2025-0039\thttps://advisories.ncsc.nl/csaf/v2/2025/ncsc-2025-0039.json;osv:Android:platform/frameworks/base", "description": "In onCreate of MediaProjectionPermissionActivity.java, there is a possible way to bypass user consent due to a missing permission check.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 613, "clock_known": true, "hours_public": 14712, "clock_origin": "advisory", "advisory_date": "2025-02-01", "advisory_days_public": 613, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "platform/frameworks/base", "ecosystem": "Android", "source_urls": { "csaf": "https://advisories.ncsc.nl/csaf/v2/2025/ncsc-2025-0039.json", "osv": "https://osv.dev/list?q=CVE-2025-0100" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-0088", "state": "RESERVED", "public_date": "2025-02-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2025-02-01", "csaf": "2025-02-04" }, "refs": "csaf:Nationaal Cyber Security Centrum\tNCSC-2025-0039\thttps://advisories.ncsc.nl/csaf/v2/2025/ncsc-2025-0039.json;osv:Android::linux_kernel:", "description": "In multiple functions of mremap.c, there is a possible use-after-free scenario in physical memory due to a race condition.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 613, "clock_known": true, "hours_public": 14712, "clock_origin": "advisory", "advisory_date": "2025-02-01", "advisory_days_public": 613, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "csaf": "https://advisories.ncsc.nl/csaf/v2/2025/ncsc-2025-0039.json", "osv": "https://osv.dev/list?q=CVE-2025-0088" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-0085", "state": "RESERVED", "public_date": "2025-02-01", "sources": "osv", "feed_count": 1, "dates": { "osv": "2025-02-01" }, "refs": "osv:Android::unknown:", "description": "In registerCallback of BatteryMitigationAidl.cpp, there is a possible out of bounds read due to a missing bounds check.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 613, "clock_known": true, "hours_public": 14712, "clock_origin": "advisory", "advisory_date": "2025-02-01", "advisory_days_public": 613, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2025-0085" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-49199", "state": "RESERVED", "public_date": "2025-02-11", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-02-11" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-0318\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0318.json", "description": "CVE-2024-49199", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 603, "clock_known": true, "hours_public": 14472, "clock_origin": "advisory", "advisory_date": "2025-02-11", "advisory_days_public": 603, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0318.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-23380", "state": "RESERVED", "public_date": "2025-02-13", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-02-13" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-0377\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0377.json", "description": "CVE-2025-23380", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 601, "clock_known": true, "hours_public": 14424, "clock_origin": "advisory", "advisory_date": "2025-02-13", "advisory_days_public": 601, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0377.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-6837", "state": "RESERVED", "public_date": "2025-02-14", "sources": "alpine,csaf", "feed_count": 2, "dates": { "csaf": "2025-02-14" }, "refs": "alpine:grafana;csaf:SUSE Product Security Team\tSUSE-SU-2025:0545-1\thttps://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_0545-1.json", "description": "CVE-2024-6837", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 600, "clock_known": true, "hours_public": 14400, "clock_origin": "advisory", "advisory_date": "2025-02-14", "advisory_days_public": 600, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "grafana", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2024-6837", "csaf": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_0545-1.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-27227", "state": "RESERVED", "public_date": "2025-02-26", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-02-26" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-0451\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0451.json", "description": "CVE-2025-27227", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 588, "clock_known": true, "hours_public": 14112, "clock_origin": "advisory", "advisory_date": "2025-02-26", "advisory_days_public": 588, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0451.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-27228", "state": "RESERVED", "public_date": "2025-02-26", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-02-26" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-0451\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0451.json", "description": "CVE-2025-27228", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 588, "clock_known": true, "hours_public": 14112, "clock_origin": "advisory", "advisory_date": "2025-02-26", "advisory_days_public": 588, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0451.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-27229", "state": "RESERVED", "public_date": "2025-02-26", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-02-26" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-0451\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0451.json", "description": "CVE-2025-27229", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 588, "clock_known": true, "hours_public": 14112, "clock_origin": "advisory", "advisory_date": "2025-02-26", "advisory_days_public": 588, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0451.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-49198", "state": "RESERVED", "public_date": "2025-03-02", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-03-02" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-0464\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0464.json", "description": "CVE-2024-49198", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 584, "clock_known": true, "hours_public": 14016, "clock_origin": "advisory", "advisory_date": "2025-03-02", "advisory_days_public": 584, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0464.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-51943", "state": "RESERVED", "public_date": "2025-03-03", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-03-03" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-0476\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0476.json", "description": "CVE-2024-51943", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 583, "clock_known": true, "hours_public": 13992, "clock_origin": "advisory", "advisory_date": "2025-03-03", "advisory_days_public": 583, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0476.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-30081", "state": "RESERVED", "public_date": "2025-03-17", "sources": "csaf,ghsa,osv", "feed_count": 3, "dates": { "ghsa": "2025-03-19", "osv": "2025-03-19", "csaf": "2025-03-17" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-0575\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0575.json;ghsa:GHSA-vmgw-24w6-9v82;osv:Packagist:clickstorm/cs-seo", "description": "Clickstorm SEO Allows Cross-Site Scripting (XSS)", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 569, "clock_known": true, "hours_public": 13656, "clock_origin": "advisory", "advisory_date": "2025-03-17", "advisory_days_public": 569, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "clickstorm/cs-seo", "ecosystem": "Packagist", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0575.json", "ghsa": "https://github.com/advisories/GHSA-vmgw-24w6-9v82", "osv": "https://osv.dev/list?q=CVE-2025-30081" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-30083", "state": "RESERVED", "public_date": "2025-03-17", "sources": "csaf,ghsa,osv", "feed_count": 3, "dates": { "ghsa": "2025-03-19", "osv": "2025-03-19", "csaf": "2025-03-17" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-0575\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0575.json;ghsa:GHSA-rrh3-cgmx-w62f;osv:Packagist:codingms/additional-tca", "description": "Additional TCA Allows Cross-Site Scripting (XSS)", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 569, "clock_known": true, "hours_public": 13656, "clock_origin": "advisory", "advisory_date": "2025-03-17", "advisory_days_public": 569, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "codingms/additional-tca", "ecosystem": "Packagist", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0575.json", "ghsa": "https://github.com/advisories/GHSA-rrh3-cgmx-w62f", "osv": "https://osv.dev/list?q=CVE-2025-30083" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-30082", "state": "RESERVED", "public_date": "2025-03-17", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-03-17" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-0575\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0575.json", "description": "CVE-2025-30082", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 569, "clock_known": true, "hours_public": 13656, "clock_origin": "advisory", "advisory_date": "2025-03-17", "advisory_days_public": 569, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0575.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-2792", "state": "RESERVED", "public_date": "2025-03-26", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2025-03-26", "osv": "2025-03-26" }, "refs": "ghsa:GHSA-3p6v-hrg8-8qj7;osv:npm:@mozilla/readability", "description": "@mozilla/readability Denial of Service through Regex", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 560, "clock_known": true, "hours_public": 13440, "clock_origin": "advisory", "advisory_date": "2025-03-26", "advisory_days_public": 560, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "@mozilla/readability", "ecosystem": "npm", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-3p6v-hrg8-8qj7", "osv": "https://osv.dev/list?q=CVE-2025-2792" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-1827", "state": "RESERVED", "public_date": "2025-03-26", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-03-26" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-0644\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0644.json", "description": "CVE-2025-1827", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 560, "clock_known": true, "hours_public": 13440, "clock_origin": "advisory", "advisory_date": "2025-03-26", "advisory_days_public": 560, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0644.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-26415", "state": "RESERVED", "public_date": "2025-04-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2025-04-01", "csaf": "2025-04-10" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-0787\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0787.json;osv:Android::unknown:", "description": "In n/a of n/a, there is a possible n/a due to a logic error in the code.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 554, "clock_known": true, "hours_public": 13296, "clock_origin": "advisory", "advisory_date": "2025-04-01", "advisory_days_public": 554, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0787.json", "osv": "https://osv.dev/list?q=CVE-2025-26415" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-28269", "state": "RESERVED", "public_date": "2025-04-07", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2025-04-07", "osv": "2025-04-07" }, "refs": "ghsa:GHSA-hpqf-m68j-2pfx;osv:npm:js-object-utilities", "description": "js-object-utilities Vulnerable to Prototype Pollution", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 548, "clock_known": true, "hours_public": 13152, "clock_origin": "advisory", "advisory_date": "2025-04-07", "advisory_days_public": 548, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "js-object-utilities", "ecosystem": "npm", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-hpqf-m68j-2pfx", "osv": "https://osv.dev/list?q=CVE-2025-28269" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-27529", "state": "RESERVED", "public_date": "2025-04-07", "sources": "zdi", "feed_count": 1, "dates": { "zdi": "2025-04-07" }, "refs": "zdi:ZDI-25-201", "description": "ZDI advisory ZDI-25-201", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 548, "clock_known": true, "hours_public": 13152, "clock_origin": "advisory", "advisory_date": "2025-04-07", "advisory_days_public": 548, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "zdi": "https://www.zerodayinitiative.com/advisories/ZDI-25-201/" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-20570", "state": "RESERVED", "public_date": "2025-04-08", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2025-04-08", "csaf": "2025-04-08" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-0748\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0748.json;ghsa-repos:microsoft/vscode\tGHSA-hwrx-jgf2-74hw", "description": "microsoft/vscode repository advisory GHSA-hwrx-jgf2-74hw", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 547, "clock_known": true, "hours_public": 13128, "clock_origin": "advisory", "advisory_date": "2025-04-08", "advisory_days_public": 547, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0748.json", "ghsa-repos": "https://github.com/microsoft/vscode/security/advisories/GHSA-hwrx-jgf2-74hw" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-32416", "state": "RESERVED", "public_date": "2025-04-15", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-04-15" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-0834\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0834.json", "description": "CVE-2025-32416", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 540, "clock_known": true, "hours_public": 12960, "clock_origin": "advisory", "advisory_date": "2025-04-15", "advisory_days_public": 540, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0834.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-32417", "state": "RESERVED", "public_date": "2025-04-15", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-04-15" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-0834\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0834.json", "description": "CVE-2025-32417", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 540, "clock_known": true, "hours_public": 12960, "clock_origin": "advisory", "advisory_date": "2025-04-15", "advisory_days_public": 540, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0834.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-32418", "state": "RESERVED", "public_date": "2025-04-15", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-04-15" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-0834\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0834.json", "description": "CVE-2025-32418", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 540, "clock_known": true, "hours_public": 12960, "clock_origin": "advisory", "advisory_date": "2025-04-15", "advisory_days_public": 540, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0834.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-32419", "state": "RESERVED", "public_date": "2025-04-15", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-04-15" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-0834\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0834.json", "description": "CVE-2025-32419", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 540, "clock_known": true, "hours_public": 12960, "clock_origin": "advisory", "advisory_date": "2025-04-15", "advisory_days_public": 540, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0834.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-12361", "state": "RESERVED", "public_date": "2025-04-18", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-04-18" }, "refs": "csaf:SUSE Product Security Team\topenSUSE-SU-2025:15010-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_15010-1.json", "description": "CVE-2024-12361", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 537, "clock_known": true, "hours_public": 12888, "clock_origin": "advisory", "advisory_date": "2025-04-18", "advisory_days_public": 537, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_15010-1.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2023-32198", "state": "RESERVED", "public_date": "2025-04-25", "sources": "csaf,ghsa,osv", "feed_count": 3, "dates": { "ghsa": "2025-04-25", "osv": "2025-04-25", "csaf": "2025-05-07" }, "refs": "csaf:SUSE Product Security Team\topenSUSE-SU-2025:15059-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_15059-1.json;ghsa:GHSA-95fc-g4gj-mqmx;osv:Go:github.com/rancher/steve", "description": "Steve doesn\u2019t verify a server\u2019s certificate and is susceptible to man-in-the-middle (MitM) attacks", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 530, "clock_known": true, "hours_public": 12720, "clock_origin": "advisory", "advisory_date": "2025-04-25", "advisory_days_public": 530, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "github.com/rancher/steve", "ecosystem": "Go", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_15059-1.json", "ghsa": "https://github.com/advisories/GHSA-95fc-g4gj-mqmx", "osv": "https://osv.dev/list?q=CVE-2023-32198" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-23390", "state": "RESERVED", "public_date": "2025-04-25", "sources": "csaf,ghsa,osv", "feed_count": 3, "dates": { "ghsa": "2025-04-25", "osv": "2025-04-25", "csaf": "2025-05-07" }, "refs": "csaf:SUSE Product Security Team\topenSUSE-SU-2025:15059-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_15059-1.json;ghsa:GHSA-xgpc-q899-67p8;osv:Go:github.com/rancher/fleet", "description": "Fleet doesn\u2019t validate a server\u2019s certificate when connecting through SSH", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 530, "clock_known": true, "hours_public": 12720, "clock_origin": "advisory", "advisory_date": "2025-04-25", "advisory_days_public": 530, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "github.com/rancher/fleet", "ecosystem": "Go", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_15059-1.json", "ghsa": "https://github.com/advisories/GHSA-xgpc-q899-67p8", "osv": "https://osv.dev/list?q=CVE-2025-23390" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-22031", "state": "RESERVED", "public_date": "2025-04-25", "sources": "csaf,ghsa,ghsa-repos,osv", "feed_count": 4, "dates": { "ghsa": "2025-04-25", "ghsa-repos": "2025-04-25", "osv": "2025-04-25", "csaf": "2025-05-07" }, "refs": "csaf:SUSE Product Security Team\topenSUSE-SU-2025:15059-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_15059-1.json;ghsa-repos:rancher/rancher\tGHSA-8h6m-wv39-239m;ghsa:GHSA-8h6m-wv39-239m;osv:Go:github.com/rancher/rancher", "description": "Rancher users who can create Projects can gain access to arbitrary projects", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 530, "clock_known": true, "hours_public": 12720, "clock_origin": "advisory", "advisory_date": "2025-04-25", "advisory_days_public": 530, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "github.com/rancher/rancher", "ecosystem": "Go", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_15059-1.json", "ghsa": "https://github.com/advisories/GHSA-8h6m-wv39-239m", "ghsa-repos": "https://github.com/rancher/rancher/security/advisories/GHSA-8h6m-wv39-239m", "osv": "https://osv.dev/list?q=CVE-2024-22031" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-2774", "state": "RESERVED", "public_date": "2025-05-01", "sources": "csaf,zdi", "feed_count": 2, "dates": { "csaf": "2025-05-04", "zdi": "2025-05-01" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-0929\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0929.json;zdi:ZDI-25-282", "description": "CVE-2025-2774", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 524, "clock_known": true, "hours_public": 12576, "clock_origin": "advisory", "advisory_date": "2025-05-01", "advisory_days_public": 524, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0929.json", "zdi": "https://www.zerodayinitiative.com/advisories/ZDI-25-282/" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-57391", "state": "RESERVED", "public_date": "2025-05-12", "sources": "jvn", "feed_count": 1, "dates": { "jvn": "2025-05-12" }, "refs": "jvn:JVNDB-2025-004671", "description": "Multiple vulnerabilities in GL-MT2500 and GL-MT2500A", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 513, "clock_known": true, "hours_public": 12312, "clock_origin": "advisory", "advisory_date": "2025-05-12", "advisory_days_public": 513, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "jvn": "https://jvndb.jvn.jp/en/contents/2025/JVNDB-2025-004671.html" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-47425", "state": "RESERVED", "public_date": "2025-05-14", "sources": "ghsa,ghsa-repos", "feed_count": 2, "dates": { "ghsa": "2025-05-15", "ghsa-repos": "2025-05-14" }, "refs": "ghsa-repos:reflex-dev/reflex\tGHSA-rf8x-9mhr-49wg;ghsa:GHSA-rf8x-9mhr-49wg", "description": "Reflex vulnerable to private state fields modification", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 511, "clock_known": true, "hours_public": 12264, "clock_origin": "advisory", "advisory_date": "2025-05-14", "advisory_days_public": 511, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-rf8x-9mhr-49wg", "ghsa-repos": "https://github.com/reflex-dev/reflex/security/advisories/GHSA-rf8x-9mhr-49wg" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-55906", "state": "RESERVED", "public_date": "2025-05-18", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-05-18" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-1093\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1093.json", "description": "CVE-2024-55906", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 507, "clock_known": true, "hours_public": 12168, "clock_origin": "advisory", "advisory_date": "2025-05-18", "advisory_days_public": 507, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1093.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-32314", "state": "RESERVED", "public_date": "2025-06-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2025-06-01", "csaf": "2025-06-10" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-1291\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1291.json;osv:Android::unknown:", "description": "In ppmp_protect_buf of drm_fw.c, there is a possible memory protection issue due to a logic error in the code.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 493, "clock_known": true, "hours_public": 11832, "clock_origin": "advisory", "advisory_date": "2025-06-01", "advisory_days_public": 493, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1291.json", "osv": "https://osv.dev/list?q=CVE-2025-32314" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-32338", "state": "RESERVED", "public_date": "2025-06-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2025-06-01", "csaf": "2025-06-10" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-1291\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1291.json;osv:Android::unknown:", "description": "In nvt_flash_read of nt36xxx.c, there is a possible out of bounds write due to a heap buffer overflow.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 493, "clock_known": true, "hours_public": 11832, "clock_origin": "advisory", "advisory_date": "2025-06-01", "advisory_days_public": 493, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1291.json", "osv": "https://osv.dev/list?q=CVE-2025-32338" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-32339", "state": "RESERVED", "public_date": "2025-06-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2025-06-01", "csaf": "2025-06-10" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-1291\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1291.json;osv:Android::unknown:", "description": "In TBD of TBD, there is a possible out of bounds write due to a missing bounds check.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 493, "clock_known": true, "hours_public": 11832, "clock_origin": "advisory", "advisory_date": "2025-06-01", "advisory_days_public": 493, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1291.json", "osv": "https://osv.dev/list?q=CVE-2025-32339" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-32315", "state": "RESERVED", "public_date": "2025-06-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2025-06-01", "csaf": "2025-06-10" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-1291\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1291.json;osv:Android::unknown:", "description": "In tbd of tbd, there is a possible lockscreen bypass due to an unusual root cause.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 493, "clock_known": true, "hours_public": 11832, "clock_origin": "advisory", "advisory_date": "2025-06-01", "advisory_days_public": 493, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1291.json", "osv": "https://osv.dev/list?q=CVE-2025-32315" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-32336", "state": "RESERVED", "public_date": "2025-06-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2025-06-01", "csaf": "2025-06-10" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-1291\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1291.json;osv:Android::unknown:", "description": "In wl_escan_handler of TBD, there is a possible out of bounds write due to a heap buffer overflow.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 493, "clock_known": true, "hours_public": 11832, "clock_origin": "advisory", "advisory_date": "2025-06-01", "advisory_days_public": 493, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1291.json", "osv": "https://osv.dev/list?q=CVE-2025-32336" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-32337", "state": "RESERVED", "public_date": "2025-06-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2025-06-01", "csaf": "2025-06-10" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-1291\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1291.json;osv:Android::unknown:", "description": "In sms_SetTpUdIe() of sms_PduCodec.cc, there is a possible out of bounds write due to a heap buffer overflow.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 493, "clock_known": true, "hours_public": 11832, "clock_origin": "advisory", "advisory_date": "2025-06-01", "advisory_days_public": 493, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1291.json", "osv": "https://osv.dev/list?q=CVE-2025-32337" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-32340", "state": "RESERVED", "public_date": "2025-06-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2025-06-01", "csaf": "2025-06-10" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-1291\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1291.json;osv:Android::unknown:", "description": "In ProtocolMiscCurrentLinkCapacityEstimate() of protocolmiscadapter.cpp, there is a possible out of bounds read due to a heap buffer overflow.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 493, "clock_known": true, "hours_public": 11832, "clock_origin": "advisory", "advisory_date": "2025-06-01", "advisory_days_public": 493, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1291.json", "osv": "https://osv.dev/list?q=CVE-2025-32340" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-26459", "state": "RESERVED", "public_date": "2025-06-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2025-06-01", "csaf": "2025-06-10" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-1291\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1291.json;osv:Android::unknown:", "description": "In SetLogicalToPhysicalSlotPortMapping::onRequest of commands.cpp, there is a possible out of bounds write due to a buffer overflow.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 493, "clock_known": true, "hours_public": 11832, "clock_origin": "advisory", "advisory_date": "2025-06-01", "advisory_days_public": 493, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1291.json", "osv": "https://osv.dev/list?q=CVE-2025-26459" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-32334", "state": "RESERVED", "public_date": "2025-06-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2025-06-01", "csaf": "2025-06-10" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-1291\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1291.json;osv:Android::unknown:", "description": "Analysis: Access Vector: Local Layer: Userland Root Causes: Heap Buffer Overflow SRS Categories: - Android Security SRS Category: Memory Safety Writeup: A stack trace alone with PoC app is insufficient to determine if this represents a genuine memory corruption vulnerability reachable by an untrusted application.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 493, "clock_known": true, "hours_public": 11832, "clock_origin": "advisory", "advisory_date": "2025-06-01", "advisory_days_public": 493, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1291.json", "osv": "https://osv.dev/list?q=CVE-2025-32334" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-26457", "state": "RESERVED", "public_date": "2025-06-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2025-06-01", "csaf": "2025-06-10" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-1291\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1291.json;osv:Android::unknown:", "description": "CVE-2025-26457", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 493, "clock_known": true, "hours_public": 11832, "clock_origin": "advisory", "advisory_date": "2025-06-01", "advisory_days_public": 493, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1291.json", "osv": "https://osv.dev/list?q=CVE-2025-26457" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-26460", "state": "RESERVED", "public_date": "2025-06-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2025-06-01", "csaf": "2025-06-10" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-1291\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1291.json;osv:Android::unknown:", "description": "In CopyDataFromFmq of common_utils.cpp, there is a possible out of bounds write due to a missing bounds check.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 493, "clock_known": true, "hours_public": 11832, "clock_origin": "advisory", "advisory_date": "2025-06-01", "advisory_days_public": 493, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1291.json", "osv": "https://osv.dev/list?q=CVE-2025-26460" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-27230", "state": "RESERVED", "public_date": "2025-06-02", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-06-02" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-1224\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1224.json", "description": "CVE-2025-27230", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 492, "clock_known": true, "hours_public": 11808, "clock_origin": "advisory", "advisory_date": "2025-06-02", "advisory_days_public": 492, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1224.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-21486", "state": "RESERVED", "public_date": "2025-06-03", "sources": "ghsa,ghsa-repos,osv", "feed_count": 3, "dates": { "ghsa": "2025-06-05", "ghsa-repos": "2025-06-03", "osv": "2025-06-05" }, "refs": "ghsa-repos:denoland/deno\tGHSA-jv4x-jv3h-qff5;ghsa:GHSA-jv4x-jv3h-qff5;osv:crates.io:deno", "description": "Deno vulnerable to Exposure of Sensitive Information to an Unauthorized Actor", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 491, "clock_known": true, "hours_public": 11784, "clock_origin": "advisory", "advisory_date": "2025-06-03", "advisory_days_public": 491, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "deno", "ecosystem": "crates.io", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-jv4x-jv3h-qff5", "ghsa-repos": "https://github.com/denoland/deno/security/advisories/GHSA-jv4x-jv3h-qff5", "osv": "https://osv.dev/list?q=CVE-2024-21486" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-51538", "state": "RESERVED", "public_date": "2025-06-03", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-06-03" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-1236\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1236.json", "description": "CVE-2024-51538", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 491, "clock_known": true, "hours_public": 11784, "clock_origin": "advisory", "advisory_date": "2025-06-03", "advisory_days_public": 491, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1236.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-5293", "state": "RESERVED", "public_date": "2025-06-04", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-06-04" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-1243\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1243.json", "description": "CVE-2025-5293", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 490, "clock_known": true, "hours_public": 11760, "clock_origin": "advisory", "advisory_date": "2025-06-04", "advisory_days_public": 490, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1243.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-22485", "state": "RESERVED", "public_date": "2025-06-09", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-06-09" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-1272\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1272.json", "description": "CVE-2025-22485", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 485, "clock_known": true, "hours_public": 11640, "clock_origin": "advisory", "advisory_date": "2025-06-09", "advisory_days_public": 485, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1272.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-32335", "state": "RESERVED", "public_date": "2025-06-10", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2025-12-01", "csaf": "2025-06-10" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-1291\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1291.json;osv:Android::unknown:", "description": "In convertHalTDToRil of commands.cpp, there is a possible out of bounds write due to a buffer overflow.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 484, "clock_known": true, "hours_public": 11616, "clock_origin": "advisory", "advisory_date": "2025-06-10", "advisory_days_public": 484, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1291.json", "osv": "https://osv.dev/list?q=CVE-2025-32335" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-47100", "state": "RESERVED", "public_date": "2025-06-10", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-06-10" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-1285\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1285.json", "description": "CVE-2025-47100", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 484, "clock_known": true, "hours_public": 11616, "clock_origin": "advisory", "advisory_date": "2025-06-10", "advisory_days_public": 484, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1285.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-49512", "state": "RESERVED", "public_date": "2025-06-17", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-06-17" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-1353\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1353.json", "description": "CVE-2025-49512", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 477, "clock_known": true, "hours_public": 11448, "clock_origin": "advisory", "advisory_date": "2025-06-17", "advisory_days_public": 477, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1353.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-49513", "state": "RESERVED", "public_date": "2025-06-17", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-06-17" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-1353\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1353.json", "description": "CVE-2025-49513", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 477, "clock_known": true, "hours_public": 11448, "clock_origin": "advisory", "advisory_date": "2025-06-17", "advisory_days_public": 477, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1353.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-49514", "state": "RESERVED", "public_date": "2025-06-17", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-06-17" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-1353\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1353.json", "description": "CVE-2025-49514", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 477, "clock_known": true, "hours_public": 11448, "clock_origin": "advisory", "advisory_date": "2025-06-17", "advisory_days_public": 477, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1353.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-49515", "state": "RESERVED", "public_date": "2025-06-17", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-06-17" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-1353\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1353.json", "description": "CVE-2025-49515", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 477, "clock_known": true, "hours_public": 11448, "clock_origin": "advisory", "advisory_date": "2025-06-17", "advisory_days_public": 477, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1353.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-49516", "state": "RESERVED", "public_date": "2025-06-17", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-06-17" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-1353\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1353.json", "description": "CVE-2025-49516", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 477, "clock_known": true, "hours_public": 11448, "clock_origin": "advisory", "advisory_date": "2025-06-17", "advisory_days_public": 477, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1353.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-49517", "state": "RESERVED", "public_date": "2025-06-17", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-06-17" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-1353\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1353.json", "description": "CVE-2025-49517", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 477, "clock_known": true, "hours_public": 11448, "clock_origin": "advisory", "advisory_date": "2025-06-17", "advisory_days_public": 477, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1353.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-49518", "state": "RESERVED", "public_date": "2025-06-17", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-06-17" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-1353\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1353.json", "description": "CVE-2025-49518", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 477, "clock_known": true, "hours_public": 11448, "clock_origin": "advisory", "advisory_date": "2025-06-17", "advisory_days_public": 477, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1353.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-56920", "state": "RESERVED", "public_date": "2025-06-24", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-06-24" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-1384\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1384.json", "description": "CVE-2024-56920", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 470, "clock_known": true, "hours_public": 11280, "clock_origin": "advisory", "advisory_date": "2025-06-24", "advisory_days_public": 470, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1384.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-6809", "state": "RESERVED", "public_date": "2025-06-27", "sources": "zdi", "feed_count": 1, "dates": { "zdi": "2025-06-27" }, "refs": "zdi:ZDI-25-466", "description": "ZDI advisory ZDI-25-466", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 467, "clock_known": true, "hours_public": 11208, "clock_origin": "advisory", "advisory_date": "2025-06-27", "advisory_days_public": 467, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "zdi": "https://www.zerodayinitiative.com/advisories/ZDI-25-466/" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-6808", "state": "RESERVED", "public_date": "2025-06-27", "sources": "zdi", "feed_count": 1, "dates": { "zdi": "2025-06-27" }, "refs": "zdi:ZDI-25-465", "description": "ZDI advisory ZDI-25-465", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 467, "clock_known": true, "hours_public": 11208, "clock_origin": "advisory", "advisory_date": "2025-06-27", "advisory_days_public": 467, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "zdi": "https://www.zerodayinitiative.com/advisories/ZDI-25-465/" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-22436", "state": "RESERVED", "public_date": "2025-07-07", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-07-07" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-1476\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1476.json", "description": "CVE-2025-22436", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 457, "clock_known": true, "hours_public": 10968, "clock_origin": "advisory", "advisory_date": "2025-07-07", "advisory_days_public": 457, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1476.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-26433", "state": "RESERVED", "public_date": "2025-07-07", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-07-07" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-1476\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1476.json", "description": "CVE-2025-26433", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 457, "clock_known": true, "hours_public": 10968, "clock_origin": "advisory", "advisory_date": "2025-07-07", "advisory_days_public": 457, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1476.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-6812", "state": "RESERVED", "public_date": "2025-07-07", "sources": "zdi", "feed_count": 1, "dates": { "zdi": "2025-07-07" }, "refs": "zdi:ZDI-25-473", "description": "ZDI advisory ZDI-25-473", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 457, "clock_known": true, "hours_public": 10968, "clock_origin": "advisory", "advisory_date": "2025-07-07", "advisory_days_public": 457, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "zdi": "https://www.zerodayinitiative.com/advisories/ZDI-25-473/" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-36350", "state": "RESERVED", "public_date": "2025-07-08", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-07-08" }, "refs": "csaf:Nationaal Cyber Security Centrum\tNCSC-2025-0213\thttps://advisories.ncsc.nl/csaf/v2/2025/ncsc-2025-0213.json", "description": "CVE-2025-36350", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 456, "clock_known": true, "hours_public": 10944, "clock_origin": "advisory", "advisory_date": "2025-07-08", "advisory_days_public": 456, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://advisories.ncsc.nl/csaf/v2/2025/ncsc-2025-0213.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-7041", "state": "RESERVED", "public_date": "2025-07-08", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-07-08" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-1504\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1504.json", "description": "CVE-2025-7041", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 456, "clock_known": true, "hours_public": 10944, "clock_origin": "advisory", "advisory_date": "2025-07-08", "advisory_days_public": 456, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1504.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-6243", "state": "RESERVED", "public_date": "2025-07-08", "sources": "certcc", "feed_count": 1, "dates": { "certcc": "2025-07-08" }, "refs": "certcc:VU#613753", "description": "RUCKUS Virtual SmartZone (vSZ) and RUCKUS Network Director (RND) contain multiple vulnerabilities", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 456, "clock_known": true, "hours_public": 10944, "clock_origin": "advisory", "advisory_date": "2025-07-08", "advisory_days_public": 456, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "certcc": "https://www.kb.cert.org/vuls/id/613753" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-2790", "state": "RESERVED", "public_date": "2025-07-11", "sources": "zdi", "feed_count": 1, "dates": { "zdi": "2025-07-11" }, "refs": "zdi:ZDI-25-590", "description": "ZDI advisory ZDI-25-590", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 453, "clock_known": true, "hours_public": 10872, "clock_origin": "advisory", "advisory_date": "2025-07-11", "advisory_days_public": 453, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "zdi": "https://www.zerodayinitiative.com/advisories/ZDI-25-590/" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-33143", "state": "RESERVED", "public_date": "2025-07-29", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-07-29" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-1675\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1675.json", "description": "CVE-2025-33143", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 435, "clock_known": true, "hours_public": 10440, "clock_origin": "advisory", "advisory_date": "2025-07-29", "advisory_days_public": 435, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1675.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-8389", "state": "RESERVED", "public_date": "2025-07-30", "sources": "zdi", "feed_count": 1, "dates": { "zdi": "2025-07-30" }, "refs": "zdi:ZDI-25-732", "description": "ZDI advisory ZDI-25-732", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 434, "clock_known": true, "hours_public": 10416, "clock_origin": "advisory", "advisory_date": "2025-07-30", "advisory_days_public": 434, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "zdi": "https://www.zerodayinitiative.com/advisories/ZDI-25-732/" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-3132", "state": "RESERVED", "public_date": "2025-07-30", "sources": "zdi", "feed_count": 1, "dates": { "zdi": "2025-07-30" }, "refs": "zdi:ZDI-25-730", "description": "ZDI advisory ZDI-25-730", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 434, "clock_known": true, "hours_public": 10416, "clock_origin": "advisory", "advisory_date": "2025-07-30", "advisory_days_public": 434, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "zdi": "https://www.zerodayinitiative.com/advisories/ZDI-25-730/" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-41419", "state": "RESERVED", "public_date": "2025-07-31", "sources": "ghsa,ghsa-repos,osv", "feed_count": 3, "dates": { "ghsa": "2025-07-31", "ghsa-repos": "2025-07-31", "osv": "2025-07-31" }, "refs": "ghsa-repos:modelscope/ms-swift\tGHSA-7c78-rm87-5673;ghsa:GHSA-7c78-rm87-5673;osv:PyPI:ms-swift", "description": "MS SWIFT WEB-UI RCE Vulnerability", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 433, "clock_known": true, "hours_public": 10392, "clock_origin": "advisory", "advisory_date": "2025-07-31", "advisory_days_public": 433, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "ms-swift", "ecosystem": "PyPI", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-7c78-rm87-5673", "ghsa-repos": "https://github.com/modelscope/ms-swift/security/advisories/GHSA-7c78-rm87-5673", "osv": "https://osv.dev/list?q=CVE-2025-41419" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-43867", "state": "RESERVED", "public_date": "2025-08-07", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-08-07" }, "refs": "csaf:CISA\tICSA-25-219-02\thttps://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2025/icsa-25-219-02.json", "description": "Johnson Controls FX Server, FX80 and FX90 (Update A)", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 426, "clock_known": true, "hours_public": 10224, "clock_origin": "advisory", "advisory_date": "2025-08-07", "advisory_days_public": 426, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2025/icsa-25-219-02.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-53697", "state": "RESERVED", "public_date": "2025-08-12", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-08-12" }, "refs": "csaf:CISA\tICSA-25-224-02\thttps://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2025/icsa-25-224-02.json", "description": "Johnson Controls iSTAR Ultra, iSTAR Ultra SE, iSTAR Ultra G2, iSTAR Ultra G2 SE, iSTAR Edge G2 (Update A)", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 421, "clock_known": true, "hours_public": 10104, "clock_origin": "advisory", "advisory_date": "2025-08-12", "advisory_days_public": 421, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2025/icsa-25-224-02.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-53698", "state": "RESERVED", "public_date": "2025-08-12", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-08-12" }, "refs": "csaf:CISA\tICSA-25-224-02\thttps://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2025/icsa-25-224-02.json", "description": "Johnson Controls iSTAR Ultra, iSTAR Ultra SE, iSTAR Ultra G2, iSTAR Ultra G2 SE, iSTAR Edge G2 (Update A)", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 421, "clock_known": true, "hours_public": 10104, "clock_origin": "advisory", "advisory_date": "2025-08-12", "advisory_days_public": 421, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2025/icsa-25-224-02.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-53699", "state": "RESERVED", "public_date": "2025-08-12", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-08-12" }, "refs": "csaf:CISA\tICSA-25-224-02\thttps://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2025/icsa-25-224-02.json", "description": "Johnson Controls iSTAR Ultra, iSTAR Ultra SE, iSTAR Ultra G2, iSTAR Ultra G2 SE, iSTAR Edge G2 (Update A)", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 421, "clock_known": true, "hours_public": 10104, "clock_origin": "advisory", "advisory_date": "2025-08-12", "advisory_days_public": 421, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2025/icsa-25-224-02.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-53700", "state": "RESERVED", "public_date": "2025-08-12", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-08-12" }, "refs": "csaf:CISA\tICSA-25-224-02\thttps://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2025/icsa-25-224-02.json", "description": "Johnson Controls iSTAR Ultra, iSTAR Ultra SE, iSTAR Ultra G2, iSTAR Ultra G2 SE, iSTAR Edge G2 (Update A)", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 421, "clock_known": true, "hours_public": 10104, "clock_origin": "advisory", "advisory_date": "2025-08-12", "advisory_days_public": 421, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2025/icsa-25-224-02.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-21965", "state": "RESERVED", "public_date": "2025-08-12", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-08-12" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-1770\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1770.json", "description": "CVE-2024-21965", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 421, "clock_known": true, "hours_public": 10104, "clock_origin": "advisory", "advisory_date": "2025-08-12", "advisory_days_public": 421, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1770.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-36312", "state": "RESERVED", "public_date": "2025-08-12", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-08-12" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-1767\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1767.json", "description": "CVE-2024-36312", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 421, "clock_known": true, "hours_public": 10104, "clock_origin": "advisory", "advisory_date": "2025-08-12", "advisory_days_public": 421, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1767.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-8094", "state": "RESERVED", "public_date": "2025-08-12", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-08-12" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-1816\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1816.json", "description": "CVE-2025-8094", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 421, "clock_known": true, "hours_public": 10104, "clock_origin": "advisory", "advisory_date": "2025-08-12", "advisory_days_public": 421, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1816.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-52617", "state": "RESERVED", "public_date": "2025-08-17", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-08-17" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-1854\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1854.json", "description": "CVE-2025-52617", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 416, "clock_known": true, "hours_public": 9984, "clock_origin": "advisory", "advisory_date": "2025-08-17", "advisory_days_public": 416, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1854.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2023-6031", "state": "RESERVED", "public_date": "2025-08-18", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-08-18" }, "refs": "csaf:SUSE Product Security Team\topenSUSE-SU-2025:15458-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_15458-1.json", "description": "CVE-2023-6031", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 415, "clock_known": true, "hours_public": 9960, "clock_origin": "advisory", "advisory_date": "2025-08-18", "advisory_days_public": 415, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_15458-1.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-53016", "state": "RESERVED", "public_date": "2025-08-19", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2025-08-19" }, "refs": "ghsa-repos:discourse/discourse\tGHSA-48h6-hpp2-357h", "description": "discourse/discourse repository advisory GHSA-48h6-hpp2-357h", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 414, "clock_known": true, "hours_public": 9936, "clock_origin": "advisory", "advisory_date": "2025-08-19", "advisory_days_public": 414, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/discourse/discourse/security/advisories/GHSA-48h6-hpp2-357h" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-9037", "state": "RESERVED", "public_date": "2025-08-19", "sources": "certcc", "feed_count": 1, "dates": { "certcc": "2025-08-19" }, "refs": "certcc:VU#706118", "description": "Workhorse Software Services, Inc. software prior to version 1.9.4.48019, default deployment is vulnerable to multiple issues.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 414, "clock_known": true, "hours_public": 9936, "clock_origin": "advisory", "advisory_date": "2025-08-19", "advisory_days_public": 414, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "certcc": "https://www.kb.cert.org/vuls/id/706118" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-9040", "state": "RESERVED", "public_date": "2025-08-19", "sources": "certcc", "feed_count": 1, "dates": { "certcc": "2025-08-19" }, "refs": "certcc:VU#706118", "description": "Workhorse Software Services, Inc. software prior to version 1.9.4.48019, default deployment is vulnerable to multiple issues.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 414, "clock_known": true, "hours_public": 9936, "clock_origin": "advisory", "advisory_date": "2025-08-19", "advisory_days_public": 414, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "certcc": "https://www.kb.cert.org/vuls/id/706118" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-9141", "state": "RESERVED", "public_date": "2025-08-20", "sources": "csaf,ghsa,ghsa-repos,osv,redhat", "feed_count": 5, "dates": { "ghsa": "2025-08-21", "ghsa-repos": "2025-08-20", "redhat": "2025-08-20", "osv": "2025-08-21", "csaf": "2025-08-20" }, "refs": "csaf:Red Hat Product Security\tCVE-2025-9141\thttps://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-9141.json;ghsa-repos:vllm-project/vllm\tGHSA-79j6-g2m3-jgfw;ghsa:GHSA-79j6-g2m3-jgfw;osv:PyPI:vllm;redhat:CVE-2025-9141", "description": "vLLM has remote code execution vulnerability in the tool call parser for Qwen3-Coder", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 413, "clock_known": true, "hours_public": 9912, "clock_origin": "advisory", "advisory_date": "2025-08-20", "advisory_days_public": 413, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "vllm", "ecosystem": "PyPI", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-9141.json", "ghsa": "https://github.com/advisories/GHSA-79j6-g2m3-jgfw", "ghsa-repos": "https://github.com/vllm-project/vllm/security/advisories/GHSA-79j6-g2m3-jgfw", "osv": "https://osv.dev/list?q=CVE-2025-9141", "redhat": "https://access.redhat.com/security/cve/CVE-2025-9141" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-11058", "state": "RESERVED", "public_date": "2025-08-26", "sources": "csaf,ghsa,osv", "feed_count": 3, "dates": { "ghsa": "2025-08-26", "osv": "2025-08-26", "csaf": "2025-08-26" }, "refs": "csaf:Red Hat Product Security\tCVE-2025-11058\thttps://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-11058.json;ghsa:GHSA-cfmv-h8fx-85m7;osv:PyPI:xml2rfc", "description": "xml2rfc has an arbitrary file read vulnerability", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 407, "clock_known": true, "hours_public": 9768, "clock_origin": "advisory", "advisory_date": "2025-08-26", "advisory_days_public": 407, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "xml2rfc", "ecosystem": "PyPI", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-11058.json", "ghsa": "https://github.com/advisories/GHSA-cfmv-h8fx-85m7", "osv": "https://osv.dev/list?q=CVE-2025-11058" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-36910", "state": "RESERVED", "public_date": "2025-09-01", "sources": "osv", "feed_count": 1, "dates": { "osv": "2025-09-01" }, "refs": "osv:Android::unknown:", "description": "In hw_oem_imei_init of hw_oem_imei.c, there is a possible escalation of privilege due to hardware identifiers not being fused to OTP. This could lead to local escalation of privilege with no additional execution privileges needed.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 401, "clock_known": true, "hours_public": 9624, "clock_origin": "advisory", "advisory_date": "2025-09-01", "advisory_days_public": 401, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2025-36910" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-32344", "state": "RESERVED", "public_date": "2025-09-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2025-09-01", "csaf": "2025-09-03" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-1964\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1964.json;osv:Android::unknown:", "description": "In SimUpdatePbEntry::encode of simdata.cpp, there is a possible out of bounds write due to a heap buffer overflow.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 401, "clock_known": true, "hours_public": 9624, "clock_origin": "advisory", "advisory_date": "2025-09-01", "advisory_days_public": 401, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1964.json", "osv": "https://osv.dev/list?q=CVE-2025-32344" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-32342", "state": "RESERVED", "public_date": "2025-09-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2025-09-01", "csaf": "2025-09-03" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-1964\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1964.json;osv:Android::unknown:", "description": "In CopyDataFromFmq of common_utils.cpp, there is a possible out of bounds write due to improper input validation.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 401, "clock_known": true, "hours_public": 9624, "clock_origin": "advisory", "advisory_date": "2025-09-01", "advisory_days_public": 401, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1964.json", "osv": "https://osv.dev/list?q=CVE-2025-32342" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-32343", "state": "RESERVED", "public_date": "2025-09-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2025-09-01", "csaf": "2025-09-03" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-1964\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1964.json;osv:Android::unknown:", "description": "In CopyDataFromFmq of common_utils.cpp, there is a possible out of bounds write due to an integer overflow.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 401, "clock_known": true, "hours_public": 9624, "clock_origin": "advisory", "advisory_date": "2025-09-01", "advisory_days_public": 401, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1964.json", "osv": "https://osv.dev/list?q=CVE-2025-32343" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-11059", "state": "RESERVED", "public_date": "2025-09-10", "sources": "csaf,ghsa,osv", "feed_count": 3, "dates": { "ghsa": "2025-09-10", "osv": "2025-09-10", "csaf": "2025-09-10" }, "refs": "csaf:Red Hat Product Security\tCVE-2025-11059\thttps://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-11059.json;ghsa:GHSA-9mv7-3c64-mmqw;osv:PyPI:xml2rfc", "description": "xml2rfc is vulnerable to arbitrary file reads through prepped files", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 392, "clock_known": true, "hours_public": 9408, "clock_origin": "advisory", "advisory_date": "2025-09-10", "advisory_days_public": 392, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "xml2rfc", "ecosystem": "PyPI", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-11059.json", "ghsa": "https://github.com/advisories/GHSA-9mv7-3c64-mmqw", "osv": "https://osv.dev/list?q=CVE-2025-11059" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-9125", "state": "RESERVED", "public_date": "2025-09-22", "sources": "certcc", "feed_count": 1, "dates": { "certcc": "2025-09-22" }, "refs": "certcc:VU#780141", "description": "Cross-site scripting vulnerability in Lectora course navigation", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 380, "clock_known": true, "hours_public": 9120, "clock_origin": "advisory", "advisory_date": "2025-09-22", "advisory_days_public": 380, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "certcc": "https://www.kb.cert.org/vuls/id/780141" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-59688", "state": "RESERVED", "public_date": "2025-09-23", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-09-23" }, "refs": "csaf:SUSE Product Security Team\topenSUSE-SU-2025:15572-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_15572-1.json", "description": "CVE-2025-59688", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 379, "clock_known": true, "hours_public": 9096, "clock_origin": "advisory", "advisory_date": "2025-09-23", "advisory_days_public": 379, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_15572-1.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-27687", "state": "RESERVED", "public_date": "2025-10-01", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-10-01" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-2185\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2185.json", "description": "CVE-2025-27687", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 371, "clock_known": true, "hours_public": 8904, "clock_origin": "advisory", "advisory_date": "2025-10-01", "advisory_days_public": 371, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2185.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-61620", "state": "RESERVED", "public_date": "2025-10-07", "sources": "csaf,ghsa,ghsa-repos,osv,redhat", "feed_count": 5, "dates": { "ghsa": "2025-10-07", "ghsa-repos": "2025-10-07", "redhat": "2025-10-08", "osv": "2025-10-07", "csaf": "2026-02-27" }, "refs": "csaf:Red Hat Product Security\tRHSA-2026:3462\thttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3462.json;ghsa-repos:vllm-project/vllm\tGHSA-6fvq-23cw-5628;ghsa:GHSA-6fvq-23cw-5628;osv:PyPI:vllm;redhat:CVE-2025-61620", "description": "vLLM: Resource-Exhaustion (DoS) through Malicious Jinja Template in OpenAI-Compatible Server", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 365, "clock_known": true, "hours_public": 8760, "clock_origin": "advisory", "advisory_date": "2025-10-07", "advisory_days_public": 365, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "vllm", "ecosystem": "PyPI", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3462.json", "ghsa": "https://github.com/advisories/GHSA-6fvq-23cw-5628", "ghsa-repos": "https://github.com/vllm-project/vllm/security/advisories/GHSA-6fvq-23cw-5628", "osv": "https://osv.dev/list?q=CVE-2025-61620", "redhat": "https://access.redhat.com/security/cve/CVE-2025-61620" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-62704", "state": "RESERVED", "public_date": "2025-10-20", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-10-20" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-2341\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2341.json", "description": "CVE-2025-62704", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 352, "clock_known": true, "hours_public": 8448, "clock_origin": "advisory", "advisory_date": "2025-10-20", "advisory_days_public": 352, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2341.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-57779", "state": "RESERVED", "public_date": "2025-10-25", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2025-10-25" }, "refs": "ghsa-repos:pi-hole/web\tGHSA-8hr3-47jh-25vr", "description": "pi-hole/web repository advisory GHSA-8hr3-47jh-25vr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 347, "clock_known": true, "hours_public": 8328, "clock_origin": "advisory", "advisory_date": "2025-10-25", "advisory_days_public": 347, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/pi-hole/web/security/advisories/GHSA-8hr3-47jh-25vr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-14439", "state": "RESERVED", "public_date": "2025-10-29", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-10-29" }, "refs": "csaf:Red Hat Product Security\tCVE-2025-14439\thttps://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-14439.json", "description": "usd: OpenUSD: Remote Code Execution via a specially crafted file", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 343, "clock_known": true, "hours_public": 8232, "clock_origin": "advisory", "advisory_date": "2025-10-29", "advisory_days_public": 343, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-14439.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-62768", "state": "RESERVED", "public_date": "2025-11-07", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-11-07" }, "refs": "csaf:SUSE Product Security Team\tCVE-2025-62768\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2025-62768.json", "description": "CVE-2025-62768", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 334, "clock_known": true, "hours_public": 8016, "clock_origin": "advisory", "advisory_date": "2025-11-07", "advisory_days_public": 334, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2025-62768.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-33134", "state": "RESERVED", "public_date": "2025-11-09", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-11-09" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-2532\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2532.json", "description": "CVE-2025-33134", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 332, "clock_known": true, "hours_public": 7968, "clock_origin": "advisory", "advisory_date": "2025-11-09", "advisory_days_public": 332, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2532.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-64172", "state": "RESERVED", "public_date": "2025-11-13", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2025-11-13" }, "refs": "ghsa-repos:apollographql/federation\tGHSA-m8jr-fxqx-8xx6", "description": "apollographql/federation repository advisory GHSA-m8jr-fxqx-8xx6", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 328, "clock_known": true, "hours_public": 7872, "clock_origin": "advisory", "advisory_date": "2025-11-13", "advisory_days_public": 328, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/apollographql/federation/security/advisories/GHSA-m8jr-fxqx-8xx6" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-62769", "state": "RESERVED", "public_date": "2025-11-14", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-11-14" }, "refs": "csaf:SUSE Product Security Team\tSUSE-SU-2025:4100-1\thttps://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_4100-1.json", "description": "CVE-2025-62769", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 327, "clock_known": true, "hours_public": 7848, "clock_origin": "advisory", "advisory_date": "2025-11-14", "advisory_days_public": 327, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_4100-1.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-13207", "state": "RESERVED", "public_date": "2025-11-20", "sources": "certcc", "feed_count": 1, "dates": { "certcc": "2025-11-20" }, "refs": "certcc:VU#268029", "description": "Tenda N300 Wi-Fi 4G LTE Router 4G03 Pro impacted by vulnerabilities", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 321, "clock_known": true, "hours_public": 7704, "clock_origin": "advisory", "advisory_date": "2025-11-20", "advisory_days_public": 321, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "certcc": "https://www.kb.cert.org/vuls/id/268029" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-24481", "state": "RESERVED", "public_date": "2025-11-20", "sources": "certcc", "feed_count": 1, "dates": { "certcc": "2025-11-20" }, "refs": "certcc:VU#268029", "description": "Tenda N300 Wi-Fi 4G LTE Router 4G03 Pro impacted by vulnerabilities", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 321, "clock_known": true, "hours_public": 7704, "clock_origin": "advisory", "advisory_date": "2025-11-20", "advisory_days_public": 321, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "certcc": "https://www.kb.cert.org/vuls/id/268029" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-66288", "state": "RESERVED", "public_date": "2025-11-25", "sources": "zdi", "feed_count": 1, "dates": { "zdi": "2025-11-25" }, "refs": "zdi:ZDI-25-1015", "description": "ZDI advisory ZDI-25-1015", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 316, "clock_known": true, "hours_public": 7584, "clock_origin": "advisory", "advisory_date": "2025-11-25", "advisory_days_public": 316, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "zdi": "https://www.zerodayinitiative.com/advisories/ZDI-25-1015/" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-13402", "state": "RESERVED", "public_date": "2025-11-27", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-11-27" }, "refs": "csaf:SUSE Product Security Team\topenSUSE-SU-2025:20116-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_20116-1.json", "description": "CVE-2025-13402", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 314, "clock_known": true, "hours_public": 7536, "clock_origin": "advisory", "advisory_date": "2025-11-27", "advisory_days_public": 314, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_20116-1.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-57736", "state": "RESERVED", "public_date": "2025-12-09", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-12-09" }, "refs": "csaf:SUSE Product Security Team\topenSUSE-SU-2025:15803-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_15803-1.json", "description": "CVE-2025-57736", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 302, "clock_known": true, "hours_public": 7248, "clock_origin": "advisory", "advisory_date": "2025-12-09", "advisory_days_public": 302, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_15803-1.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-64874", "state": "RESERVED", "public_date": "2025-12-09", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-12-09" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-2789\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2789.json", "description": "CVE-2025-64874", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 302, "clock_known": true, "hours_public": 7248, "clock_origin": "advisory", "advisory_date": "2025-12-09", "advisory_days_public": 302, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2789.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-64540", "state": "RESERVED", "public_date": "2025-12-10", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-12-10" }, "refs": "csaf:Nationaal Cyber Security Centrum\tNCSC-2025-0389\thttps://advisories.ncsc.nl/csaf/v2/2025/ncsc-2025-0389.json", "description": "CVE-2025-64540", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 301, "clock_known": true, "hours_public": 7224, "clock_origin": "advisory", "advisory_date": "2025-12-10", "advisory_days_public": 301, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://advisories.ncsc.nl/csaf/v2/2025/ncsc-2025-0389.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-64552", "state": "RESERVED", "public_date": "2025-12-10", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-12-10" }, "refs": "csaf:Nationaal Cyber Security Centrum\tNCSC-2025-0389\thttps://advisories.ncsc.nl/csaf/v2/2025/ncsc-2025-0389.json", "description": "CVE-2025-64552", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 301, "clock_known": true, "hours_public": 7224, "clock_origin": "advisory", "advisory_date": "2025-12-10", "advisory_days_public": 301, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://advisories.ncsc.nl/csaf/v2/2025/ncsc-2025-0389.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-64860", "state": "RESERVED", "public_date": "2025-12-10", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-12-10" }, "refs": "csaf:Nationaal Cyber Security Centrum\tNCSC-2025-0389\thttps://advisories.ncsc.nl/csaf/v2/2025/ncsc-2025-0389.json", "description": "CVE-2025-64860", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 301, "clock_known": true, "hours_public": 7224, "clock_origin": "advisory", "advisory_date": "2025-12-10", "advisory_days_public": 301, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://advisories.ncsc.nl/csaf/v2/2025/ncsc-2025-0389.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-14400", "state": "RESERVED", "public_date": "2025-12-10", "sources": "zdi", "feed_count": 1, "dates": { "zdi": "2025-12-10" }, "refs": "zdi:ZDI-25-1061", "description": "ZDI advisory ZDI-25-1061", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 301, "clock_known": true, "hours_public": 7224, "clock_origin": "advisory", "advisory_date": "2025-12-10", "advisory_days_public": 301, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "zdi": "https://www.zerodayinitiative.com/advisories/ZDI-25-1061/" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-43874", "state": "RESERVED", "public_date": "2025-12-11", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-12-11" }, "refs": "csaf:CISA\tICSA-25-345-02\thttps://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2025/icsa-25-345-02.json", "description": "Johnson Controls iSTAR Ultra", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 300, "clock_known": true, "hours_public": 7200, "clock_origin": "advisory", "advisory_date": "2025-12-11", "advisory_days_public": 300, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2025/icsa-25-345-02.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-46681", "state": "RESERVED", "public_date": "2025-12-15", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-12-15" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-2856\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2856.json", "description": "CVE-2025-46681", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 296, "clock_known": true, "hours_public": 7104, "clock_origin": "advisory", "advisory_date": "2025-12-15", "advisory_days_public": 296, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2856.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-67854", "state": "RESERVED", "public_date": "2025-12-15", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-12-15" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-2851\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2851.json", "description": "CVE-2025-67854", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 296, "clock_known": true, "hours_public": 7104, "clock_origin": "advisory", "advisory_date": "2025-12-15", "advisory_days_public": 296, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2851.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-66475", "state": "RESERVED", "public_date": "2025-12-16", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-12-16" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-2865\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2865.json", "description": "CVE-2025-66475", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 295, "clock_known": true, "hours_public": 7080, "clock_origin": "advisory", "advisory_date": "2025-12-16", "advisory_days_public": 295, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2865.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-57779", "state": "RESERVED", "public_date": "2025-12-24", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-12-24" }, "refs": "csaf:Nationaal Cyber Security Centrum\tNCSC-2025-0401\thttps://advisories.ncsc.nl/csaf/v2/2025/ncsc-2025-0401.json", "description": "CVE-2025-57779", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 287, "clock_known": true, "hours_public": 6888, "clock_origin": "advisory", "advisory_date": "2025-12-24", "advisory_days_public": 287, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://advisories.ncsc.nl/csaf/v2/2025/ncsc-2025-0401.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-58085", "state": "RESERVED", "public_date": "2025-12-24", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-12-24" }, "refs": "csaf:Nationaal Cyber Security Centrum\tNCSC-2025-0401\thttps://advisories.ncsc.nl/csaf/v2/2025/ncsc-2025-0401.json", "description": "CVE-2025-58085", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 287, "clock_known": true, "hours_public": 6888, "clock_origin": "advisory", "advisory_date": "2025-12-24", "advisory_days_public": 287, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://advisories.ncsc.nl/csaf/v2/2025/ncsc-2025-0401.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-59488", "state": "RESERVED", "public_date": "2025-12-24", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-12-24" }, "refs": "csaf:Nationaal Cyber Security Centrum\tNCSC-2025-0401\thttps://advisories.ncsc.nl/csaf/v2/2025/ncsc-2025-0401.json", "description": "CVE-2025-59488", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 287, "clock_known": true, "hours_public": 6888, "clock_origin": "advisory", "advisory_date": "2025-12-24", "advisory_days_public": 287, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://advisories.ncsc.nl/csaf/v2/2025/ncsc-2025-0401.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-67326", "state": "RESERVED", "public_date": "2025-12-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-12-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-2923\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2923.json", "description": "CVE-2025-67326", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 283, "clock_known": true, "hours_public": 6792, "clock_origin": "advisory", "advisory_date": "2025-12-28", "advisory_days_public": 283, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2923.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-67327", "state": "RESERVED", "public_date": "2025-12-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-12-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-2923\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2923.json", "description": "CVE-2025-67327", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 283, "clock_known": true, "hours_public": 6792, "clock_origin": "advisory", "advisory_date": "2025-12-28", "advisory_days_public": 283, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2923.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-67328", "state": "RESERVED", "public_date": "2025-12-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-12-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-2923\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2923.json", "description": "CVE-2025-67328", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 283, "clock_known": true, "hours_public": 6792, "clock_origin": "advisory", "advisory_date": "2025-12-28", "advisory_days_public": 283, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2923.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-67329", "state": "RESERVED", "public_date": "2025-12-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2025-12-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2025-2923\thttps://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2923.json", "description": "CVE-2025-67329", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 283, "clock_known": true, "hours_public": 6792, "clock_origin": "advisory", "advisory_date": "2025-12-28", "advisory_days_public": 283, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2923.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-65606", "state": "RESERVED", "public_date": "2026-01-06", "sources": "certcc", "feed_count": 1, "dates": { "certcc": "2026-01-06" }, "refs": "certcc:VU#295169", "description": "TOTOLINK EX200 firmware-upload error handling can activate an unauthenticated root telnet service", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 274, "clock_known": true, "hours_public": 6576, "clock_origin": "advisory", "advisory_date": "2026-01-06", "advisory_days_public": 274, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "certcc": "https://www.kb.cert.org/vuls/id/295169" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-13328", "state": "RESERVED", "public_date": "2026-01-15", "sources": "certcc", "feed_count": 1, "dates": { "certcc": "2026-01-15" }, "refs": "certcc:VU#472136", "description": "Information Leak and DoS Vulnerabilities in Redmi Buds 3 Pro through 6 Pro", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 265, "clock_known": true, "hours_public": 6360, "clock_origin": "advisory", "advisory_date": "2026-01-15", "advisory_days_public": 265, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "certcc": "https://www.kb.cert.org/vuls/id/472136" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-13834", "state": "RESERVED", "public_date": "2026-01-15", "sources": "certcc", "feed_count": 1, "dates": { "certcc": "2026-01-15" }, "refs": "certcc:VU#472136", "description": "Information Leak and DoS Vulnerabilities in Redmi Buds 3 Pro through 6 Pro", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 265, "clock_known": true, "hours_public": 6360, "clock_origin": "advisory", "advisory_date": "2026-01-15", "advisory_days_public": 265, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "certcc": "https://www.kb.cert.org/vuls/id/472136" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-31884", "state": "RESERVED", "public_date": "2026-01-20", "sources": "alas,csaf,debian,ghsa-repos,redhat", "feed_count": 5, "dates": { "alas": "2026-01-22", "ghsa-repos": "2026-01-21", "redhat": "2026-01-20", "csaf": "2026-02-17" }, "refs": "alas:CVE-2024-31884;csaf:Red Hat Product Security\tRHSA-2026:2769\thttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2769.json;debian:ceph;ghsa-repos:ceph/ceph\tGHSA-xj9f-7g59-m4jx;redhat:CVE-2024-31884", "description": "A vulnerability was found in how Ceph uses Pybind, which does not implement correct certificate checking.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 260, "clock_known": true, "hours_public": 6240, "clock_origin": "advisory", "advisory_date": "2026-01-20", "advisory_days_public": 260, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "ceph", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2024-31884.html", "csaf": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2769.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2024-31884", "ghsa-repos": "https://github.com/ceph/ceph/security/advisories/GHSA-xj9f-7g59-m4jx", "redhat": "https://access.redhat.com/security/cve/CVE-2024-31884" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-65586", "state": "RESERVED", "public_date": "2026-01-20", "sources": "certcc", "feed_count": 1, "dates": { "certcc": "2026-01-20" }, "refs": "certcc:VU#481830", "description": "Libheif uncompressed codec lacks bounds check leading to application crash", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 260, "clock_known": true, "hours_public": 6240, "clock_origin": "advisory", "advisory_date": "2026-01-20", "advisory_days_public": 260, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "certcc": "https://www.kb.cert.org/vuls/id/481830" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-36297", "state": "RESERVED", "public_date": "2026-01-27", "sources": "broadcom", "feed_count": 1, "dates": { "broadcom": "2026-01-27" }, "refs": "broadcom:36820", "description": "Multiple Linux Security Updates applied to Brocade Fabric OS 10.0", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 253, "clock_known": true, "hours_public": 6072, "clock_origin": "advisory", "advisory_date": "2026-01-27", "advisory_days_public": 253, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "broadcom": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36820" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-65852", "state": "RESERVED", "public_date": "2026-02-06", "sources": "ghsa,ghsa-repos,osv", "feed_count": 3, "dates": { "ghsa": "2026-02-06", "ghsa-repos": "2026-02-06", "osv": "2026-02-06" }, "refs": "ghsa-repos:gogs/gogs\tGHSA-rjv5-9px2-fqw6;ghsa:GHSA-rjv5-9px2-fqw6;osv:Go:gogs.io/gogs", "description": "Gogs has authorization bypass in repository deletion API", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 243, "clock_known": true, "hours_public": 5832, "clock_origin": "advisory", "advisory_date": "2026-02-06", "advisory_days_public": 243, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gogs.io/gogs", "ecosystem": "Go", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-rjv5-9px2-fqw6", "ghsa-repos": "https://github.com/gogs/gogs/security/advisories/GHSA-rjv5-9px2-fqw6", "osv": "https://osv.dev/list?q=CVE-2025-65852" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-25995", "state": "RESERVED", "public_date": "2026-02-11", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-02-11" }, "refs": "ghsa-repos:opf/openproject\tGHSA-727f-w7gp-pw84", "description": "opf/openproject repository advisory GHSA-727f-w7gp-pw84", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 238, "clock_known": true, "hours_public": 5712, "clock_origin": "advisory", "advisory_date": "2026-02-11", "advisory_days_public": 238, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/opf/openproject/security/advisories/GHSA-727f-w7gp-pw84" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-25948", "state": "RESERVED", "public_date": "2026-02-11", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-02-11" }, "refs": "ghsa-repos:opf/openproject\tGHSA-8fq7-cmmf-2793", "description": "opf/openproject repository advisory GHSA-8fq7-cmmf-2793", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 238, "clock_known": true, "hours_public": 5712, "clock_origin": "advisory", "advisory_date": "2026-02-11", "advisory_days_public": 238, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/opf/openproject/security/advisories/GHSA-8fq7-cmmf-2793" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-64441", "state": "RESERVED", "public_date": "2026-02-12", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-07-08", "csaf": "2026-02-12" }, "refs": "csaf:SUSE Product Security Team\topenSUSE-SU-2026:10189-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_10189-1.json;ghsa-repos:owncloud/security-advisories\tGHSA-rm46-prxr-79cr", "description": "owncloud/security-advisories repository advisory GHSA-rm46-prxr-79cr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 237, "clock_known": true, "hours_public": 5688, "clock_origin": "advisory", "advisory_date": "2026-02-12", "advisory_days_public": 237, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_10189-1.json", "ghsa-repos": "https://github.com/owncloud/security-advisories/security/advisories/GHSA-rm46-prxr-79cr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2023-50756", "state": "RESERVED", "public_date": "2026-02-12", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-02-12" }, "refs": "csaf:SUSE Product Security Team\tSUSE-SU-2026:0473-1\thttps://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_0473-1.json", "description": "CVE-2023-50756", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 237, "clock_known": true, "hours_public": 5688, "clock_origin": "advisory", "advisory_date": "2026-02-12", "advisory_days_public": 237, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_0473-1.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-2574", "state": "RESERVED", "public_date": "2026-02-16", "sources": "alas,csaf,debian,redhat", "feed_count": 4, "dates": { "alas": "2026-02-16", "redhat": "2026-02-16", "csaf": "2026-02-18" }, "refs": "alas:CVE-2026-2574;csaf:SUSE Product Security Team\tCVE-2026-2574\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-2574.json;debian:glib-networking;redhat:CVE-2026-2574", "description": "A flaw was found in glib-networking.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 233, "clock_known": true, "hours_public": 5592, "clock_origin": "advisory", "advisory_date": "2026-02-16", "advisory_days_public": 233, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "glib-networking", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-2574.html", "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-2574.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-2574", "redhat": "https://access.redhat.com/security/cve/CVE-2026-2574" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-27006", "state": "RESERVED", "public_date": "2026-02-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-02-18" }, "refs": "ghsa-repos:opf/openproject\tGHSA-4fvm-rrc8-mgch", "description": "opf/openproject repository advisory GHSA-4fvm-rrc8-mgch", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 231, "clock_known": true, "hours_public": 5544, "clock_origin": "advisory", "advisory_date": "2026-02-18", "advisory_days_public": 231, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/opf/openproject/security/advisories/GHSA-4fvm-rrc8-mgch" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-26976", "state": "RESERVED", "public_date": "2026-02-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-02-18" }, "refs": "ghsa-repos:opf/openproject\tGHSA-6m5j-mp2j-cgmm", "description": "opf/openproject repository advisory GHSA-6m5j-mp2j-cgmm", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 231, "clock_known": true, "hours_public": 5544, "clock_origin": "advisory", "advisory_date": "2026-02-18", "advisory_days_public": 231, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/opf/openproject/security/advisories/GHSA-6m5j-mp2j-cgmm" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-26970", "state": "RESERVED", "public_date": "2026-02-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-02-18" }, "refs": "ghsa-repos:opf/openproject\tGHSA-jrhg-mx22-57rm", "description": "opf/openproject repository advisory GHSA-jrhg-mx22-57rm", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 231, "clock_known": true, "hours_public": 5544, "clock_origin": "advisory", "advisory_date": "2026-02-18", "advisory_days_public": 231, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/opf/openproject/security/advisories/GHSA-jrhg-mx22-57rm" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-26971", "state": "RESERVED", "public_date": "2026-02-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-02-18" }, "refs": "ghsa-repos:opf/openproject\tGHSA-xh2h-jfr6-3qhc", "description": "opf/openproject repository advisory GHSA-xh2h-jfr6-3qhc", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 231, "clock_known": true, "hours_public": 5544, "clock_origin": "advisory", "advisory_date": "2026-02-18", "advisory_days_public": 231, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/opf/openproject/security/advisories/GHSA-xh2h-jfr6-3qhc" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-26969", "state": "RESERVED", "public_date": "2026-02-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-02-18" }, "refs": "ghsa-repos:opf/openproject\tGHSA-r4v5-h2fp-fhxf", "description": "opf/openproject repository advisory GHSA-r4v5-h2fp-fhxf", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 231, "clock_known": true, "hours_public": 5544, "clock_origin": "advisory", "advisory_date": "2026-02-18", "advisory_days_public": 231, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/opf/openproject/security/advisories/GHSA-r4v5-h2fp-fhxf" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-26966", "state": "RESERVED", "public_date": "2026-02-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-02-18" }, "refs": "ghsa-repos:opf/openproject\tGHSA-5m66-2gm7-6jcc", "description": "opf/openproject repository advisory GHSA-5m66-2gm7-6jcc", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 231, "clock_known": true, "hours_public": 5544, "clock_origin": "advisory", "advisory_date": "2026-02-18", "advisory_days_public": 231, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/opf/openproject/security/advisories/GHSA-5m66-2gm7-6jcc" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-26968", "state": "RESERVED", "public_date": "2026-02-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-02-18" }, "refs": "ghsa-repos:opf/openproject\tGHSA-g62r-9rgf-h53q", "description": "opf/openproject repository advisory GHSA-g62r-9rgf-h53q", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 231, "clock_known": true, "hours_public": 5544, "clock_origin": "advisory", "advisory_date": "2026-02-18", "advisory_days_public": 231, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/opf/openproject/security/advisories/GHSA-g62r-9rgf-h53q" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-27019", "state": "RESERVED", "public_date": "2026-02-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-02-18" }, "refs": "ghsa-repos:opf/openproject\tGHSA-r85w-rv9m-q784", "description": "opf/openproject repository advisory GHSA-r85w-rv9m-q784", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 231, "clock_known": true, "hours_public": 5544, "clock_origin": "advisory", "advisory_date": "2026-02-18", "advisory_days_public": 231, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/opf/openproject/security/advisories/GHSA-r85w-rv9m-q784" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-67832", "state": "RESERVED", "public_date": "2026-02-18", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-02-18" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-0461\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0461.json", "description": "CVE-2025-67832", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 231, "clock_known": true, "hours_public": 5544, "clock_origin": "advisory", "advisory_date": "2026-02-18", "advisory_days_public": 231, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0461.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-27164", "state": "RESERVED", "public_date": "2026-02-21", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-02-21", "csaf": "2026-02-22" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-0472\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0472.json;ghsa-repos:openclaw/openclaw\tGHSA-x2g4-7mj7-2hhj", "description": "openclaw/openclaw repository advisory GHSA-x2g4-7mj7-2hhj", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 228, "clock_known": true, "hours_public": 5472, "clock_origin": "advisory", "advisory_date": "2026-02-21", "advisory_days_public": 228, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0472.json", "ghsa-repos": "https://github.com/openclaw/openclaw/security/advisories/GHSA-x2g4-7mj7-2hhj" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-27165", "state": "RESERVED", "public_date": "2026-02-21", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-02-21", "csaf": "2026-02-22" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-0472\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0472.json;ghsa-repos:openclaw/openclaw\tGHSA-74xj-763f-264w", "description": "openclaw/openclaw repository advisory GHSA-74xj-763f-264w", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 228, "clock_known": true, "hours_public": 5472, "clock_origin": "advisory", "advisory_date": "2026-02-21", "advisory_days_public": 228, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0472.json", "ghsa-repos": "https://github.com/openclaw/openclaw/security/advisories/GHSA-74xj-763f-264w" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-27159", "state": "RESERVED", "public_date": "2026-02-21", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-02-21", "csaf": "2026-02-22" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-0472\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0472.json;ghsa-repos:openclaw/openclaw\tGHSA-xwcr-v472-8hhr", "description": "openclaw/openclaw repository advisory GHSA-xwcr-v472-8hhr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 228, "clock_known": true, "hours_public": 5472, "clock_origin": "advisory", "advisory_date": "2026-02-21", "advisory_days_public": 228, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0472.json", "ghsa-repos": "https://github.com/openclaw/openclaw/security/advisories/GHSA-xwcr-v472-8hhr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-27158", "state": "RESERVED", "public_date": "2026-02-21", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-02-21", "csaf": "2026-02-22" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-0472\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0472.json;ghsa-repos:openclaw/openclaw\tGHSA-2prf-9cw7-fq62", "description": "openclaw/openclaw repository advisory GHSA-2prf-9cw7-fq62", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 228, "clock_known": true, "hours_public": 5472, "clock_origin": "advisory", "advisory_date": "2026-02-21", "advisory_days_public": 228, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0472.json", "ghsa-repos": "https://github.com/openclaw/openclaw/security/advisories/GHSA-2prf-9cw7-fq62" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-27209", "state": "RESERVED", "public_date": "2026-02-21", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-02-21", "csaf": "2026-02-22" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-0472\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0472.json;ghsa-repos:openclaw/openclaw\tGHSA-65rx-fvh6-r4h2", "description": "openclaw/openclaw repository advisory GHSA-65rx-fvh6-r4h2", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 228, "clock_known": true, "hours_public": 5472, "clock_origin": "advisory", "advisory_date": "2026-02-21", "advisory_days_public": 228, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0472.json", "ghsa-repos": "https://github.com/openclaw/openclaw/security/advisories/GHSA-65rx-fvh6-r4h2" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-20140", "state": "RESERVED", "public_date": "2026-02-23", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-02-23" }, "refs": "csaf:Nationaal Cyber Security Centrum\tNCSC-2026-0068\thttps://advisories.ncsc.nl/csaf/v2/2026/ncsc-2026-0068.json", "description": "CVE-2026-20140", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 226, "clock_known": true, "hours_public": 5424, "clock_origin": "advisory", "advisory_date": "2026-02-23", "advisory_days_public": 226, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://advisories.ncsc.nl/csaf/v2/2026/ncsc-2026-0068.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-20143", "state": "RESERVED", "public_date": "2026-02-23", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-02-23" }, "refs": "csaf:Nationaal Cyber Security Centrum\tNCSC-2026-0068\thttps://advisories.ncsc.nl/csaf/v2/2026/ncsc-2026-0068.json", "description": "CVE-2026-20143", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 226, "clock_known": true, "hours_public": 5424, "clock_origin": "advisory", "advisory_date": "2026-02-23", "advisory_days_public": 226, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://advisories.ncsc.nl/csaf/v2/2026/ncsc-2026-0068.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-22802", "state": "RESERVED", "public_date": "2026-02-24", "sources": "alpine,csaf", "feed_count": 2, "dates": { "csaf": "2026-02-24" }, "refs": "alpine:cacti;csaf:SUSE Product Security Team\topenSUSE-SU-2026:10241-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_10241-1.json", "description": "CVE-2026-22802", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 225, "clock_known": true, "hours_public": 5400, "clock_origin": "advisory", "advisory_date": "2026-02-24", "advisory_days_public": 225, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "cacti", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-22802", "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_10241-1.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-39044", "state": "RESERVED", "public_date": "2026-02-25", "sources": "alas,alpine,csaf,debian", "feed_count": 4, "dates": { "alas": "2026-06-19", "csaf": "2026-02-25" }, "refs": "alas:CVE-2026-39044;alpine:gst-plugins-good;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-0525\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0525.json;debian:gst-plugins-good1.0", "description": "An integer overflow in the WAV parser (wavparse) when handling malformed WAV files with cue chunks.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 224, "clock_known": true, "hours_public": 5376, "clock_origin": "advisory", "advisory_date": "2026-02-25", "advisory_days_public": 224, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gst-plugins-good", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-39044.html", "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-39044", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0525.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-39044" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-39043", "state": "RESERVED", "public_date": "2026-02-25", "sources": "alas,alpine,csaf,debian", "feed_count": 4, "dates": { "alas": "2026-06-19", "csaf": "2026-02-25" }, "refs": "alas:CVE-2026-39043;alpine:gst-plugins-good;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-0525\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0525.json;debian:gst-plugins-good1.0", "description": "Heap buffer overflow in the Matroska (MKV) demuxer when calculating decompressed buffer sizes for bz2-compressed tracks.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 224, "clock_known": true, "hours_public": 5376, "clock_origin": "advisory", "advisory_date": "2026-02-25", "advisory_days_public": 224, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gst-plugins-good", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-39043.html", "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-39043", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0525.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-39043" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-27827", "state": "RESERVED", "public_date": "2026-02-26", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-02-26" }, "refs": "ghsa-repos:opf/openproject\tGHSA-v8cr-7x8f-78mq", "description": "opf/openproject repository advisory GHSA-v8cr-7x8f-78mq", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 223, "clock_known": true, "hours_public": 5352, "clock_origin": "advisory", "advisory_date": "2026-02-26", "advisory_days_public": 223, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/opf/openproject/security/advisories/GHSA-v8cr-7x8f-78mq" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-27817", "state": "RESERVED", "public_date": "2026-02-26", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-02-26" }, "refs": "ghsa-repos:opf/openproject\tGHSA-c76v-8735-35hq", "description": "opf/openproject repository advisory GHSA-c76v-8735-35hq", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 223, "clock_known": true, "hours_public": 5352, "clock_origin": "advisory", "advisory_date": "2026-02-26", "advisory_days_public": 223, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/opf/openproject/security/advisories/GHSA-c76v-8735-35hq" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-27733", "state": "RESERVED", "public_date": "2026-02-26", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-02-26" }, "refs": "ghsa-repos:opf/openproject\tGHSA-w9w6-f59w-89vj", "description": "opf/openproject repository advisory GHSA-w9w6-f59w-89vj", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 223, "clock_known": true, "hours_public": 5352, "clock_origin": "advisory", "advisory_date": "2026-02-26", "advisory_days_public": 223, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/opf/openproject/security/advisories/GHSA-w9w6-f59w-89vj" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-27731", "state": "RESERVED", "public_date": "2026-02-26", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-02-26" }, "refs": "ghsa-repos:opf/openproject\tGHSA-3qgp-q2x5-c4jw", "description": "opf/openproject repository advisory GHSA-3qgp-q2x5-c4jw", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 223, "clock_known": true, "hours_public": 5352, "clock_origin": "advisory", "advisory_date": "2026-02-26", "advisory_days_public": 223, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/opf/openproject/security/advisories/GHSA-3qgp-q2x5-c4jw" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-27722", "state": "RESERVED", "public_date": "2026-02-26", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-02-26" }, "refs": "ghsa-repos:opf/openproject\tGHSA-xw8w-4qxm-g9gv", "description": "opf/openproject repository advisory GHSA-xw8w-4qxm-g9gv", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 223, "clock_known": true, "hours_public": 5352, "clock_origin": "advisory", "advisory_date": "2026-02-26", "advisory_days_public": 223, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/opf/openproject/security/advisories/GHSA-xw8w-4qxm-g9gv" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-27721", "state": "RESERVED", "public_date": "2026-02-26", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-02-26" }, "refs": "ghsa-repos:opf/openproject\tGHSA-w92f-h4wh-g4w4", "description": "opf/openproject repository advisory GHSA-w92f-h4wh-g4w4", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 223, "clock_known": true, "hours_public": 5352, "clock_origin": "advisory", "advisory_date": "2026-02-26", "advisory_days_public": 223, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/opf/openproject/security/advisories/GHSA-w92f-h4wh-g4w4" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-27720", "state": "RESERVED", "public_date": "2026-02-26", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-02-26" }, "refs": "ghsa-repos:opf/openproject\tGHSA-xfmm-g339-3x85", "description": "opf/openproject repository advisory GHSA-xfmm-g339-3x85", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 223, "clock_known": true, "hours_public": 5352, "clock_origin": "advisory", "advisory_date": "2026-02-26", "advisory_days_public": 223, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/opf/openproject/security/advisories/GHSA-xfmm-g339-3x85" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-27719", "state": "RESERVED", "public_date": "2026-02-26", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-02-26" }, "refs": "ghsa-repos:opf/openproject\tGHSA-7xv7-73x4-qqvp", "description": "opf/openproject repository advisory GHSA-7xv7-73x4-qqvp", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 223, "clock_known": true, "hours_public": 5352, "clock_origin": "advisory", "advisory_date": "2026-02-26", "advisory_days_public": 223, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/opf/openproject/security/advisories/GHSA-7xv7-73x4-qqvp" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-27717", "state": "RESERVED", "public_date": "2026-02-26", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-02-26" }, "refs": "ghsa-repos:opf/openproject\tGHSA-p3hw-5g6p-69f2", "description": "opf/openproject repository advisory GHSA-p3hw-5g6p-69f2", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 223, "clock_known": true, "hours_public": 5352, "clock_origin": "advisory", "advisory_date": "2026-02-26", "advisory_days_public": 223, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/opf/openproject/security/advisories/GHSA-p3hw-5g6p-69f2" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-27718", "state": "RESERVED", "public_date": "2026-02-26", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-02-26" }, "refs": "ghsa-repos:opf/openproject\tGHSA-cxm3-9m5g-9cq4", "description": "opf/openproject repository advisory GHSA-cxm3-9m5g-9cq4", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 223, "clock_known": true, "hours_public": 5352, "clock_origin": "advisory", "advisory_date": "2026-02-26", "advisory_days_public": 223, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/opf/openproject/security/advisories/GHSA-cxm3-9m5g-9cq4" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-27716", "state": "RESERVED", "public_date": "2026-02-26", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-02-26" }, "refs": "ghsa-repos:opf/openproject\tGHSA-qpg6-635j-wjc2", "description": "opf/openproject repository advisory GHSA-qpg6-635j-wjc2", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 223, "clock_known": true, "hours_public": 5352, "clock_origin": "advisory", "advisory_date": "2026-02-26", "advisory_days_public": 223, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/opf/openproject/security/advisories/GHSA-qpg6-635j-wjc2" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-27715", "state": "RESERVED", "public_date": "2026-02-26", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-02-26" }, "refs": "ghsa-repos:opf/openproject\tGHSA-j4m9-7hff-8qgr", "description": "opf/openproject repository advisory GHSA-j4m9-7hff-8qgr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 223, "clock_known": true, "hours_public": 5352, "clock_origin": "advisory", "advisory_date": "2026-02-26", "advisory_days_public": 223, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/opf/openproject/security/advisories/GHSA-j4m9-7hff-8qgr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-21735", "state": "RESERVED", "public_date": "2026-03-03", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-03-03" }, "refs": "csaf:Nationaal Cyber Security Centrum\tNCSC-2026-0074\thttps://advisories.ncsc.nl/csaf/v2/2026/ncsc-2026-0074.json", "description": "CVE-2026-21735", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 218, "clock_known": true, "hours_public": 5232, "clock_origin": "advisory", "advisory_date": "2026-03-03", "advisory_days_public": 218, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://advisories.ncsc.nl/csaf/v2/2026/ncsc-2026-0074.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-71205", "state": "RESERVED", "public_date": "2026-03-03", "sources": "csaf,zdi", "feed_count": 2, "dates": { "csaf": "2026-03-03", "zdi": "2026-03-03" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-0587\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0587.json;zdi:ZDI-26-144", "description": "CVE-2025-71205", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 218, "clock_known": true, "hours_public": 5232, "clock_origin": "advisory", "advisory_date": "2026-03-03", "advisory_days_public": 218, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0587.json", "zdi": "https://www.zerodayinitiative.com/advisories/ZDI-26-144/" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-71206", "state": "RESERVED", "public_date": "2026-03-03", "sources": "csaf,zdi", "feed_count": 2, "dates": { "csaf": "2026-03-03", "zdi": "2026-03-03" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-0587\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0587.json;zdi:ZDI-26-145", "description": "CVE-2025-71206", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 218, "clock_known": true, "hours_public": 5232, "clock_origin": "advisory", "advisory_date": "2026-03-03", "advisory_days_public": 218, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0587.json", "zdi": "https://www.zerodayinitiative.com/advisories/ZDI-26-145/" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-71207", "state": "RESERVED", "public_date": "2026-03-03", "sources": "csaf,zdi", "feed_count": 2, "dates": { "csaf": "2026-03-03", "zdi": "2026-03-03" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-0587\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0587.json;zdi:ZDI-26-146", "description": "CVE-2025-71207", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 218, "clock_known": true, "hours_public": 5232, "clock_origin": "advisory", "advisory_date": "2026-03-03", "advisory_days_public": 218, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0587.json", "zdi": "https://www.zerodayinitiative.com/advisories/ZDI-26-146/" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-71208", "state": "RESERVED", "public_date": "2026-03-03", "sources": "csaf,zdi", "feed_count": 2, "dates": { "csaf": "2026-03-03", "zdi": "2026-03-03" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-0587\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0587.json;zdi:ZDI-26-147", "description": "CVE-2025-71208", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 218, "clock_known": true, "hours_public": 5232, "clock_origin": "advisory", "advisory_date": "2026-03-03", "advisory_days_public": 218, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0587.json", "zdi": "https://www.zerodayinitiative.com/advisories/ZDI-26-147/" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-71209", "state": "RESERVED", "public_date": "2026-03-03", "sources": "csaf,zdi", "feed_count": 2, "dates": { "csaf": "2026-03-03", "zdi": "2026-03-03" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-0587\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0587.json;zdi:ZDI-26-148", "description": "CVE-2025-71209", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 218, "clock_known": true, "hours_public": 5232, "clock_origin": "advisory", "advisory_date": "2026-03-03", "advisory_days_public": 218, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0587.json", "zdi": "https://www.zerodayinitiative.com/advisories/ZDI-26-148/" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-3493", "state": "RESERVED", "public_date": "2026-03-03", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-03-03" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-0582\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0582.json", "description": "CVE-2026-3493", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 218, "clock_known": true, "hours_public": 5232, "clock_origin": "advisory", "advisory_date": "2026-03-03", "advisory_days_public": 218, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0582.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-71218", "state": "RESERVED", "public_date": "2026-03-03", "sources": "zdi", "feed_count": 1, "dates": { "zdi": "2026-03-03" }, "refs": "zdi:ZDI-26-149", "description": "ZDI advisory ZDI-26-149", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 218, "clock_known": true, "hours_public": 5232, "clock_origin": "advisory", "advisory_date": "2026-03-03", "advisory_days_public": 218, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "zdi": "https://www.zerodayinitiative.com/advisories/ZDI-26-149/" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-3836", "state": "RESERVED", "public_date": "2026-03-09", "sources": "alas,csaf,debian,redhat", "feed_count": 4, "dates": { "alas": "2026-03-26", "redhat": "2026-03-09", "csaf": "2026-04-09" }, "refs": "alas:CVE-2026-3836;csaf:Red Hat Product Security\tRHSA-2026:7349\thttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7349.json;debian:dnf5;redhat:CVE-2026-3836", "description": "A flaw was found in dnf5.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 212, "clock_known": true, "hours_public": 5088, "clock_origin": "advisory", "advisory_date": "2026-03-09", "advisory_days_public": 212, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "dnf5", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-3836.html", "csaf": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7349.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-3836", "redhat": "https://access.redhat.com/security/cve/CVE-2026-3836" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-26364", "state": "RESERVED", "public_date": "2026-03-10", "sources": "zdi", "feed_count": 1, "dates": { "zdi": "2026-03-10" }, "refs": "zdi:ZDI-26-177", "description": "ZDI advisory ZDI-26-177", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 211, "clock_known": true, "hours_public": 5064, "clock_origin": "advisory", "advisory_date": "2026-03-10", "advisory_days_public": 211, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "zdi": "https://www.zerodayinitiative.com/advisories/ZDI-26-177/" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-31977", "state": "RESERVED", "public_date": "2026-03-11", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-03-11" }, "refs": "ghsa-repos:HKUDS/nanobot\tGHSA-g6cf-xjwr-pm77", "description": "HKUDS/nanobot repository advisory GHSA-g6cf-xjwr-pm77", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 210, "clock_known": true, "hours_public": 5040, "clock_origin": "advisory", "advisory_date": "2026-03-11", "advisory_days_public": 210, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/HKUDS/nanobot/security/advisories/GHSA-g6cf-xjwr-pm77" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-32307", "state": "RESERVED", "public_date": "2026-03-12", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-03-12" }, "refs": "ghsa-repos:OneUptime/oneuptime\tGHSA-f5j9-g76m-vvp9", "description": "OneUptime/oneuptime repository advisory GHSA-f5j9-g76m-vvp9", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 209, "clock_known": true, "hours_public": 5016, "clock_origin": "advisory", "advisory_date": "2026-03-12", "advisory_days_public": 209, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/OneUptime/oneuptime/security/advisories/GHSA-f5j9-g76m-vvp9" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-65587", "state": "RESERVED", "public_date": "2026-03-12", "sources": "certcc", "feed_count": 1, "dates": { "certcc": "2026-03-12" }, "refs": "certcc:VU#907705", "description": "Graphql-upload-minimal has a prototype pollution vulnerability.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 209, "clock_known": true, "hours_public": 5016, "clock_origin": "advisory", "advisory_date": "2026-03-12", "advisory_days_public": 209, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "certcc": "https://www.kb.cert.org/vuls/id/907705" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-3312", "state": "RESERVED", "public_date": "2026-03-13", "sources": "csaf,debian,redhat", "feed_count": 3, "dates": { "redhat": "2026-03-13", "csaf": "2026-03-13" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-3312\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3312.json;debian:pagure;redhat:CVE-2026-3312", "description": "pagure: Pagure: Information disclosure via unrestricted reStructuredText include directive", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 208, "clock_known": true, "hours_public": 4992, "clock_origin": "advisory", "advisory_date": "2026-03-13", "advisory_days_public": 208, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "pagure", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3312.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-3312", "redhat": "https://access.redhat.com/security/cve/CVE-2026-3312" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-2046", "state": "RESERVED", "public_date": "2026-03-16", "sources": "alas,csaf,debian,zdi", "feed_count": 4, "dates": { "alas": "2026-03-20", "csaf": "2026-03-18", "zdi": "2026-03-16" }, "refs": "alas:CVE-2026-2046;csaf:SUSE Product Security Team\tCVE-2026-2046\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-2046.json;debian:gimp;zdi:ZDI-26-213", "description": "GIMP LBM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 205, "clock_known": true, "hours_public": 4920, "clock_origin": "advisory", "advisory_date": "2026-03-16", "advisory_days_public": 205, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gimp", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-2046.html", "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-2046.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-2046", "zdi": "https://www.zerodayinitiative.com/advisories/ZDI-26-213/" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-59490", "state": "RESERVED", "public_date": "2026-03-25", "sources": "csaf,debian", "feed_count": 2, "dates": { "csaf": "2026-03-25" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-0876\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0876.json;debian:znuny", "description": "CVE-2025-59490", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 196, "clock_known": true, "hours_public": 4704, "clock_origin": "advisory", "advisory_date": "2026-03-25", "advisory_days_public": 196, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "znuny", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0876.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2025-59490" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-59393", "state": "RESERVED", "public_date": "2026-03-25", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-03-25" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-0876\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0876.json", "description": "CVE-2025-59393", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 196, "clock_known": true, "hours_public": 4704, "clock_origin": "advisory", "advisory_date": "2026-03-25", "advisory_days_public": 196, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0876.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-33864", "state": "RESERVED", "public_date": "2026-03-26", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-03-26", "osv": "2026-03-26" }, "refs": "ghsa:GHSA-44fc-8fm5-q62h;osv:npm:convict", "description": "Convict has Prototype Pollution via startsWith() function", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 195, "clock_known": true, "hours_public": 4680, "clock_origin": "advisory", "advisory_date": "2026-03-26", "advisory_days_public": 195, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "convict", "ecosystem": "npm", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-44fc-8fm5-q62h", "osv": "https://osv.dev/list?q=CVE-2026-33864" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-33863", "state": "RESERVED", "public_date": "2026-03-26", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-03-26", "osv": "2026-03-26" }, "refs": "ghsa:GHSA-hf2r-9gf9-rwch;osv:npm:convict", "description": "Convict has prototype pollution via load(), loadFile(), and schema initialization", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 195, "clock_known": true, "hours_public": 4680, "clock_origin": "advisory", "advisory_date": "2026-03-26", "advisory_days_public": 195, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "convict", "ecosystem": "npm", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-hf2r-9gf9-rwch", "osv": "https://osv.dev/list?q=CVE-2026-33863" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-4981", "state": "RESERVED", "public_date": "2026-03-27", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2026-03-27", "csaf": "2026-03-27" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-4981\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4981.json;redhat:CVE-2026-4981", "description": "rhacs: Red Hat Advanced Cluster Security (ACS): Open Redirect and Content Spoofing via OAuth callback endpoint", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 194, "clock_known": true, "hours_public": 4656, "clock_origin": "advisory", "advisory_date": "2026-03-27", "advisory_days_public": 194, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2026-4981", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4981.json", "redhat": "https://access.redhat.com/security/cve/CVE-2026-4981" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-0058", "state": "RESERVED", "public_date": "2026-04-01", "sources": "csaf,samsung", "feed_count": 2, "dates": { "csaf": "2026-04-06", "samsung": "2026-04-01" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-0974\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0974.json;samsung:SMR-Apr-2026", "description": "CVE-2026-0058", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 189, "clock_known": true, "hours_public": 4536, "clock_origin": "advisory", "advisory_date": "2026-04-01", "advisory_days_public": 189, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0974.json", "samsung": "https://security.samsungmobile.com/securityUpdate.smsb" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2023-20713", "state": "RESERVED", "public_date": "2026-04-01", "sources": "samsung", "feed_count": 1, "dates": { "samsung": "2026-04-01" }, "refs": "samsung:SMR-Apr-2026", "description": "Samsung SMR Apr 2026", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 189, "clock_known": true, "hours_public": 4536, "clock_origin": "advisory", "advisory_date": "2026-04-01", "advisory_days_public": 189, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "samsung": "https://security.samsungmobile.com/securityUpdate.smsb" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-30762", "state": "RESERVED", "public_date": "2026-04-02", "sources": "ghsa,ghsa-repos,osv", "feed_count": 3, "dates": { "ghsa": "2026-04-04", "ghsa-repos": "2026-04-02", "osv": "2026-04-04" }, "refs": "ghsa-repos:HKUDS/LightRAG\tGHSA-mcww-4hxq-hfr3;ghsa:GHSA-mcww-4hxq-hfr3;osv:PyPI:lightrag-hku", "description": "LightRAG: Hardcoded JWT Signing Secret Allows Authentication Bypass", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 188, "clock_known": true, "hours_public": 4512, "clock_origin": "advisory", "advisory_date": "2026-04-02", "advisory_days_public": 188, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "lightrag-hku", "ecosystem": "PyPI", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-mcww-4hxq-hfr3", "ghsa-repos": "https://github.com/HKUDS/LightRAG/security/advisories/GHSA-mcww-4hxq-hfr3", "osv": "https://osv.dev/list?q=CVE-2026-30762" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-1403", "state": "RESERVED", "public_date": "2026-04-08", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-04-08" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-1010\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1010.json", "description": "CVE-2026-1403", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 182, "clock_known": true, "hours_public": 4368, "clock_origin": "advisory", "advisory_date": "2026-04-08", "advisory_days_public": 182, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1010.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-65016", "state": "RESERVED", "public_date": "2026-04-09", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-04-09" }, "refs": "ghsa-repos:eProsima/Fast-DDS\tGHSA-7r5r-66jr-gwrw", "description": "eProsima/Fast-DDS repository advisory GHSA-7r5r-66jr-gwrw", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 181, "clock_known": true, "hours_public": 4344, "clock_origin": "advisory", "advisory_date": "2026-04-09", "advisory_days_public": 181, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-7r5r-66jr-gwrw" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-3865", "state": "RESERVED", "public_date": "2026-04-10", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2026-04-10", "csaf": "2026-04-12" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-1051\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1051.json;redhat:CVE-2026-3865", "description": "csi-driver-smb: Kubernetes CSI Driver for SMB: Path Traversal vulnerability allows unauthorized file operations via insufficient subDir validation.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 180, "clock_known": true, "hours_public": 4320, "clock_origin": "advisory", "advisory_date": "2026-04-10", "advisory_days_public": 180, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2026-3865", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1051.json", "redhat": "https://access.redhat.com/security/cve/CVE-2026-3865" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-58388", "state": "RESERVED", "public_date": "2026-04-11", "sources": "alas,csaf,debian,redhat", "feed_count": 4, "dates": { "alas": "2026-07-08", "redhat": "2026-04-11", "csaf": "2026-07-07" }, "refs": "alas:CVE-2026-58388;csaf:SUSE Product Security Team\tCVE-2026-58388\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-58388.json;debian:gimp;redhat:CVE-2026-58388", "description": "A flaw was found in GIMP's Seattle FilmWorks (SFW94A) loader.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 179, "clock_known": true, "hours_public": 4296, "clock_origin": "advisory", "advisory_date": "2026-04-11", "advisory_days_public": 179, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gimp", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-58388.html", "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-58388.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-58388", "redhat": "https://access.redhat.com/security/cve/CVE-2026-58388" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-58382", "state": "RESERVED", "public_date": "2026-04-11", "sources": "alas,csaf,debian,redhat", "feed_count": 4, "dates": { "alas": "2026-07-08", "redhat": "2026-04-11", "csaf": "2026-07-09" }, "refs": "alas:CVE-2026-58382;csaf:SUSE Product Security Team\tCVE-2026-58382\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-58382.json;debian:gimp;redhat:CVE-2026-58382", "description": "A flaw was found in GIMP's Jeff's Image Format (JIF) parser.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 179, "clock_known": true, "hours_public": 4296, "clock_origin": "advisory", "advisory_date": "2026-04-11", "advisory_days_public": 179, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gimp", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-58382.html", "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-58382.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-58382", "redhat": "https://access.redhat.com/security/cve/CVE-2026-58382" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-58386", "state": "RESERVED", "public_date": "2026-04-11", "sources": "alas,csaf,debian,redhat", "feed_count": 4, "dates": { "alas": "2026-07-08", "redhat": "2026-04-11", "csaf": "2026-07-07" }, "refs": "alas:CVE-2026-58386;csaf:SUSE Product Security Team\tCVE-2026-58386\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-58386.json;debian:gimp;redhat:CVE-2026-58386", "description": "A flaw was found in GIMP's TIM loader.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 179, "clock_known": true, "hours_public": 4296, "clock_origin": "advisory", "advisory_date": "2026-04-11", "advisory_days_public": 179, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gimp", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-58386.html", "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-58386.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-58386", "redhat": "https://access.redhat.com/security/cve/CVE-2026-58386" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-58383", "state": "RESERVED", "public_date": "2026-04-11", "sources": "alas,csaf,debian,redhat", "feed_count": 4, "dates": { "alas": "2026-07-08", "redhat": "2026-04-11", "csaf": "2026-07-06" }, "refs": "alas:CVE-2026-58383;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2219\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2219.json;debian:gimp;redhat:CVE-2026-58383", "description": "A flaw was found in GIMP's Jeff's Image Format (JIF) parser.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 179, "clock_known": true, "hours_public": 4296, "clock_origin": "advisory", "advisory_date": "2026-04-11", "advisory_days_public": 179, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gimp", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-58383.html", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2219.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-58383", "redhat": "https://access.redhat.com/security/cve/CVE-2026-58383" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-58387", "state": "RESERVED", "public_date": "2026-04-11", "sources": "alas,csaf,debian,redhat", "feed_count": 4, "dates": { "alas": "2026-07-08", "redhat": "2026-04-11", "csaf": "2026-07-06" }, "refs": "alas:CVE-2026-58387;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2219\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2219.json;debian:gimp;redhat:CVE-2026-58387", "description": "A flaw was found in GIMP's Seattle FilmWorks (SFW94A) loader.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 179, "clock_known": true, "hours_public": 4296, "clock_origin": "advisory", "advisory_date": "2026-04-11", "advisory_days_public": 179, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gimp", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-58387.html", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2219.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-58387", "redhat": "https://access.redhat.com/security/cve/CVE-2026-58387" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-58385", "state": "RESERVED", "public_date": "2026-04-11", "sources": "alas,csaf,debian,redhat", "feed_count": 4, "dates": { "alas": "2026-07-07", "redhat": "2026-04-11", "csaf": "2026-07-06" }, "refs": "alas:CVE-2026-58385;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2219\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2219.json;debian:gimp;redhat:CVE-2026-58385", "description": "A flaw was found in GIMP's PVR decoder.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 179, "clock_known": true, "hours_public": 4296, "clock_origin": "advisory", "advisory_date": "2026-04-11", "advisory_days_public": 179, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gimp", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-58385.html", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2219.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-58385", "redhat": "https://access.redhat.com/security/cve/CVE-2026-58385" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-6856", "state": "RESERVED", "public_date": "2026-04-13", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2026-04-13", "csaf": "2026-04-22" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-1238\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1238.json;redhat:CVE-2026-6856", "description": "keycloak: keycloak: acceptable AAGUID policy bypass via packed self-attestation in WebAuthn registration", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 177, "clock_known": true, "hours_public": 4248, "clock_origin": "advisory", "advisory_date": "2026-04-13", "advisory_days_public": 177, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2026-6856", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1238.json", "redhat": "https://access.redhat.com/security/cve/CVE-2026-6856" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-32179", "state": "RESERVED", "public_date": "2026-04-15", "sources": "alpine,ghsa,ghsa-repos,osv", "feed_count": 4, "dates": { "ghsa": "2026-04-16", "ghsa-repos": "2026-04-15", "osv": "2026-04-16" }, "refs": "alpine:libmsquic;ghsa-repos:microsoft/msquic\tGHSA-gvvw-8j96-8g5r;ghsa:GHSA-gvvw-8j96-8g5r;osv:NuGet:Microsoft.Native.Quic.MsQuic.OpenSSL", "description": "MsQuic has a Remote Elevation of Privilege Vulnerability", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 175, "clock_known": true, "hours_public": 4200, "clock_origin": "advisory", "advisory_date": "2026-04-15", "advisory_days_public": 175, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "libmsquic", "ecosystem": "NuGet", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-32179", "ghsa": "https://github.com/advisories/GHSA-gvvw-8j96-8g5r", "ghsa-repos": "https://github.com/microsoft/msquic/security/advisories/GHSA-gvvw-8j96-8g5r", "osv": "https://osv.dev/list?q=CVE-2026-32179" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-5424", "state": "RESERVED", "public_date": "2026-04-15", "sources": "zdi", "feed_count": 1, "dates": { "zdi": "2026-04-15" }, "refs": "zdi:ZDI-26-271", "description": "ZDI advisory ZDI-26-271", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 175, "clock_known": true, "hours_public": 4200, "clock_origin": "advisory", "advisory_date": "2026-04-15", "advisory_days_public": 175, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "zdi": "https://www.zerodayinitiative.com/advisories/ZDI-26-271/" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-6434", "state": "RESERVED", "public_date": "2026-04-17", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-04-17" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-6434\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6434.json", "description": "rust-coreutils: rust-coreutils: Information disclosure via insecure temporary file permissions and improper cleanup in `uu_sort`", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 173, "clock_known": true, "hours_public": 4152, "clock_origin": "advisory", "advisory_date": "2026-04-17", "advisory_days_public": 173, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6434.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-6435", "state": "RESERVED", "public_date": "2026-04-17", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-04-17" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-6435\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6435.json", "description": "rust-coreutils: rust-coreutils: Arbitrary file permission modification via TOCTOU race in chmod symbolic link traversal", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 173, "clock_known": true, "hours_public": 4152, "clock_origin": "advisory", "advisory_date": "2026-04-17", "advisory_days_public": 173, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6435.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-22020", "state": "RESERVED", "public_date": "2026-04-21", "sources": "alas,csaf,debian", "feed_count": 3, "dates": { "alas": "2026-04-27", "csaf": "2026-04-21" }, "refs": "alas:CVE-2026-22020;csaf:Red Hat Product Security\tCVE-2026-22020\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-22020.json;debian:openjdk-11", "description": "Updated libpng in Oracle Java.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 169, "clock_known": true, "hours_public": 4056, "clock_origin": "advisory", "advisory_date": "2026-04-21", "advisory_days_public": 169, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "openjdk-11", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-22020.html", "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-22020.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-22020" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-54877", "state": "RESERVED", "public_date": "2026-04-21", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-04-21" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-54877\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54877.json", "description": "ofono: ofono: double-free vulnerability in cbs_assembly_expire()", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 169, "clock_known": true, "hours_public": 4056, "clock_origin": "advisory", "advisory_date": "2026-04-21", "advisory_days_public": 169, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54877.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-54878", "state": "RESERVED", "public_date": "2026-04-22", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-04-22" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-54878\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54878.json", "description": "ofono: ofono: stack-based buffer overflow in get_smsc_addr_cb()", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 168, "clock_known": true, "hours_public": 4032, "clock_origin": "advisory", "advisory_date": "2026-04-22", "advisory_days_public": 168, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54878.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-54879", "state": "RESERVED", "public_date": "2026-04-22", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-04-22" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-54879\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54879.json", "description": "ofono: ofono: stack-based buffer overflow in cusd_parse() via GSM 7-bit packing", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 168, "clock_known": true, "hours_public": 4032, "clock_origin": "advisory", "advisory_date": "2026-04-22", "advisory_days_public": 168, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54879.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-54880", "state": "RESERVED", "public_date": "2026-04-22", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-04-22" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-54880\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54880.json", "description": "ofono: ofono: stack-based buffer overflow in huawei_nwtime_notify() via sscanf", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 168, "clock_known": true, "hours_public": 4032, "clock_origin": "advisory", "advisory_date": "2026-04-22", "advisory_days_public": 168, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54880.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-54881", "state": "RESERVED", "public_date": "2026-04-22", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-04-22" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-54881\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54881.json", "description": "ofono: ofono: heap-based buffer overflow in scan_nets_cb() via QMI network scan", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 168, "clock_known": true, "hours_public": 4032, "clock_origin": "advisory", "advisory_date": "2026-04-22", "advisory_days_public": 168, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54881.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-54882", "state": "RESERVED", "public_date": "2026-04-22", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-04-22" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-54882\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54882.json", "description": "ofono: ofono: stack-based buffer overflow in tlts_notify() via sscanf", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 168, "clock_known": true, "hours_public": 4032, "clock_origin": "advisory", "advisory_date": "2026-04-22", "advisory_days_public": 168, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54882.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-54883", "state": "RESERVED", "public_date": "2026-04-22", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-04-22" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-54883\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54883.json", "description": "ofono: ofono: heap-based buffer overflow in HDLC decoder new_bytes()", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 168, "clock_known": true, "hours_public": 4032, "clock_origin": "advisory", "advisory_date": "2026-04-22", "advisory_days_public": 168, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54883.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-40540", "state": "RESERVED", "public_date": "2026-04-23", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-04-23" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-1261\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1261.json", "description": "CVE-2026-40540", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 167, "clock_known": true, "hours_public": 4008, "clock_origin": "advisory", "advisory_date": "2026-04-23", "advisory_days_public": 167, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1261.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-5761", "state": "RESERVED", "public_date": "2026-04-24", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-04-24" }, "refs": "alas:CVE-2026-5761;debian:qemu", "description": "An internal buffer is used when processing VIRTIO_BLK_T_ZONE_REPORT requests.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 166, "clock_known": true, "hours_public": 3984, "clock_origin": "advisory", "advisory_date": "2026-04-24", "advisory_days_public": 166, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-5761.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-5761" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-3890", "state": "RESERVED", "public_date": "2026-04-24", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-04-24" }, "refs": "alas:CVE-2026-3890;debian:qemu", "description": "hcd-ohci: infinite loop", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 166, "clock_known": true, "hours_public": 3984, "clock_origin": "advisory", "advisory_date": "2026-04-24", "advisory_days_public": 166, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-3890.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-3890" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-5744", "state": "RESERVED", "public_date": "2026-04-27", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-04-27" }, "refs": "alas:CVE-2026-5744;debian:qemu", "description": "hw/uefi: heap overflow", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 163, "clock_known": true, "hours_public": 3912, "clock_origin": "advisory", "advisory_date": "2026-04-27", "advisory_days_public": 163, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-5744.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-5744" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-5763", "state": "RESERVED", "public_date": "2026-04-27", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-04-27" }, "refs": "alas:CVE-2026-5763;debian:qemu", "description": "virtio-scsi request size mismatch", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 163, "clock_known": true, "hours_public": 3912, "clock_origin": "advisory", "advisory_date": "2026-04-27", "advisory_days_public": 163, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-5763.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-5763" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-33090", "state": "RESERVED", "public_date": "2026-04-29", "sources": "acronis,csaf", "feed_count": 2, "dates": { "csaf": "2026-04-29", "acronis": "2026-04-29" }, "refs": "acronis:SEC-10773;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-1322\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1322.json", "description": "CVE-2026-33090", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 161, "clock_known": true, "hours_public": 3864, "clock_origin": "advisory", "advisory_date": "2026-04-29", "advisory_days_public": 161, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "acronis": "https://security-advisory.acronis.com/advisories/SEC-10773", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1322.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-0062", "state": "RESERVED", "public_date": "2026-05-01", "sources": "samsung", "feed_count": 1, "dates": { "samsung": "2026-05-01" }, "refs": "samsung:SMR-May-2026", "description": "Samsung SMR May 2026", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 159, "clock_known": true, "hours_public": 3816, "clock_origin": "advisory", "advisory_date": "2026-05-01", "advisory_days_public": 159, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "samsung": "https://security.samsungmobile.com/securityUpdate.smsb" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-35328", "state": "RESERVED", "public_date": "2026-05-05", "sources": "alpine,csaf,debian", "feed_count": 3, "dates": { "csaf": "2026-05-05" }, "refs": "alpine:strongswan;csaf:SUSE Product Security Team\tSUSE-SU-2026:21547-1\thttps://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_21547-1.json;debian:strongswan", "description": "CVE-2026-35328", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 155, "clock_known": true, "hours_public": 3720, "clock_origin": "advisory", "advisory_date": "2026-05-05", "advisory_days_public": 155, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "strongswan", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-35328", "csaf": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_21547-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-35328" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-35329", "state": "RESERVED", "public_date": "2026-05-05", "sources": "alpine,csaf,debian", "feed_count": 3, "dates": { "csaf": "2026-05-05" }, "refs": "alpine:strongswan;csaf:SUSE Product Security Team\tSUSE-SU-2026:21547-1\thttps://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_21547-1.json;debian:strongswan", "description": "CVE-2026-35329", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 155, "clock_known": true, "hours_public": 3720, "clock_origin": "advisory", "advisory_date": "2026-05-05", "advisory_days_public": 155, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "strongswan", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-35329", "csaf": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_21547-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-35329" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-35330", "state": "RESERVED", "public_date": "2026-05-05", "sources": "alpine,csaf,debian", "feed_count": 3, "dates": { "csaf": "2026-05-05" }, "refs": "alpine:strongswan;csaf:SUSE Product Security Team\tSUSE-SU-2026:21547-1\thttps://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_21547-1.json;debian:strongswan", "description": "CVE-2026-35330", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 155, "clock_known": true, "hours_public": 3720, "clock_origin": "advisory", "advisory_date": "2026-05-05", "advisory_days_public": 155, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "strongswan", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-35330", "csaf": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_21547-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-35330" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-35331", "state": "RESERVED", "public_date": "2026-05-05", "sources": "alpine,csaf,debian", "feed_count": 3, "dates": { "csaf": "2026-05-05" }, "refs": "alpine:strongswan;csaf:SUSE Product Security Team\tSUSE-SU-2026:21547-1\thttps://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_21547-1.json;debian:strongswan", "description": "CVE-2026-35331", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 155, "clock_known": true, "hours_public": 3720, "clock_origin": "advisory", "advisory_date": "2026-05-05", "advisory_days_public": 155, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "strongswan", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-35331", "csaf": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_21547-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-35331" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-35332", "state": "RESERVED", "public_date": "2026-05-05", "sources": "alpine,csaf,debian", "feed_count": 3, "dates": { "csaf": "2026-05-05" }, "refs": "alpine:strongswan;csaf:SUSE Product Security Team\tSUSE-SU-2026:21547-1\thttps://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_21547-1.json;debian:strongswan", "description": "CVE-2026-35332", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 155, "clock_known": true, "hours_public": 3720, "clock_origin": "advisory", "advisory_date": "2026-05-05", "advisory_days_public": 155, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "strongswan", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-35332", "csaf": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_21547-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-35332" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-35333", "state": "RESERVED", "public_date": "2026-05-05", "sources": "alpine,csaf,debian", "feed_count": 3, "dates": { "csaf": "2026-05-05" }, "refs": "alpine:strongswan;csaf:SUSE Product Security Team\tSUSE-SU-2026:21547-1\thttps://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_21547-1.json;debian:strongswan", "description": "CVE-2026-35333", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 155, "clock_known": true, "hours_public": 3720, "clock_origin": "advisory", "advisory_date": "2026-05-05", "advisory_days_public": 155, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "strongswan", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-35333", "csaf": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_21547-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-35333" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-35334", "state": "RESERVED", "public_date": "2026-05-05", "sources": "alpine,csaf,debian", "feed_count": 3, "dates": { "csaf": "2026-05-05" }, "refs": "alpine:strongswan;csaf:SUSE Product Security Team\tSUSE-SU-2026:21547-1\thttps://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_21547-1.json;debian:strongswan", "description": "CVE-2026-35334", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 155, "clock_known": true, "hours_public": 3720, "clock_origin": "advisory", "advisory_date": "2026-05-05", "advisory_days_public": 155, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "strongswan", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-35334", "csaf": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_21547-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-35334" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-92151", "state": "RESERVED", "public_date": "2026-05-05", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-05-05" }, "refs": "ghsa-repos:nasa/fprime\tGHSA-4rjh-jqvx-r8j5", "description": "nasa/fprime repository advisory GHSA-4rjh-jqvx-r8j5", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 155, "clock_known": true, "hours_public": 3720, "clock_origin": "advisory", "advisory_date": "2026-05-05", "advisory_days_public": 155, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/nasa/fprime/security/advisories/GHSA-4rjh-jqvx-r8j5" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-6502", "state": "RESERVED", "public_date": "2026-05-07", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-05-07" }, "refs": "alas:CVE-2026-6502;debian:qemu", "description": "qemu", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 153, "clock_known": true, "hours_public": 3672, "clock_origin": "advisory", "advisory_date": "2026-05-07", "advisory_days_public": 153, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-6502.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-6502" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-40475", "state": "RESERVED", "public_date": "2026-05-09", "sources": "alpine,csaf", "feed_count": 2, "dates": { "csaf": "2026-05-09" }, "refs": "alpine:py3-openssl;csaf:SUSE Product Security Team\tSUSE-SU-2026:21619-1\thttps://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_21619-1.json", "description": "CVE-2026-40475", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 151, "clock_known": true, "hours_public": 3624, "clock_origin": "advisory", "advisory_date": "2026-05-09", "advisory_days_public": 151, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "py3-openssl", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-40475", "csaf": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_21619-1.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104145", "state": "RESERVED", "public_date": "2026-05-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-05-18" }, "refs": "ghsa-repos:frappe/crm\tGHSA-4q6w-fgx7-9rqx", "description": "frappe/crm repository advisory GHSA-4q6w-fgx7-9rqx", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 142, "clock_known": true, "hours_public": 3408, "clock_origin": "advisory", "advisory_date": "2026-05-18", "advisory_days_public": 142, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/frappe/crm/security/advisories/GHSA-4q6w-fgx7-9rqx" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-46626", "state": "RESERVED", "public_date": "2026-05-20", "sources": "debian,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-05-20" }, "refs": "debian:symfony;ghsa-repos:symfony/symfony\tGHSA-fqc7-9xjw-jrh3", "description": "symfony/symfony repository advisory GHSA-fqc7-9xjw-jrh3", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 140, "clock_known": true, "hours_public": 3360, "clock_origin": "advisory", "advisory_date": "2026-05-20", "advisory_days_public": 140, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "symfony", "ecosystem": "", "source_urls": { "debian": "https://security-tracker.debian.org/tracker/CVE-2026-46626", "ghsa-repos": "https://github.com/symfony/symfony/security/advisories/GHSA-fqc7-9xjw-jrh3" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57964", "state": "RESERVED", "public_date": "2026-05-27", "sources": "alas,csaf,debian,redhat", "feed_count": 4, "dates": { "alas": "2026-07-01", "redhat": "2026-05-27", "csaf": "2026-05-27" }, "refs": "alas:CVE-2026-57964;csaf:Red Hat Product Security\tCVE-2026-57964\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57964.json;debian:spice-vdagent;redhat:CVE-2026-57964", "description": "A flaw was found in spice-vdagent.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 133, "clock_known": true, "hours_public": 3192, "clock_origin": "advisory", "advisory_date": "2026-05-27", "advisory_days_public": 133, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "spice-vdagent", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-57964.html", "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57964.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-57964", "redhat": "https://access.redhat.com/security/cve/CVE-2026-57964" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-26843", "state": "RESERVED", "public_date": "2026-05-27", "sources": "csaf,debian", "feed_count": 2, "dates": { "csaf": "2026-05-27" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-1717\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1717.json;debian:znuny", "description": "CVE-2025-26843", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 133, "clock_known": true, "hours_public": 3192, "clock_origin": "advisory", "advisory_date": "2026-05-27", "advisory_days_public": 133, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "znuny", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1717.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2025-26843" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-13745", "state": "RESERVED", "public_date": "2026-05-29", "sources": "alas,csaf,debian", "feed_count": 3, "dates": { "alas": "2026-05-29", "csaf": "2026-05-30" }, "refs": "alas:CVE-2024-13745;csaf:SUSE Product Security Team\tCVE-2024-13745\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2024-13745.json;debian:edk2", "description": "The bug allows an attacker to make the TPM record and measure one partition table layout while the firmware and operating system actually use a different layout.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 131, "clock_known": true, "hours_public": 3144, "clock_origin": "advisory", "advisory_date": "2026-05-29", "advisory_days_public": 131, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "edk2", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2024-13745.html", "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2024-13745.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2024-13745" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-38739", "state": "RESERVED", "public_date": "2026-05-29", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-05-29", "osv": "2026-05-29" }, "refs": "ghsa:GHSA-xg9x-h37w-h3r3;osv:Packagist:ezsystems/ezpublish-legacy", "description": "ezsystems/ezpublish-legacy has a SQL injection in dfscleanup", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 131, "clock_known": true, "hours_public": 3144, "clock_origin": "advisory", "advisory_date": "2026-05-29", "advisory_days_public": 131, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "ezsystems/ezpublish-legacy", "ecosystem": "Packagist", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-xg9x-h37w-h3r3", "osv": "https://osv.dev/list?q=CVE-2026-38739" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-41435", "state": "RESERVED", "public_date": "2026-06-01", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-06-01" }, "refs": "alas:CVE-2026-41435;debian:qemu", "description": "Qemu buffer overrun in hw/uefi", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 128, "clock_known": true, "hours_public": 3072, "clock_origin": "advisory", "advisory_date": "2026-06-01", "advisory_days_public": 128, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-41435.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-41435" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-41439", "state": "RESERVED", "public_date": "2026-06-01", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-06-01" }, "refs": "alas:CVE-2026-41439;debian:qemu", "description": "hw/uefi: verify data size before accessing it in wrap_pkcs7", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 128, "clock_known": true, "hours_public": 3072, "clock_origin": "advisory", "advisory_date": "2026-06-01", "advisory_days_public": 128, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-41439.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-41439" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-49390", "state": "RESERVED", "public_date": "2026-06-01", "sources": "alas,alpine,debian,ghsa-repos", "feed_count": 4, "dates": { "alas": "2026-06-01", "ghsa-repos": "2026-07-27" }, "refs": "alas:CVE-2026-49390;alpine:netatalk;debian:netatalk;ghsa-repos:Netatalk/netatalk\tGHSA-mr8x-76wr-q995", "description": "The server quantum option in afp.conf is not range-validated during configuration parsing.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 128, "clock_known": true, "hours_public": 3072, "clock_origin": "advisory", "advisory_date": "2026-06-01", "advisory_days_public": 128, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "netatalk", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-49390.html", "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-49390", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-49390", "ghsa-repos": "https://github.com/Netatalk/netatalk/security/advisories/GHSA-mr8x-76wr-q995" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-41436", "state": "RESERVED", "public_date": "2026-06-01", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-06-01" }, "refs": "alas:CVE-2026-41436;debian:qemu", "description": "hw/uefi: verify pio_xfer_offset before calculating buffer checksum", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 128, "clock_known": true, "hours_public": 3072, "clock_origin": "advisory", "advisory_date": "2026-06-01", "advisory_days_public": 128, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-41436.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-41436" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-41437", "state": "RESERVED", "public_date": "2026-06-01", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-06-01" }, "refs": "alas:CVE-2026-41437;debian:qemu", "description": "Potential out-of-bound read.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 128, "clock_known": true, "hours_public": 3072, "clock_origin": "advisory", "advisory_date": "2026-06-01", "advisory_days_public": 128, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-41437.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-41437" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-41438", "state": "RESERVED", "public_date": "2026-06-01", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-06-01" }, "refs": "alas:CVE-2026-41438;debian:qemu", "description": "The vulnerability is a 16-bit integer wrap: when sizeof(*pe) + lv->name_size exceeds UINT16_MAX, the pe->size field (uint16_t) wraps, leading to memory corruption in the QEMU process.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 128, "clock_known": true, "hours_public": 3072, "clock_origin": "advisory", "advisory_date": "2026-06-01", "advisory_days_public": 128, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-41438.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-41438" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-8341", "state": "RESERVED", "public_date": "2026-06-01", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-06-01" }, "refs": "alas:CVE-2026-8341;debian:qemu", "description": "Qemu integer underflow in hw/uefi", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 128, "clock_known": true, "hours_public": 3072, "clock_origin": "advisory", "advisory_date": "2026-06-01", "advisory_days_public": 128, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-8341.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-8341" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-41440", "state": "RESERVED", "public_date": "2026-06-01", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-06-01" }, "refs": "alas:CVE-2026-41440;debian:qemu", "description": "hw/uefi: add var-service-auth.c", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 128, "clock_known": true, "hours_public": 3072, "clock_origin": "advisory", "advisory_date": "2026-06-01", "advisory_days_public": 128, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-41440.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-41440" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-28574", "state": "RESERVED", "public_date": "2026-06-01", "sources": "csaf,osv,samsung", "feed_count": 3, "dates": { "osv": "2026-06-01", "csaf": "2026-06-01", "samsung": "2026-06-01" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-1772\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1772.json;osv:Android:platform/packages/modules/Nfc;samsung:SMR-Jun-2026", "description": "In onServiceConnected of HostEmulationManager.java, there is a possible way to perform BAL due to a race condition.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 128, "clock_known": true, "hours_public": 3072, "clock_origin": "advisory", "advisory_date": "2026-06-01", "advisory_days_public": 128, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "platform/packages/modules/Nfc", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1772.json", "osv": "https://osv.dev/list?q=CVE-2026-28574", "samsung": "https://security.samsungmobile.com/securityUpdate.smsb" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-21538", "state": "RESERVED", "public_date": "2026-06-01", "sources": "csaf,osv,samsung", "feed_count": 3, "dates": { "osv": "2026-06-01", "csaf": "2026-06-01", "samsung": "2026-06-01" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-1772\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1772.json;osv:Android::unknown:;samsung:SMR-Jun-2026", "description": "CVE-2026-21538", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 128, "clock_known": true, "hours_public": 3072, "clock_origin": "advisory", "advisory_date": "2026-06-01", "advisory_days_public": 128, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1772.json", "osv": "https://osv.dev/list?q=CVE-2026-21538", "samsung": "https://security.samsungmobile.com/securityUpdate.smsb" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-21541", "state": "RESERVED", "public_date": "2026-06-01", "sources": "csaf,osv,samsung", "feed_count": 3, "dates": { "osv": "2026-06-01", "csaf": "2026-06-01", "samsung": "2026-06-01" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-1772\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1772.json;osv:Android::unknown:;samsung:SMR-Jun-2026", "description": "CVE-2026-21541", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 128, "clock_known": true, "hours_public": 3072, "clock_origin": "advisory", "advisory_date": "2026-06-01", "advisory_days_public": 128, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1772.json", "osv": "https://osv.dev/list?q=CVE-2026-21541", "samsung": "https://security.samsungmobile.com/securityUpdate.smsb" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-21542", "state": "RESERVED", "public_date": "2026-06-01", "sources": "csaf,osv,samsung", "feed_count": 3, "dates": { "osv": "2026-06-01", "csaf": "2026-06-01", "samsung": "2026-06-01" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-1772\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1772.json;osv:Android::unknown:;samsung:SMR-Jun-2026", "description": "CVE-2026-21542", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 128, "clock_known": true, "hours_public": 3072, "clock_origin": "advisory", "advisory_date": "2026-06-01", "advisory_days_public": 128, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1772.json", "osv": "https://osv.dev/list?q=CVE-2026-21542", "samsung": "https://security.samsungmobile.com/securityUpdate.smsb" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-21545", "state": "RESERVED", "public_date": "2026-06-01", "sources": "csaf,osv,samsung", "feed_count": 3, "dates": { "osv": "2026-06-01", "csaf": "2026-06-01", "samsung": "2026-06-01" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-1772\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1772.json;osv:Android::unknown:;samsung:SMR-Jun-2026", "description": "CVE-2026-21545", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 128, "clock_known": true, "hours_public": 3072, "clock_origin": "advisory", "advisory_date": "2026-06-01", "advisory_days_public": 128, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1772.json", "osv": "https://osv.dev/list?q=CVE-2026-21545", "samsung": "https://security.samsungmobile.com/securityUpdate.smsb" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-21539", "state": "RESERVED", "public_date": "2026-06-01", "sources": "csaf,osv,samsung", "feed_count": 3, "dates": { "osv": "2026-06-01", "csaf": "2026-06-01", "samsung": "2026-06-01" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-1772\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1772.json;osv:Android::unknown:;samsung:SMR-Jun-2026", "description": "CVE-2026-21539", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 128, "clock_known": true, "hours_public": 3072, "clock_origin": "advisory", "advisory_date": "2026-06-01", "advisory_days_public": 128, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1772.json", "osv": "https://osv.dev/list?q=CVE-2026-21539", "samsung": "https://security.samsungmobile.com/securityUpdate.smsb" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-21540", "state": "RESERVED", "public_date": "2026-06-01", "sources": "csaf,osv,samsung", "feed_count": 3, "dates": { "osv": "2026-06-01", "csaf": "2026-06-01", "samsung": "2026-06-01" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-1772\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1772.json;osv:Android::unknown:;samsung:SMR-Jun-2026", "description": "CVE-2026-21540", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 128, "clock_known": true, "hours_public": 3072, "clock_origin": "advisory", "advisory_date": "2026-06-01", "advisory_days_public": 128, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1772.json", "osv": "https://osv.dev/list?q=CVE-2026-21540", "samsung": "https://security.samsungmobile.com/securityUpdate.smsb" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-21543", "state": "RESERVED", "public_date": "2026-06-01", "sources": "csaf,osv,samsung", "feed_count": 3, "dates": { "osv": "2026-06-01", "csaf": "2026-06-01", "samsung": "2026-06-01" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-1772\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1772.json;osv:Android::unknown:;samsung:SMR-Jun-2026", "description": "CVE-2026-21543", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 128, "clock_known": true, "hours_public": 3072, "clock_origin": "advisory", "advisory_date": "2026-06-01", "advisory_days_public": 128, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1772.json", "osv": "https://osv.dev/list?q=CVE-2026-21543", "samsung": "https://security.samsungmobile.com/securityUpdate.smsb" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-21544", "state": "RESERVED", "public_date": "2026-06-01", "sources": "csaf,osv,samsung", "feed_count": 3, "dates": { "osv": "2026-06-01", "csaf": "2026-06-01", "samsung": "2026-06-01" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-1772\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1772.json;osv:Android::unknown:;samsung:SMR-Jun-2026", "description": "CVE-2026-21544", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 128, "clock_known": true, "hours_public": 3072, "clock_origin": "advisory", "advisory_date": "2026-06-01", "advisory_days_public": 128, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1772.json", "osv": "https://osv.dev/list?q=CVE-2026-21544", "samsung": "https://security.samsungmobile.com/securityUpdate.smsb" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-21546", "state": "RESERVED", "public_date": "2026-06-01", "sources": "csaf,osv,samsung", "feed_count": 3, "dates": { "osv": "2026-06-01", "csaf": "2026-06-01", "samsung": "2026-06-01" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-1772\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1772.json;osv:Android::unknown:;samsung:SMR-Jun-2026", "description": "CVE-2026-21546", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 128, "clock_known": true, "hours_public": 3072, "clock_origin": "advisory", "advisory_date": "2026-06-01", "advisory_days_public": 128, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1772.json", "osv": "https://osv.dev/list?q=CVE-2026-21546", "samsung": "https://security.samsungmobile.com/securityUpdate.smsb" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-21547", "state": "RESERVED", "public_date": "2026-06-01", "sources": "csaf,osv,samsung", "feed_count": 3, "dates": { "osv": "2026-06-01", "csaf": "2026-06-02", "samsung": "2026-06-01" }, "refs": "csaf:Nationaal Cyber Security Centrum\tNCSC-2026-0173\thttps://advisories.ncsc.nl/csaf/v2/2026/ncsc-2026-0173.json;osv:Android::unknown:;samsung:SMR-Jun-2026", "description": "CVE-2026-21547", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 128, "clock_known": true, "hours_public": 3072, "clock_origin": "advisory", "advisory_date": "2026-06-01", "advisory_days_public": 128, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "csaf": "https://advisories.ncsc.nl/csaf/v2/2026/ncsc-2026-0173.json", "osv": "https://osv.dev/list?q=CVE-2026-21547", "samsung": "https://security.samsungmobile.com/securityUpdate.smsb" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-11053", "state": "RESERVED", "public_date": "2026-06-02", "sources": "csaf,debian,msrc,redhat", "feed_count": 4, "dates": { "redhat": "2026-06-02", "csaf": "2026-08-31", "msrc": "2026-06-05" }, "refs": "csaf:SUSE Product Security Team\topenSUSE-SU-2026:21135-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21135-1.json;debian:chromium;msrc:msrc:2026-Jun;redhat:CVE-2026-11053", "description": "chromium-browser: chromium-browser: VULNERABILITY in WebRTC", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 127, "clock_known": true, "hours_public": 3048, "clock_origin": "advisory", "advisory_date": "2026-06-02", "advisory_days_public": 127, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "chromium", "ecosystem": "", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21135-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-11053", "msrc": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11053", "redhat": "https://access.redhat.com/security/cve/CVE-2026-11053" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-11099", "state": "RESERVED", "public_date": "2026-06-02", "sources": "csaf,debian,msrc,redhat", "feed_count": 4, "dates": { "redhat": "2026-06-02", "csaf": "2026-09-30", "msrc": "2026-06-05" }, "refs": "csaf:SUSE Product Security Team\tRHSA-2026:74084\thttps://ftp.suse.com/pub/projects/security/csaf/rhsa-2026_74084.json;debian:chromium;msrc:msrc:2026-Jun;redhat:CVE-2026-11099", "description": "chromium-browser: skia: chromium-browser: skia: Vulnerability in Skia", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 127, "clock_known": true, "hours_public": 3048, "clock_origin": "advisory", "advisory_date": "2026-06-02", "advisory_days_public": 127, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "chromium", "ecosystem": "", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2026_74084.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-11099", "msrc": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11099", "redhat": "https://access.redhat.com/security/cve/CVE-2026-11099" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-10615", "state": "RESERVED", "public_date": "2026-06-02", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-06-02" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-1781\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1781.json", "description": "CVE-2026-10615", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 127, "clock_known": true, "hours_public": 3048, "clock_origin": "advisory", "advisory_date": "2026-06-02", "advisory_days_public": 127, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1781.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-54462", "state": "RESERVED", "public_date": "2026-06-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-04" }, "refs": "ghsa-repos:knative/pkg\tGHSA-2hw4-c9m4-f2fj", "description": "knative/pkg repository advisory GHSA-2hw4-c9m4-f2fj", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 125, "clock_known": true, "hours_public": 3000, "clock_origin": "advisory", "advisory_date": "2026-06-04", "advisory_days_public": 125, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/knative/pkg/security/advisories/GHSA-2hw4-c9m4-f2fj" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-10040", "state": "RESERVED", "public_date": "2026-06-04", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-06-04" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-1789\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1789.json", "description": "CVE-2026-10040", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 125, "clock_known": true, "hours_public": 3000, "clock_origin": "advisory", "advisory_date": "2026-06-04", "advisory_days_public": 125, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1789.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-48041", "state": "RESERVED", "public_date": "2026-06-07", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-06-08", "csaf": "2026-06-07" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-1815\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1815.json;ghsa-repos:laravel/framework\tGHSA-crmm-hgp2-wgrp", "description": "laravel/framework repository advisory GHSA-crmm-hgp2-wgrp", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 122, "clock_known": true, "hours_public": 2928, "clock_origin": "advisory", "advisory_date": "2026-06-07", "advisory_days_public": 122, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1815.json", "ghsa-repos": "https://github.com/laravel/framework/security/advisories/GHSA-crmm-hgp2-wgrp" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-3886", "state": "RESERVED", "public_date": "2026-06-09", "sources": "alas,csaf,debian,zdi", "feed_count": 4, "dates": { "alas": "2026-07-10", "csaf": "2026-08-27", "zdi": "2026-06-09" }, "refs": "alas:CVE-2026-3886;csaf:SUSE Product Security Team\tSUSE-SU-2026:23362-1\thttps://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_23362-1.json;debian:qemu;zdi:ZDI-26-332", "description": "virtio-gpu: fix overflow check when allocating 2d image", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 120, "clock_known": true, "hours_public": 2880, "clock_origin": "advisory", "advisory_date": "2026-06-09", "advisory_days_public": 120, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-3886.html", "csaf": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_23362-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-3886", "zdi": "https://www.zerodayinitiative.com/advisories/ZDI-26-332/" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-52903", "state": "RESERVED", "public_date": "2026-06-09", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2026-06-09", "csaf": "2026-06-09" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-52903\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-52903.json;redhat:CVE-2026-52903", "description": "manageiq: YAML safe_load production fallback to unsafe_load enables RCE via deserialization", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 120, "clock_known": true, "hours_public": 2880, "clock_origin": "advisory", "advisory_date": "2026-06-09", "advisory_days_public": 120, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2026-52903", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-52903.json", "redhat": "https://access.redhat.com/security/cve/CVE-2026-52903" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-10797", "state": "RESERVED", "public_date": "2026-06-09", "sources": "certcc", "feed_count": 1, "dates": { "certcc": "2026-06-09" }, "refs": "certcc:VU#616257", "description": "Microsoft-signed UEFI shim bootloaders vulnerable to Secure Boot bypass", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 120, "clock_known": true, "hours_public": 2880, "clock_origin": "advisory", "advisory_date": "2026-06-09", "advisory_days_public": 120, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "certcc": "https://www.kb.cert.org/vuls/id/616257" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-45747", "state": "RESERVED", "public_date": "2026-06-11", "sources": "csaf,ghsa,osv", "feed_count": 3, "dates": { "ghsa": "2026-08-19", "osv": "2026-08-19", "csaf": "2026-06-11" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-1902\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1902.json;ghsa:GHSA-wf6j-gr27-g7ch;osv:Maven:org.geoserver:gs-main", "description": "GeoServer has a Server-Side Template Injection (SSTI) vulnerability in processing FreeMarker templates", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 118, "clock_known": true, "hours_public": 2832, "clock_origin": "advisory", "advisory_date": "2026-06-11", "advisory_days_public": 118, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "org.geoserver", "ecosystem": "Maven", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1902.json", "ghsa": "https://github.com/advisories/GHSA-wf6j-gr27-g7ch", "osv": "https://osv.dev/list?q=CVE-2024-45747" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-52849", "state": "RESERVED", "public_date": "2026-06-11", "sources": "zdi", "feed_count": 1, "dates": { "zdi": "2026-06-11" }, "refs": "zdi:ZDI-26-360", "description": "ZDI advisory ZDI-26-360", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 118, "clock_known": true, "hours_public": 2832, "clock_origin": "advisory", "advisory_date": "2026-06-11", "advisory_days_public": 118, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "zdi": "https://www.zerodayinitiative.com/advisories/ZDI-26-360/" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-12893", "state": "RESERVED", "public_date": "2026-06-12", "sources": "csaf,debian,redhat", "feed_count": 3, "dates": { "redhat": "2026-06-12", "csaf": "2026-08-03" }, "refs": "csaf:SUSE Product Security Team\tCVE-2026-12893\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-12893.json;debian:gst-libav1.0;redhat:CVE-2026-12893", "description": "gstreamer1-libav: gstreamer1-libav: NULL pointer dereference in gstavdemux.c error handler", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 117, "clock_known": true, "hours_public": 2808, "clock_origin": "advisory", "advisory_date": "2026-06-12", "advisory_days_public": 117, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gst-libav1.0", "ecosystem": "", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-12893.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-12893", "redhat": "https://access.redhat.com/security/cve/CVE-2026-12893" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-52717", "state": "RESERVED", "public_date": "2026-06-12", "sources": "csaf,debian,redhat", "feed_count": 3, "dates": { "redhat": "2026-06-12", "csaf": "2026-08-18" }, "refs": "csaf:SUSE Product Security Team\tCVE-2026-52717\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-52717.json;debian:gst-libav1.0;redhat:CVE-2026-52717", "description": "gstreamer1-plugin-libav: GStreamer: Denial of service via invalid free in gst-libav pipe protocol handler", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 117, "clock_known": true, "hours_public": 2808, "clock_origin": "advisory", "advisory_date": "2026-06-12", "advisory_days_public": 117, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gst-libav1.0", "ecosystem": "", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-52717.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-52717", "redhat": "https://access.redhat.com/security/cve/CVE-2026-52717" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-54697", "state": "RESERVED", "public_date": "2026-06-12", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-06-12", "osv": "2026-06-12" }, "refs": "ghsa:GHSA-vc8p-8pxg-rfwg;osv:Maven:org.connectbot.sshlib:sshlib", "description": "ConnectBot SSH Client Library: Excessive allocation and integer overflow in DER private-key parsing", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 117, "clock_known": true, "hours_public": 2808, "clock_origin": "advisory", "advisory_date": "2026-06-12", "advisory_days_public": 117, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "org.connectbot.sshlib", "ecosystem": "Maven", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-vc8p-8pxg-rfwg", "osv": "https://osv.dev/list?q=CVE-2026-54697" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-54700", "state": "RESERVED", "public_date": "2026-06-12", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-06-12", "osv": "2026-06-12" }, "refs": "ghsa:GHSA-ch3q-cw5r-f4hg;osv:Maven:org.connectbot.sshlib:sshlib", "description": "ConnectBot SSH Client Library: Unbounded SSH field lengths can cause excessive memory allocation", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 117, "clock_known": true, "hours_public": 2808, "clock_origin": "advisory", "advisory_date": "2026-06-12", "advisory_days_public": 117, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "org.connectbot.sshlib", "ecosystem": "Maven", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-ch3q-cw5r-f4hg", "osv": "https://osv.dev/list?q=CVE-2026-54700" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-53999", "state": "RESERVED", "public_date": "2026-06-12", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-06-12", "osv": "2026-06-12" }, "refs": "ghsa:GHSA-fp5j-4fj2-4jvq;osv:Go:github.com/radius-project/radius", "description": "Radius Controller May Delete a Container Resource via an Injected Deployment Annotation (Multi-Tenant Installs)", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 117, "clock_known": true, "hours_public": 2808, "clock_origin": "advisory", "advisory_date": "2026-06-12", "advisory_days_public": 117, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "github.com/radius-project/radius", "ecosystem": "Go", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-fp5j-4fj2-4jvq", "osv": "https://osv.dev/list?q=CVE-2026-53999" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-28975", "state": "RESERVED", "public_date": "2026-06-12", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-06-12", "osv": "2026-06-12" }, "refs": "ghsa:GHSA-6ph5-fww6-vfwv;osv:SwiftURL:github.com/apple/swift-nio-extras", "description": "NIOExtras: NIOHTTPRequestDecompressor ratio limit bypass via inflated Content-Length", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 117, "clock_known": true, "hours_public": 2808, "clock_origin": "advisory", "advisory_date": "2026-06-12", "advisory_days_public": 117, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "github.com/apple/swift-nio-extras", "ecosystem": "SwiftURL", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-6ph5-fww6-vfwv", "osv": "https://osv.dev/list?q=CVE-2026-28975" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-28980", "state": "RESERVED", "public_date": "2026-06-12", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-06-12", "osv": "2026-06-12" }, "refs": "ghsa:GHSA-rj37-6j9x-74q6;osv:SwiftURL:github.com/apple/swift-nio", "description": "SwiftNIO NIOHTTP1: HTTPDecoder accepts unbounded HTTP/1 header blocks, enabling remote DoS", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 117, "clock_known": true, "hours_public": 2808, "clock_origin": "advisory", "advisory_date": "2026-06-12", "advisory_days_public": 117, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "github.com/apple/swift-nio", "ecosystem": "SwiftURL", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-rj37-6j9x-74q6", "osv": "https://osv.dev/list?q=CVE-2026-28980" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-43671", "state": "RESERVED", "public_date": "2026-06-12", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-06-12", "osv": "2026-06-12" }, "refs": "ghsa:GHSA-r3rc-9hpw-54v9;osv:SwiftURL:github.com/apple/swift-nio", "description": "SwiftNIO: Out-of-bounds write via ByteBuffer index and length UInt32 overflow", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 117, "clock_known": true, "hours_public": 2808, "clock_origin": "advisory", "advisory_date": "2026-06-12", "advisory_days_public": 117, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "github.com/apple/swift-nio", "ecosystem": "SwiftURL", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-r3rc-9hpw-54v9", "osv": "https://osv.dev/list?q=CVE-2026-43671" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-28970", "state": "RESERVED", "public_date": "2026-06-12", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-06-12", "osv": "2026-06-12" }, "refs": "ghsa:GHSA-cq87-8r7h-962v;osv:SwiftURL:github.com/apple/swift-nio", "description": "SwiftNIO: CRLF Injection in outbound HTTP request URI via NIOHTTPRequestHeadersValidator", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 117, "clock_known": true, "hours_public": 2808, "clock_origin": "advisory", "advisory_date": "2026-06-12", "advisory_days_public": 117, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "github.com/apple/swift-nio", "ecosystem": "SwiftURL", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-cq87-8r7h-962v", "osv": "https://osv.dev/list?q=CVE-2026-28970" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55384", "state": "RESERVED", "public_date": "2026-06-12", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-12" }, "refs": "ghsa-repos:InvoiceShelf/InvoiceShelf\tGHSA-8c69-ch98-87r6", "description": "InvoiceShelf/InvoiceShelf repository advisory GHSA-8c69-ch98-87r6", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 117, "clock_known": true, "hours_public": 2808, "clock_origin": "advisory", "advisory_date": "2026-06-12", "advisory_days_public": 117, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/InvoiceShelf/InvoiceShelf/security/advisories/GHSA-8c69-ch98-87r6" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55385", "state": "RESERVED", "public_date": "2026-06-12", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-12" }, "refs": "ghsa-repos:InvoiceShelf/InvoiceShelf\tGHSA-mfxg-qphw-3f3g", "description": "InvoiceShelf/InvoiceShelf repository advisory GHSA-mfxg-qphw-3f3g", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 117, "clock_known": true, "hours_public": 2808, "clock_origin": "advisory", "advisory_date": "2026-06-12", "advisory_days_public": 117, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/InvoiceShelf/InvoiceShelf/security/advisories/GHSA-mfxg-qphw-3f3g" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55386", "state": "RESERVED", "public_date": "2026-06-12", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-12" }, "refs": "ghsa-repos:InvoiceShelf/InvoiceShelf\tGHSA-cp8p-jcqf-j39c", "description": "InvoiceShelf/InvoiceShelf repository advisory GHSA-cp8p-jcqf-j39c", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 117, "clock_known": true, "hours_public": 2808, "clock_origin": "advisory", "advisory_date": "2026-06-12", "advisory_days_public": 117, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/InvoiceShelf/InvoiceShelf/security/advisories/GHSA-cp8p-jcqf-j39c" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55383", "state": "RESERVED", "public_date": "2026-06-12", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-12" }, "refs": "ghsa-repos:InvoiceShelf/InvoiceShelf\tGHSA-73q7-2953-8gvx", "description": "InvoiceShelf/InvoiceShelf repository advisory GHSA-73q7-2953-8gvx", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 117, "clock_known": true, "hours_public": 2808, "clock_origin": "advisory", "advisory_date": "2026-06-12", "advisory_days_public": 117, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/InvoiceShelf/InvoiceShelf/security/advisories/GHSA-73q7-2953-8gvx" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55387", "state": "RESERVED", "public_date": "2026-06-12", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-12" }, "refs": "ghsa-repos:InvoiceShelf/InvoiceShelf\tGHSA-wxrv-73x6-8r62", "description": "InvoiceShelf/InvoiceShelf repository advisory GHSA-wxrv-73x6-8r62", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 117, "clock_known": true, "hours_public": 2808, "clock_origin": "advisory", "advisory_date": "2026-06-12", "advisory_days_public": 117, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/InvoiceShelf/InvoiceShelf/security/advisories/GHSA-wxrv-73x6-8r62" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55381", "state": "RESERVED", "public_date": "2026-06-12", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-12" }, "refs": "ghsa-repos:InvoiceShelf/InvoiceShelf\tGHSA-j2vg-rxqr-5vc9", "description": "InvoiceShelf/InvoiceShelf repository advisory GHSA-j2vg-rxqr-5vc9", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 117, "clock_known": true, "hours_public": 2808, "clock_origin": "advisory", "advisory_date": "2026-06-12", "advisory_days_public": 117, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/InvoiceShelf/InvoiceShelf/security/advisories/GHSA-j2vg-rxqr-5vc9" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55382", "state": "RESERVED", "public_date": "2026-06-12", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-12" }, "refs": "ghsa-repos:InvoiceShelf/InvoiceShelf\tGHSA-85wc-38p4-2wqq", "description": "InvoiceShelf/InvoiceShelf repository advisory GHSA-85wc-38p4-2wqq", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 117, "clock_known": true, "hours_public": 2808, "clock_origin": "advisory", "advisory_date": "2026-06-12", "advisory_days_public": 117, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/InvoiceShelf/InvoiceShelf/security/advisories/GHSA-85wc-38p4-2wqq" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55167", "state": "RESERVED", "public_date": "2026-06-12", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-12" }, "refs": "ghsa-repos:LDAPAccountManager/lam\tGHSA-xgjg-fchx-x3g3", "description": "LDAPAccountManager/lam repository advisory GHSA-xgjg-fchx-x3g3", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 117, "clock_known": true, "hours_public": 2808, "clock_origin": "advisory", "advisory_date": "2026-06-12", "advisory_days_public": 117, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/LDAPAccountManager/lam/security/advisories/GHSA-xgjg-fchx-x3g3" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55562", "state": "RESERVED", "public_date": "2026-06-13", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-13" }, "refs": "ghsa-repos:jhuckaby/Cronicle\tGHSA-vh39-3pcm-2j63", "description": "jhuckaby/Cronicle repository advisory GHSA-vh39-3pcm-2j63", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 116, "clock_known": true, "hours_public": 2784, "clock_origin": "advisory", "advisory_date": "2026-06-13", "advisory_days_public": 116, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/jhuckaby/Cronicle/security/advisories/GHSA-vh39-3pcm-2j63" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-54554", "state": "RESERVED", "public_date": "2026-06-14", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-14" }, "refs": "ghsa-repos:FOGProject/fogproject\tGHSA-q9gc-h2qc-qmx8", "description": "FOGProject/fogproject repository advisory GHSA-q9gc-h2qc-qmx8", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 115, "clock_known": true, "hours_public": 2760, "clock_origin": "advisory", "advisory_date": "2026-06-14", "advisory_days_public": 115, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/FOGProject/fogproject/security/advisories/GHSA-q9gc-h2qc-qmx8" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55572", "state": "RESERVED", "public_date": "2026-06-14", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-14" }, "refs": "ghsa-repos:e107inc/e107\tGHSA-5f75-c25x-59wx", "description": "e107inc/e107 repository advisory GHSA-5f75-c25x-59wx", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 115, "clock_known": true, "hours_public": 2760, "clock_origin": "advisory", "advisory_date": "2026-06-14", "advisory_days_public": 115, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/e107inc/e107/security/advisories/GHSA-5f75-c25x-59wx" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55573", "state": "RESERVED", "public_date": "2026-06-14", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-14" }, "refs": "ghsa-repos:e107inc/e107\tGHSA-c8h6-wpj3-4cr8", "description": "e107inc/e107 repository advisory GHSA-c8h6-wpj3-4cr8", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 115, "clock_known": true, "hours_public": 2760, "clock_origin": "advisory", "advisory_date": "2026-06-14", "advisory_days_public": 115, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/e107inc/e107/security/advisories/GHSA-c8h6-wpj3-4cr8" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-53922", "state": "RESERVED", "public_date": "2026-06-14", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-14" }, "refs": "ghsa-repos:openwrt/odhcpd\tGHSA-7hcw-g2jh-pqv5", "description": "openwrt/odhcpd repository advisory GHSA-7hcw-g2jh-pqv5", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 115, "clock_known": true, "hours_public": 2760, "clock_origin": "advisory", "advisory_date": "2026-06-14", "advisory_days_public": 115, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/openwrt/odhcpd/security/advisories/GHSA-7hcw-g2jh-pqv5" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-53582", "state": "RESERVED", "public_date": "2026-06-14", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-06-15", "csaf": "2026-06-14" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-1917\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1917.json;ghsa-repos:opnsense/core\tGHSA-xww7-76m6-mh2r", "description": "opnsense/core repository advisory GHSA-xww7-76m6-mh2r", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 115, "clock_known": true, "hours_public": 2760, "clock_origin": "advisory", "advisory_date": "2026-06-14", "advisory_days_public": 115, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1917.json", "ghsa-repos": "https://github.com/opnsense/core/security/advisories/GHSA-xww7-76m6-mh2r" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-39902", "state": "RESERVED", "public_date": "2026-06-15", "sources": "alpine,csaf,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-07-27", "csaf": "2026-06-15" }, "refs": "alpine:cacti;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-1931\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1931.json;ghsa-repos:Cacti/cacti\tGHSA-c4qp-j9r9-fq24", "description": "Cacti/cacti repository advisory GHSA-c4qp-j9r9-fq24", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 114, "clock_known": true, "hours_public": 2736, "clock_origin": "advisory", "advisory_date": "2026-06-15", "advisory_days_public": 114, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "cacti", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-39902", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1931.json", "ghsa-repos": "https://github.com/Cacti/cacti/security/advisories/GHSA-c4qp-j9r9-fq24" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-46531", "state": "RESERVED", "public_date": "2026-06-15", "sources": "alpine,csaf,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-06-18", "csaf": "2026-06-15" }, "refs": "alpine:cacti;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-1931\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1931.json;ghsa-repos:Cacti/cacti\tGHSA-37jj-rx8x-4wf2", "description": "Cacti/cacti repository advisory GHSA-37jj-rx8x-4wf2", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 114, "clock_known": true, "hours_public": 2736, "clock_origin": "advisory", "advisory_date": "2026-06-15", "advisory_days_public": 114, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "cacti", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-46531", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1931.json", "ghsa-repos": "https://github.com/Cacti/cacti/security/advisories/GHSA-37jj-rx8x-4wf2" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-54532", "state": "RESERVED", "public_date": "2026-06-15", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-15" }, "refs": "ghsa-repos:CloudPirates-io/helm-charts\tGHSA-gv8x-4mc5-r65r", "description": "CloudPirates-io/helm-charts repository advisory GHSA-gv8x-4mc5-r65r", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 114, "clock_known": true, "hours_public": 2736, "clock_origin": "advisory", "advisory_date": "2026-06-15", "advisory_days_public": 114, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/CloudPirates-io/helm-charts/security/advisories/GHSA-gv8x-4mc5-r65r" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-53711", "state": "RESERVED", "public_date": "2026-06-15", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-15" }, "refs": "ghsa-repos:IBM/mcp-context-forge\tGHSA-x6gc-rm5j-55mw", "description": "IBM/mcp-context-forge repository advisory GHSA-x6gc-rm5j-55mw", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 114, "clock_known": true, "hours_public": 2736, "clock_origin": "advisory", "advisory_date": "2026-06-15", "advisory_days_public": 114, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/IBM/mcp-context-forge/security/advisories/GHSA-x6gc-rm5j-55mw" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-53709", "state": "RESERVED", "public_date": "2026-06-15", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-15" }, "refs": "ghsa-repos:IBM/mcp-context-forge\tGHSA-m8rv-5m6m-32ff", "description": "IBM/mcp-context-forge repository advisory GHSA-m8rv-5m6m-32ff", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 114, "clock_known": true, "hours_public": 2736, "clock_origin": "advisory", "advisory_date": "2026-06-15", "advisory_days_public": 114, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/IBM/mcp-context-forge/security/advisories/GHSA-m8rv-5m6m-32ff" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55684", "state": "RESERVED", "public_date": "2026-06-15", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-15" }, "refs": "ghsa-repos:LabRedesCefetRJ/WeGIA\tGHSA-g2hm-m6gw-fcgg", "description": "LabRedesCefetRJ/WeGIA repository advisory GHSA-g2hm-m6gw-fcgg", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 114, "clock_known": true, "hours_public": 2736, "clock_origin": "advisory", "advisory_date": "2026-06-15", "advisory_days_public": 114, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-g2hm-m6gw-fcgg" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55683", "state": "RESERVED", "public_date": "2026-06-15", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-15" }, "refs": "ghsa-repos:LabRedesCefetRJ/WeGIA\tGHSA-vjxh-wcf9-4qgq", "description": "LabRedesCefetRJ/WeGIA repository advisory GHSA-vjxh-wcf9-4qgq", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 114, "clock_known": true, "hours_public": 2736, "clock_origin": "advisory", "advisory_date": "2026-06-15", "advisory_days_public": 114, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-vjxh-wcf9-4qgq" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55682", "state": "RESERVED", "public_date": "2026-06-15", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-15" }, "refs": "ghsa-repos:LabRedesCefetRJ/WeGIA\tGHSA-5xhr-jrv8-j4j2", "description": "LabRedesCefetRJ/WeGIA repository advisory GHSA-5xhr-jrv8-j4j2", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 114, "clock_known": true, "hours_public": 2736, "clock_origin": "advisory", "advisory_date": "2026-06-15", "advisory_days_public": 114, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-5xhr-jrv8-j4j2" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55681", "state": "RESERVED", "public_date": "2026-06-15", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-15" }, "refs": "ghsa-repos:LabRedesCefetRJ/WeGIA\tGHSA-9q8x-jqpj-23xp", "description": "LabRedesCefetRJ/WeGIA repository advisory GHSA-9q8x-jqpj-23xp", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 114, "clock_known": true, "hours_public": 2736, "clock_origin": "advisory", "advisory_date": "2026-06-15", "advisory_days_public": 114, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-9q8x-jqpj-23xp" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55680", "state": "RESERVED", "public_date": "2026-06-15", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-15" }, "refs": "ghsa-repos:LabRedesCefetRJ/WeGIA\tGHSA-fxcc-q2j6-w2rf", "description": "LabRedesCefetRJ/WeGIA repository advisory GHSA-fxcc-q2j6-w2rf", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 114, "clock_known": true, "hours_public": 2736, "clock_origin": "advisory", "advisory_date": "2026-06-15", "advisory_days_public": 114, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-fxcc-q2j6-w2rf" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55679", "state": "RESERVED", "public_date": "2026-06-15", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-15" }, "refs": "ghsa-repos:LabRedesCefetRJ/WeGIA\tGHSA-wm6j-4rfm-399q", "description": "LabRedesCefetRJ/WeGIA repository advisory GHSA-wm6j-4rfm-399q", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 114, "clock_known": true, "hours_public": 2736, "clock_origin": "advisory", "advisory_date": "2026-06-15", "advisory_days_public": 114, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-wm6j-4rfm-399q" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55644", "state": "RESERVED", "public_date": "2026-06-15", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-15" }, "refs": "ghsa-repos:element-hq/element-x-ios\tGHSA-54w7-rw44-49m7", "description": "element-hq/element-x-ios repository advisory GHSA-54w7-rw44-49m7", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 114, "clock_known": true, "hours_public": 2736, "clock_origin": "advisory", "advisory_date": "2026-06-15", "advisory_days_public": 114, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/element-hq/element-x-ios/security/advisories/GHSA-54w7-rw44-49m7" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-54459", "state": "RESERVED", "public_date": "2026-06-15", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-15" }, "refs": "ghsa-repos:error311/FileRise\tGHSA-jp5j-9px9-g47g", "description": "error311/FileRise repository advisory GHSA-jp5j-9px9-g47g", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 114, "clock_known": true, "hours_public": 2736, "clock_origin": "advisory", "advisory_date": "2026-06-15", "advisory_days_public": 114, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/error311/FileRise/security/advisories/GHSA-jp5j-9px9-g47g" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-44481", "state": "RESERVED", "public_date": "2026-06-15", "sources": "alpine,csaf", "feed_count": 2, "dates": { "csaf": "2026-06-15" }, "refs": "alpine:cacti;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-1931\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1931.json", "description": "CVE-2026-44481", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 114, "clock_known": true, "hours_public": 2736, "clock_origin": "advisory", "advisory_date": "2026-06-15", "advisory_days_public": 114, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "cacti", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-44481", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1931.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-39952", "state": "RESERVED", "public_date": "2026-06-15", "sources": "alpine,csaf", "feed_count": 2, "dates": { "csaf": "2026-06-15" }, "refs": "alpine:cacti;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-1931\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1931.json", "description": "CVE-2026-39952", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 114, "clock_known": true, "hours_public": 2736, "clock_origin": "advisory", "advisory_date": "2026-06-15", "advisory_days_public": 114, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "cacti", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-39952", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1931.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-40078", "state": "RESERVED", "public_date": "2026-06-15", "sources": "alpine,csaf", "feed_count": 2, "dates": { "csaf": "2026-06-15" }, "refs": "alpine:cacti;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-1931\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1931.json", "description": "CVE-2026-40078", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 114, "clock_known": true, "hours_public": 2736, "clock_origin": "advisory", "advisory_date": "2026-06-15", "advisory_days_public": 114, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "cacti", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-40078", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1931.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-39949", "state": "RESERVED", "public_date": "2026-06-15", "sources": "alpine,csaf", "feed_count": 2, "dates": { "csaf": "2026-06-15" }, "refs": "alpine:cacti;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-1931\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1931.json", "description": "CVE-2026-39949", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 114, "clock_known": true, "hours_public": 2736, "clock_origin": "advisory", "advisory_date": "2026-06-15", "advisory_days_public": 114, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "cacti", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-39949", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1931.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-40081", "state": "RESERVED", "public_date": "2026-06-15", "sources": "alpine,csaf", "feed_count": 2, "dates": { "csaf": "2026-06-15" }, "refs": "alpine:cacti;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-1931\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1931.json", "description": "CVE-2026-40081", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 114, "clock_known": true, "hours_public": 2736, "clock_origin": "advisory", "advisory_date": "2026-06-15", "advisory_days_public": 114, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "cacti", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-40081", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1931.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-39898", "state": "RESERVED", "public_date": "2026-06-15", "sources": "alpine,csaf", "feed_count": 2, "dates": { "csaf": "2026-06-15" }, "refs": "alpine:cacti;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-1931\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1931.json", "description": "CVE-2026-39898", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 114, "clock_known": true, "hours_public": 2736, "clock_origin": "advisory", "advisory_date": "2026-06-15", "advisory_days_public": 114, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "cacti", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-39898", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1931.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-41884", "state": "RESERVED", "public_date": "2026-06-15", "sources": "alpine,csaf", "feed_count": 2, "dates": { "csaf": "2026-06-15" }, "refs": "alpine:cacti;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-1931\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1931.json", "description": "CVE-2026-41884", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 114, "clock_known": true, "hours_public": 2736, "clock_origin": "advisory", "advisory_date": "2026-06-15", "advisory_days_public": 114, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "cacti", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-41884", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1931.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-39896", "state": "RESERVED", "public_date": "2026-06-15", "sources": "alpine,csaf", "feed_count": 2, "dates": { "csaf": "2026-06-15" }, "refs": "alpine:cacti;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-1931\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1931.json", "description": "CVE-2026-39896", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 114, "clock_known": true, "hours_public": 2736, "clock_origin": "advisory", "advisory_date": "2026-06-15", "advisory_days_public": 114, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "cacti", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-39896", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1931.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-39950", "state": "RESERVED", "public_date": "2026-06-15", "sources": "alpine,csaf", "feed_count": 2, "dates": { "csaf": "2026-06-15" }, "refs": "alpine:cacti;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-1931\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1931.json", "description": "CVE-2026-39950", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 114, "clock_known": true, "hours_public": 2736, "clock_origin": "advisory", "advisory_date": "2026-06-15", "advisory_days_public": 114, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "cacti", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-39950", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1931.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-39939", "state": "RESERVED", "public_date": "2026-06-15", "sources": "alpine,csaf", "feed_count": 2, "dates": { "csaf": "2026-06-15" }, "refs": "alpine:cacti;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-1931\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1931.json", "description": "CVE-2026-39939", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 114, "clock_known": true, "hours_public": 2736, "clock_origin": "advisory", "advisory_date": "2026-06-15", "advisory_days_public": 114, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "cacti", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-39939", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1931.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-39947", "state": "RESERVED", "public_date": "2026-06-15", "sources": "alpine,csaf", "feed_count": 2, "dates": { "csaf": "2026-06-15" }, "refs": "alpine:cacti;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-1931\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1931.json", "description": "CVE-2026-39947", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 114, "clock_known": true, "hours_public": 2736, "clock_origin": "advisory", "advisory_date": "2026-06-15", "advisory_days_public": 114, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "cacti", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-39947", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1931.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-39895", "state": "RESERVED", "public_date": "2026-06-15", "sources": "alpine,csaf", "feed_count": 2, "dates": { "csaf": "2026-06-15" }, "refs": "alpine:cacti;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-1931\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1931.json", "description": "CVE-2026-39895", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 114, "clock_known": true, "hours_public": 2736, "clock_origin": "advisory", "advisory_date": "2026-06-15", "advisory_days_public": 114, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "cacti", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-39895", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1931.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-53615", "state": "RESERVED", "public_date": "2026-06-16", "sources": "alas,csaf,debian,ghsa-repos", "feed_count": 4, "dates": { "alas": "2026-06-20", "ghsa-repos": "2026-06-16", "csaf": "2026-09-29" }, "refs": "alas:CVE-2026-53615;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3642\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3642.json;debian:util-linux;ghsa-repos:util-linux/util-linux\tGHSA-h4rw-gv36-wmp5", "description": "Integer Overflow or Wraparound in libblkid/src/partitions/dos.c", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 113, "clock_known": true, "hours_public": 2712, "clock_origin": "advisory", "advisory_date": "2026-06-16", "advisory_days_public": 113, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "util-linux", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-53615.html", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3642.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-53615", "ghsa-repos": "https://github.com/util-linux/util-linux/security/advisories/GHSA-h4rw-gv36-wmp5" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-53614", "state": "RESERVED", "public_date": "2026-06-16", "sources": "alas,csaf,debian,ghsa-repos,redhat", "feed_count": 5, "dates": { "alas": "2026-06-20", "ghsa-repos": "2026-06-16", "redhat": "2026-06-16", "csaf": "2026-09-22" }, "refs": "alas:CVE-2026-53614;csaf:SUSE Product Security Team\tSUSE-SU-2026:23884-1\thttps://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_23884-1.json;debian:util-linux;ghsa-repos:util-linux/util-linux\tGHSA-67r7-8m5w-22wx;redhat:CVE-2026-53614", "description": "Local Privilege Escalation via LIBMOUNT_FORCE_MOUNT2 Environment Variable - nosuid/noexec Bypass in SUID mount(8)", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 113, "clock_known": true, "hours_public": 2712, "clock_origin": "advisory", "advisory_date": "2026-06-16", "advisory_days_public": 113, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "util-linux", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-53614.html", "csaf": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_23884-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-53614", "ghsa-repos": "https://github.com/util-linux/util-linux/security/advisories/GHSA-67r7-8m5w-22wx", "redhat": "https://access.redhat.com/security/cve/CVE-2026-53614" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-53612", "state": "RESERVED", "public_date": "2026-06-16", "sources": "alas,csaf,debian,ghsa-repos,redhat", "feed_count": 5, "dates": { "alas": "2026-06-20", "ghsa-repos": "2026-06-16", "redhat": "2026-06-16", "csaf": "2026-09-22" }, "refs": "alas:CVE-2026-53612;csaf:SUSE Product Security Team\tSUSE-SU-2026:23884-1\thttps://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_23884-1.json;debian:util-linux;ghsa-repos:util-linux/util-linux\tGHSA-g8wm-75wr-g2vh;redhat:CVE-2026-53612", "description": "Local Privilege Escalation via TOCTOU in mount(8) hook_owner.c chmod/chown", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 113, "clock_known": true, "hours_public": 2712, "clock_origin": "advisory", "advisory_date": "2026-06-16", "advisory_days_public": 113, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "util-linux", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-53612.html", "csaf": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_23884-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-53612", "ghsa-repos": "https://github.com/util-linux/util-linux/security/advisories/GHSA-g8wm-75wr-g2vh", "redhat": "https://access.redhat.com/security/cve/CVE-2026-53612" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-53613", "state": "RESERVED", "public_date": "2026-06-16", "sources": "alas,csaf,debian,ghsa-repos,redhat", "feed_count": 5, "dates": { "alas": "2026-06-20", "ghsa-repos": "2026-06-16", "redhat": "2026-06-16", "csaf": "2026-09-22" }, "refs": "alas:CVE-2026-53613;csaf:SUSE Product Security Team\tSUSE-SU-2026:23884-1\thttps://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_23884-1.json;debian:util-linux;ghsa-repos:util-linux/util-linux\tGHSA-8gj5-72r3-428g;redhat:CVE-2026-53613", "description": "Local Privilege Escalation via TOCTOU in mount(8) - Target Path Redirection", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 113, "clock_known": true, "hours_public": 2712, "clock_origin": "advisory", "advisory_date": "2026-06-16", "advisory_days_public": 113, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "util-linux", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-53613.html", "csaf": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_23884-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-53613", "ghsa-repos": "https://github.com/util-linux/util-linux/security/advisories/GHSA-8gj5-72r3-428g", "redhat": "https://access.redhat.com/security/cve/CVE-2026-53613" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55842", "state": "RESERVED", "public_date": "2026-06-16", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-16" }, "refs": "ghsa-repos:Erudika/scoold\tGHSA-q684-4jqv-c63c", "description": "Erudika/scoold repository advisory GHSA-q684-4jqv-c63c", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 113, "clock_known": true, "hours_public": 2712, "clock_origin": "advisory", "advisory_date": "2026-06-16", "advisory_days_public": 113, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Erudika/scoold/security/advisories/GHSA-q684-4jqv-c63c" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55840", "state": "RESERVED", "public_date": "2026-06-16", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-16" }, "refs": "ghsa-repos:Erudika/scoold\tGHSA-85fm-6f2v-74pq", "description": "Erudika/scoold repository advisory GHSA-85fm-6f2v-74pq", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 113, "clock_known": true, "hours_public": 2712, "clock_origin": "advisory", "advisory_date": "2026-06-16", "advisory_days_public": 113, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Erudika/scoold/security/advisories/GHSA-85fm-6f2v-74pq" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55835", "state": "RESERVED", "public_date": "2026-06-16", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-16" }, "refs": "ghsa-repos:Lookyloo/lookyloo\tGHSA-66gj-hmcp-5cfj", "description": "Lookyloo/lookyloo repository advisory GHSA-66gj-hmcp-5cfj", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 113, "clock_known": true, "hours_public": 2712, "clock_origin": "advisory", "advisory_date": "2026-06-16", "advisory_days_public": 113, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Lookyloo/lookyloo/security/advisories/GHSA-66gj-hmcp-5cfj" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-54631", "state": "RESERVED", "public_date": "2026-06-16", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-16" }, "refs": "ghsa-repos:Part-DB/Part-DB-server\tGHSA-99pw-2v29-v4wc", "description": "Part-DB/Part-DB-server repository advisory GHSA-99pw-2v29-v4wc", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 113, "clock_known": true, "hours_public": 2712, "clock_origin": "advisory", "advisory_date": "2026-06-16", "advisory_days_public": 113, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Part-DB/Part-DB-server/security/advisories/GHSA-99pw-2v29-v4wc" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-54630", "state": "RESERVED", "public_date": "2026-06-16", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-16" }, "refs": "ghsa-repos:Part-DB/Part-DB-server\tGHSA-w5m7-3xf7-6g7g", "description": "Part-DB/Part-DB-server repository advisory GHSA-w5m7-3xf7-6g7g", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 113, "clock_known": true, "hours_public": 2712, "clock_origin": "advisory", "advisory_date": "2026-06-16", "advisory_days_public": 113, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Part-DB/Part-DB-server/security/advisories/GHSA-w5m7-3xf7-6g7g" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-54615", "state": "RESERVED", "public_date": "2026-06-16", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-16" }, "refs": "ghsa-repos:Part-DB/Part-DB-server\tGHSA-gp89-jfq9-x8r9", "description": "Part-DB/Part-DB-server repository advisory GHSA-gp89-jfq9-x8r9", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 113, "clock_known": true, "hours_public": 2712, "clock_origin": "advisory", "advisory_date": "2026-06-16", "advisory_days_public": 113, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Part-DB/Part-DB-server/security/advisories/GHSA-gp89-jfq9-x8r9" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55103", "state": "RESERVED", "public_date": "2026-06-16", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-16" }, "refs": "ghsa-repos:discourse/discourse-activity-pub\tGHSA-jw39-rch6-mhwf", "description": "discourse/discourse-activity-pub repository advisory GHSA-jw39-rch6-mhwf", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 113, "clock_known": true, "hours_public": 2712, "clock_origin": "advisory", "advisory_date": "2026-06-16", "advisory_days_public": 113, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/discourse/discourse-activity-pub/security/advisories/GHSA-jw39-rch6-mhwf" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55796", "state": "RESERVED", "public_date": "2026-06-16", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-16" }, "refs": "ghsa-repos:frappe/hrms\tGHSA-c32r-q985-64xr", "description": "frappe/hrms repository advisory GHSA-c32r-q985-64xr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 113, "clock_known": true, "hours_public": 2712, "clock_origin": "advisory", "advisory_date": "2026-06-16", "advisory_days_public": 113, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/frappe/hrms/security/advisories/GHSA-c32r-q985-64xr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-54657", "state": "RESERVED", "public_date": "2026-06-16", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-16" }, "refs": "ghsa-repos:open-zaak/open-zaak\tGHSA-f29q-7rpr-jmjx", "description": "open-zaak/open-zaak repository advisory GHSA-f29q-7rpr-jmjx", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 113, "clock_known": true, "hours_public": 2712, "clock_origin": "advisory", "advisory_date": "2026-06-16", "advisory_days_public": 113, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/open-zaak/open-zaak/security/advisories/GHSA-f29q-7rpr-jmjx" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55836", "state": "RESERVED", "public_date": "2026-06-16", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-16" }, "refs": "ghsa-repos:open-zaak/open-zaak\tGHSA-x5cj-23hr-5r54", "description": "open-zaak/open-zaak repository advisory GHSA-x5cj-23hr-5r54", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 113, "clock_known": true, "hours_public": 2712, "clock_origin": "advisory", "advisory_date": "2026-06-16", "advisory_days_public": 113, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/open-zaak/open-zaak/security/advisories/GHSA-x5cj-23hr-5r54" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55862", "state": "RESERVED", "public_date": "2026-06-16", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-16" }, "refs": "ghsa-repos:pupnp/pupnp\tGHSA-25cx-xv8x-j247", "description": "pupnp/pupnp repository advisory GHSA-25cx-xv8x-j247", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 113, "clock_known": true, "hours_public": 2712, "clock_origin": "advisory", "advisory_date": "2026-06-16", "advisory_days_public": 113, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/pupnp/pupnp/security/advisories/GHSA-25cx-xv8x-j247" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-54238", "state": "RESERVED", "public_date": "2026-06-16", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-16" }, "refs": "ghsa-repos:supabase/realtime\tGHSA-hg9h-6mhq-6c2v", "description": "supabase/realtime repository advisory GHSA-hg9h-6mhq-6c2v", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 113, "clock_known": true, "hours_public": 2712, "clock_origin": "advisory", "advisory_date": "2026-06-16", "advisory_days_public": 113, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/supabase/realtime/security/advisories/GHSA-hg9h-6mhq-6c2v" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-68405", "state": "RESERVED", "public_date": "2026-06-16", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-06-16" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-1966\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1966.json", "description": "CVE-2025-68405", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 113, "clock_known": true, "hours_public": 2712, "clock_origin": "advisory", "advisory_date": "2026-06-16", "advisory_days_public": 113, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1966.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55453", "state": "RESERVED", "public_date": "2026-06-17", "sources": "alpine,csaf,debian,ghsa-repos", "feed_count": 4, "dates": { "ghsa-repos": "2026-06-17", "csaf": "2026-10-07" }, "refs": "alpine:cups;csaf:SUSE Product Security Team\tCVE-2026-55453\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-55453.json;debian:cups;ghsa-repos:OpenPrinting/cups\tGHSA-7hqf-mfhx-7r3v", "description": "OpenPrinting/cups repository advisory GHSA-7hqf-mfhx-7r3v", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 112, "clock_known": true, "hours_public": 2688, "clock_origin": "advisory", "advisory_date": "2026-06-17", "advisory_days_public": 112, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "cups", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-55453", "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-55453.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-55453", "ghsa-repos": "https://github.com/OpenPrinting/cups/security/advisories/GHSA-7hqf-mfhx-7r3v" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55480", "state": "RESERVED", "public_date": "2026-06-17", "sources": "csaf,debian,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-06-17", "csaf": "2026-10-07" }, "refs": "csaf:SUSE Product Security Team\tCVE-2026-55480\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-55480.json;debian:cups;ghsa-repos:OpenPrinting/cups\tGHSA-jj94-x3qh-ffp9", "description": "OpenPrinting/cups repository advisory GHSA-jj94-x3qh-ffp9", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 112, "clock_known": true, "hours_public": 2688, "clock_origin": "advisory", "advisory_date": "2026-06-17", "advisory_days_public": 112, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "cups", "ecosystem": "", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-55480.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-55480", "ghsa-repos": "https://github.com/OpenPrinting/cups/security/advisories/GHSA-jj94-x3qh-ffp9" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-54711", "state": "RESERVED", "public_date": "2026-06-17", "sources": "ghsa,ghsa-repos,osv", "feed_count": 3, "dates": { "ghsa": "2026-06-18", "ghsa-repos": "2026-06-17", "osv": "2026-06-18" }, "refs": "ghsa-repos:Aiven-Open/pghoard\tGHSA-mpx4-jmpr-vm8v;ghsa:GHSA-mpx4-jmpr-vm8v;osv:PyPI:pghoard", "description": "PGHoard: Password written to debug log", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 112, "clock_known": true, "hours_public": 2688, "clock_origin": "advisory", "advisory_date": "2026-06-17", "advisory_days_public": 112, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "pghoard", "ecosystem": "PyPI", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-mpx4-jmpr-vm8v", "ghsa-repos": "https://github.com/Aiven-Open/pghoard/security/advisories/GHSA-mpx4-jmpr-vm8v", "osv": "https://osv.dev/list?q=CVE-2026-54711" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57144", "state": "RESERVED", "public_date": "2026-06-17", "sources": "ghsa,ghsa-repos,osv", "feed_count": 3, "dates": { "ghsa": "2026-06-18", "ghsa-repos": "2026-06-17", "osv": "2026-06-18" }, "refs": "ghsa-repos:MervinPraison/PraisonAI\tGHSA-6jcq-6546-qrrw;ghsa:GHSA-6jcq-6546-qrrw;osv:PyPI:praisonai", "description": "PraisonAI SandlockSandbox falls back to unrestricted subprocess execution when Landlock is unavailable", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 112, "clock_known": true, "hours_public": 2688, "clock_origin": "advisory", "advisory_date": "2026-06-17", "advisory_days_public": 112, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "praisonai", "ecosystem": "PyPI", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-6jcq-6546-qrrw", "ghsa-repos": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-6jcq-6546-qrrw", "osv": "https://osv.dev/list?q=CVE-2026-57144" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57143", "state": "RESERVED", "public_date": "2026-06-17", "sources": "ghsa,ghsa-repos,osv", "feed_count": 3, "dates": { "ghsa": "2026-06-18", "ghsa-repos": "2026-06-17", "osv": "2026-06-18" }, "refs": "ghsa-repos:MervinPraison/PraisonAI\tGHSA-4pcv-mg8v-vrgf;ghsa:GHSA-4pcv-mg8v-vrgf;osv:PyPI:praisonaiagents", "description": "PraisonAI: Server-Side Request Forgery (SSRF) in SearxNG / search_web tools via attacker-controlled searxng_url parameter", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 112, "clock_known": true, "hours_public": 2688, "clock_origin": "advisory", "advisory_date": "2026-06-17", "advisory_days_public": 112, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "praisonaiagents", "ecosystem": "PyPI", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-4pcv-mg8v-vrgf", "ghsa-repos": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-4pcv-mg8v-vrgf", "osv": "https://osv.dev/list?q=CVE-2026-57143" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57146", "state": "RESERVED", "public_date": "2026-06-17", "sources": "ghsa,ghsa-repos,osv", "feed_count": 3, "dates": { "ghsa": "2026-06-18", "ghsa-repos": "2026-06-17", "osv": "2026-06-18" }, "refs": "ghsa-repos:MervinPraison/PraisonAI\tGHSA-jxcw-qp4h-6jfq;ghsa:GHSA-jxcw-qp4h-6jfq;osv:PyPI:praisonai", "description": "PraisonAI A2U incomplete authentication fix leaves current serve command unauthenticated by default", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 112, "clock_known": true, "hours_public": 2688, "clock_origin": "advisory", "advisory_date": "2026-06-17", "advisory_days_public": 112, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "praisonai", "ecosystem": "PyPI", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-jxcw-qp4h-6jfq", "ghsa-repos": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-jxcw-qp4h-6jfq", "osv": "https://osv.dev/list?q=CVE-2026-57146" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57142", "state": "RESERVED", "public_date": "2026-06-17", "sources": "ghsa,ghsa-repos,osv", "feed_count": 3, "dates": { "ghsa": "2026-06-18", "ghsa-repos": "2026-06-17", "osv": "2026-06-18" }, "refs": "ghsa-repos:MervinPraison/PraisonAI\tGHSA-7qw2-w5rc-37x2;ghsa:GHSA-7qw2-w5rc-37x2;osv:PyPI:praisonai", "description": "PraisonAI recipe workflow policy can be bypassed by declaring and YAML-approving dangerous tools outside TEMPLATE.yaml", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 112, "clock_known": true, "hours_public": 2688, "clock_origin": "advisory", "advisory_date": "2026-06-17", "advisory_days_public": 112, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "praisonai", "ecosystem": "PyPI", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-7qw2-w5rc-37x2", "ghsa-repos": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-7qw2-w5rc-37x2", "osv": "https://osv.dev/list?q=CVE-2026-57142" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57113", "state": "RESERVED", "public_date": "2026-06-17", "sources": "ghsa,ghsa-repos,osv", "feed_count": 3, "dates": { "ghsa": "2026-06-18", "ghsa-repos": "2026-06-17", "osv": "2026-06-18" }, "refs": "ghsa-repos:MervinPraison/PraisonAI\tGHSA-f44v-7qgw-9gh9;ghsa:GHSA-f44v-7qgw-9gh9;osv:PyPI:praisonai", "description": "PraisonAI GitHub template cache path traversal allows outside-cache file write and directory deletion", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 112, "clock_known": true, "hours_public": 2688, "clock_origin": "advisory", "advisory_date": "2026-06-17", "advisory_days_public": 112, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "praisonai", "ecosystem": "PyPI", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-f44v-7qgw-9gh9", "ghsa-repos": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-f44v-7qgw-9gh9", "osv": "https://osv.dev/list?q=CVE-2026-57113" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57121", "state": "RESERVED", "public_date": "2026-06-17", "sources": "ghsa,ghsa-repos,osv", "feed_count": 3, "dates": { "ghsa": "2026-06-18", "ghsa-repos": "2026-06-17", "osv": "2026-06-18" }, "refs": "ghsa-repos:MervinPraison/PraisonAI\tGHSA-rh39-9c67-59mh;ghsa:GHSA-rh39-9c67-59mh;osv:PyPI:praisonai-platform", "description": "PraisonAI: Missing ownership check on DELETE endpoints allows members to delete others' content in Platform API", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 112, "clock_known": true, "hours_public": 2688, "clock_origin": "advisory", "advisory_date": "2026-06-17", "advisory_days_public": 112, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "praisonai-platform", "ecosystem": "PyPI", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-rh39-9c67-59mh", "ghsa-repos": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-rh39-9c67-59mh", "osv": "https://osv.dev/list?q=CVE-2026-57121" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57116", "state": "RESERVED", "public_date": "2026-06-17", "sources": "ghsa,ghsa-repos,osv", "feed_count": 3, "dates": { "ghsa": "2026-06-18", "ghsa-repos": "2026-06-17", "osv": "2026-06-18" }, "refs": "ghsa-repos:MervinPraison/PraisonAI\tGHSA-892r-p3jq-jp24;ghsa:GHSA-892r-p3jq-jp24;osv:PyPI:praisonai", "description": "PraisonAI: AgentOS remains unauthenticated after incomplete fix version and allows remote agent invocation", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 112, "clock_known": true, "hours_public": 2688, "clock_origin": "advisory", "advisory_date": "2026-06-17", "advisory_days_public": 112, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "praisonai", "ecosystem": "PyPI", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-892r-p3jq-jp24", "ghsa-repos": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-892r-p3jq-jp24", "osv": "https://osv.dev/list?q=CVE-2026-57116" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57118", "state": "RESERVED", "public_date": "2026-06-17", "sources": "ghsa,ghsa-repos,osv", "feed_count": 3, "dates": { "ghsa": "2026-06-18", "ghsa-repos": "2026-06-17", "osv": "2026-06-18" }, "refs": "ghsa-repos:MervinPraison/PraisonAI\tGHSA-x8cv-xmq7-p8xp;ghsa:GHSA-x8cv-xmq7-p8xp;osv:PyPI:praisonaiagents", "description": "PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpoints", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 112, "clock_known": true, "hours_public": 2688, "clock_origin": "advisory", "advisory_date": "2026-06-17", "advisory_days_public": 112, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "praisonaiagents", "ecosystem": "PyPI", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-x8cv-xmq7-p8xp", "ghsa-repos": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-x8cv-xmq7-p8xp", "osv": "https://osv.dev/list?q=CVE-2026-57118" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57114", "state": "RESERVED", "public_date": "2026-06-17", "sources": "ghsa,ghsa-repos,osv", "feed_count": 3, "dates": { "ghsa": "2026-06-18", "ghsa-repos": "2026-06-17", "osv": "2026-06-18" }, "refs": "ghsa-repos:MervinPraison/PraisonAI\tGHSA-rjvw-7vvw-549v;ghsa:GHSA-rjvw-7vvw-549v;osv:PyPI:praisonai", "description": "PraisonAI: Jobs webhook SSRF protection bypass via DNS rebinding", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 112, "clock_known": true, "hours_public": 2688, "clock_origin": "advisory", "advisory_date": "2026-06-17", "advisory_days_public": 112, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "praisonai", "ecosystem": "PyPI", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-rjvw-7vvw-549v", "ghsa-repos": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-rjvw-7vvw-549v", "osv": "https://osv.dev/list?q=CVE-2026-57114" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57117", "state": "RESERVED", "public_date": "2026-06-17", "sources": "ghsa,ghsa-repos,osv", "feed_count": 3, "dates": { "ghsa": "2026-06-18", "ghsa-repos": "2026-06-17", "osv": "2026-06-18" }, "refs": "ghsa-repos:MervinPraison/PraisonAI\tGHSA-w6h2-fr4q-xvxv;ghsa:GHSA-w6h2-fr4q-xvxv;osv:PyPI:praisonai", "description": "PraisonAI: Compute-bridged file tools allow shell command injection", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 112, "clock_known": true, "hours_public": 2688, "clock_origin": "advisory", "advisory_date": "2026-06-17", "advisory_days_public": 112, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "praisonai", "ecosystem": "PyPI", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-w6h2-fr4q-xvxv", "ghsa-repos": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-w6h2-fr4q-xvxv", "osv": "https://osv.dev/list?q=CVE-2026-57117" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-56838", "state": "RESERVED", "public_date": "2026-06-17", "sources": "ghsa,ghsa-repos,osv", "feed_count": 3, "dates": { "ghsa": "2026-06-18", "ghsa-repos": "2026-06-17", "osv": "2026-06-18" }, "refs": "ghsa-repos:MervinPraison/PraisonAI\tGHSA-v847-hxxw-3pxg;ghsa:GHSA-v847-hxxw-3pxg;osv:PyPI:praisonai", "description": "PraisonAI recipe.run_stream skips dangerous-tool policy enforcement", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 112, "clock_known": true, "hours_public": 2688, "clock_origin": "advisory", "advisory_date": "2026-06-17", "advisory_days_public": 112, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "praisonai", "ecosystem": "PyPI", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-v847-hxxw-3pxg", "ghsa-repos": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-v847-hxxw-3pxg", "osv": "https://osv.dev/list?q=CVE-2026-56838" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-56840", "state": "RESERVED", "public_date": "2026-06-17", "sources": "ghsa,ghsa-repos,osv", "feed_count": 3, "dates": { "ghsa": "2026-06-18", "ghsa-repos": "2026-06-17", "osv": "2026-06-18" }, "refs": "ghsa-repos:MervinPraison/PraisonAI\tGHSA-63v4-w882-g4x2;ghsa:GHSA-63v4-w882-g4x2;osv:PyPI:praisonai", "description": "PraisonAI: HTTPApproval dashboard renders tool arguments as raw HTML, allowing approval-page XSS to approve dangerous tools", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 112, "clock_known": true, "hours_public": 2688, "clock_origin": "advisory", "advisory_date": "2026-06-17", "advisory_days_public": 112, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "praisonai", "ecosystem": "PyPI", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-63v4-w882-g4x2", "ghsa-repos": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-63v4-w882-g4x2", "osv": "https://osv.dev/list?q=CVE-2026-56840" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-56837", "state": "RESERVED", "public_date": "2026-06-17", "sources": "ghsa,ghsa-repos,osv", "feed_count": 3, "dates": { "ghsa": "2026-06-18", "ghsa-repos": "2026-06-17", "osv": "2026-06-18" }, "refs": "ghsa-repos:MervinPraison/PraisonAI\tGHSA-fc26-m9pf-v56q;ghsa:GHSA-fc26-m9pf-v56q;osv:PyPI:praisonai", "description": "PraisonAI LinearBot processes unsigned webhooks when LINEAR_WEBHOOK_SECRET is missing", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 112, "clock_known": true, "hours_public": 2688, "clock_origin": "advisory", "advisory_date": "2026-06-17", "advisory_days_public": 112, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "praisonai", "ecosystem": "PyPI", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-fc26-m9pf-v56q", "ghsa-repos": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-fc26-m9pf-v56q", "osv": "https://osv.dev/list?q=CVE-2026-56837" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-56834", "state": "RESERVED", "public_date": "2026-06-17", "sources": "ghsa,ghsa-repos,osv", "feed_count": 3, "dates": { "ghsa": "2026-06-18", "ghsa-repos": "2026-06-17", "osv": "2026-06-18" }, "refs": "ghsa-repos:MervinPraison/PraisonAI\tGHSA-j7qx-p75m-wp7g;ghsa:GHSA-j7qx-p75m-wp7g;osv:PyPI:praisonai", "description": "PraisonAI dynamic-context artifact tools read arbitrary host files outside artifact storage", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 112, "clock_known": true, "hours_public": 2688, "clock_origin": "advisory", "advisory_date": "2026-06-17", "advisory_days_public": 112, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "praisonai", "ecosystem": "PyPI", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-j7qx-p75m-wp7g", "ghsa-repos": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-j7qx-p75m-wp7g", "osv": "https://osv.dev/list?q=CVE-2026-56834" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-56835", "state": "RESERVED", "public_date": "2026-06-17", "sources": "ghsa,ghsa-repos,osv", "feed_count": 3, "dates": { "ghsa": "2026-06-18", "ghsa-repos": "2026-06-17", "osv": "2026-06-18" }, "refs": "ghsa-repos:MervinPraison/PraisonAI\tGHSA-qvpf-j64c-jmhr;ghsa:GHSA-qvpf-j64c-jmhr;osv:PyPI:praisonai", "description": "PraisonAI Slack app_mention bypasses configured user/channel authorization", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 112, "clock_known": true, "hours_public": 2688, "clock_origin": "advisory", "advisory_date": "2026-06-17", "advisory_days_public": 112, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "praisonai", "ecosystem": "PyPI", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-qvpf-j64c-jmhr", "ghsa-repos": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-qvpf-j64c-jmhr", "osv": "https://osv.dev/list?q=CVE-2026-56835" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-56836", "state": "RESERVED", "public_date": "2026-06-17", "sources": "ghsa,ghsa-repos,osv", "feed_count": 3, "dates": { "ghsa": "2026-06-18", "ghsa-repos": "2026-06-17", "osv": "2026-06-18" }, "refs": "ghsa-repos:MervinPraison/PraisonAI\tGHSA-5qw8-f2g9-ff29;ghsa:GHSA-5qw8-f2g9-ff29;osv:PyPI:praisonai", "description": "PraisonAI recipe serve Typer command bypasses the non-localhost authentication guard", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 112, "clock_known": true, "hours_public": 2688, "clock_origin": "advisory", "advisory_date": "2026-06-17", "advisory_days_public": 112, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "praisonai", "ecosystem": "PyPI", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-5qw8-f2g9-ff29", "ghsa-repos": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-5qw8-f2g9-ff29", "osv": "https://osv.dev/list?q=CVE-2026-56836" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-56833", "state": "RESERVED", "public_date": "2026-06-17", "sources": "ghsa,ghsa-repos,osv", "feed_count": 3, "dates": { "ghsa": "2026-06-18", "ghsa-repos": "2026-06-17", "osv": "2026-06-18" }, "refs": "ghsa-repos:MervinPraison/PraisonAI\tGHSA-22cj-m4wf-fv2c;ghsa:GHSA-22cj-m4wf-fv2c;osv:PyPI:praisonai", "description": "PraisonAI Dynamic Context history and terminal tools read files outside configured storage via path traversal", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 112, "clock_known": true, "hours_public": 2688, "clock_origin": "advisory", "advisory_date": "2026-06-17", "advisory_days_public": 112, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "praisonai", "ecosystem": "PyPI", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-22cj-m4wf-fv2c", "ghsa-repos": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-22cj-m4wf-fv2c", "osv": "https://osv.dev/list?q=CVE-2026-56833" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-56832", "state": "RESERVED", "public_date": "2026-06-17", "sources": "ghsa,ghsa-repos,osv", "feed_count": 3, "dates": { "ghsa": "2026-06-18", "ghsa-repos": "2026-06-17", "osv": "2026-06-18" }, "refs": "ghsa-repos:MervinPraison/PraisonAI\tGHSA-8579-rgg5-ph2m;ghsa:GHSA-8579-rgg5-ph2m;osv:PyPI:praisonai", "description": "PraisonAI DiscordApproval accepts unrelated channel messages as dangerous-tool approvals", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 112, "clock_known": true, "hours_public": 2688, "clock_origin": "advisory", "advisory_date": "2026-06-17", "advisory_days_public": 112, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "praisonai", "ecosystem": "PyPI", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-8579-rgg5-ph2m", "ghsa-repos": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-8579-rgg5-ph2m", "osv": "https://osv.dev/list?q=CVE-2026-56832" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57183", "state": "RESERVED", "public_date": "2026-06-17", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-17" }, "refs": "ghsa-repos:Erudika/scoold\tGHSA-6q9q-cqq5-hvmq", "description": "Erudika/scoold repository advisory GHSA-6q9q-cqq5-hvmq", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 112, "clock_known": true, "hours_public": 2688, "clock_origin": "advisory", "advisory_date": "2026-06-17", "advisory_days_public": 112, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Erudika/scoold/security/advisories/GHSA-6q9q-cqq5-hvmq" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55467", "state": "RESERVED", "public_date": "2026-06-17", "sources": "alpine,csaf,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-06-17", "csaf": "2026-10-07" }, "refs": "alpine:cups;csaf:SUSE Product Security Team\tCVE-2026-55467\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-55467.json;ghsa-repos:OpenPrinting/cups\tGHSA-69qc-prxg-h2c7", "description": "OpenPrinting/cups repository advisory GHSA-69qc-prxg-h2c7", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 112, "clock_known": true, "hours_public": 2688, "clock_origin": "advisory", "advisory_date": "2026-06-17", "advisory_days_public": 112, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "cups", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-55467", "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-55467.json", "ghsa-repos": "https://github.com/OpenPrinting/cups/security/advisories/GHSA-69qc-prxg-h2c7" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55422", "state": "RESERVED", "public_date": "2026-06-17", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-17" }, "refs": "ghsa-repos:conda-forge/conda-forge.github.io\tGHSA-r5vj-wgjv-r524", "description": "conda-forge/conda-forge.github.io repository advisory GHSA-r5vj-wgjv-r524", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 112, "clock_known": true, "hours_public": 2688, "clock_origin": "advisory", "advisory_date": "2026-06-17", "advisory_days_public": 112, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/conda-forge/conda-forge.github.io/security/advisories/GHSA-r5vj-wgjv-r524" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55498", "state": "RESERVED", "public_date": "2026-06-17", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-17" }, "refs": "ghsa-repos:error311/FileRise\tGHSA-83rw-5ffw-p798", "description": "error311/FileRise repository advisory GHSA-83rw-5ffw-p798", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 112, "clock_known": true, "hours_public": 2688, "clock_origin": "advisory", "advisory_date": "2026-06-17", "advisory_days_public": 112, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/error311/FileRise/security/advisories/GHSA-83rw-5ffw-p798" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55888", "state": "RESERVED", "public_date": "2026-06-17", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-17" }, "refs": "ghsa-repos:flatpak/xdg-desktop-portal\tGHSA-cm83-2936-gxjm", "description": "flatpak/xdg-desktop-portal repository advisory GHSA-cm83-2936-gxjm", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 112, "clock_known": true, "hours_public": 2688, "clock_origin": "advisory", "advisory_date": "2026-06-17", "advisory_days_public": 112, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/flatpak/xdg-desktop-portal/security/advisories/GHSA-cm83-2936-gxjm" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55889", "state": "RESERVED", "public_date": "2026-06-17", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-17" }, "refs": "ghsa-repos:flatpak/xdg-desktop-portal\tGHSA-c5cf-79w8-pvfh", "description": "flatpak/xdg-desktop-portal repository advisory GHSA-c5cf-79w8-pvfh", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 112, "clock_known": true, "hours_public": 2688, "clock_origin": "advisory", "advisory_date": "2026-06-17", "advisory_days_public": 112, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/flatpak/xdg-desktop-portal/security/advisories/GHSA-c5cf-79w8-pvfh" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-48741", "state": "RESERVED", "public_date": "2026-06-17", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-17" }, "refs": "ghsa-repos:mz-automation/libiec61850\tGHSA-8mfr-hq64-9w33", "description": "mz-automation/libiec61850 repository advisory GHSA-8mfr-hq64-9w33", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 112, "clock_known": true, "hours_public": 2688, "clock_origin": "advisory", "advisory_date": "2026-06-17", "advisory_days_public": 112, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/mz-automation/libiec61850/security/advisories/GHSA-8mfr-hq64-9w33" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-48503", "state": "RESERVED", "public_date": "2026-06-17", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-17" }, "refs": "ghsa-repos:mz-automation/libiec61850\tGHSA-4c8m-jr3r-h8j2", "description": "mz-automation/libiec61850 repository advisory GHSA-4c8m-jr3r-h8j2", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 112, "clock_known": true, "hours_public": 2688, "clock_origin": "advisory", "advisory_date": "2026-06-17", "advisory_days_public": 112, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/mz-automation/libiec61850/security/advisories/GHSA-4c8m-jr3r-h8j2" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55606", "state": "RESERVED", "public_date": "2026-06-17", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-17" }, "refs": "ghsa-repos:openwrt/odhcpd\tGHSA-x8x4-7gvf-gp45", "description": "openwrt/odhcpd repository advisory GHSA-x8x4-7gvf-gp45", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 112, "clock_known": true, "hours_public": 2688, "clock_origin": "advisory", "advisory_date": "2026-06-17", "advisory_days_public": 112, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/openwrt/odhcpd/security/advisories/GHSA-x8x4-7gvf-gp45" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57488", "state": "RESERVED", "public_date": "2026-06-17", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-17" }, "refs": "ghsa-repos:pupnp/pupnp\tGHSA-g6c2-x4r9-352g", "description": "pupnp/pupnp repository advisory GHSA-g6c2-x4r9-352g", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 112, "clock_known": true, "hours_public": 2688, "clock_origin": "advisory", "advisory_date": "2026-06-17", "advisory_days_public": 112, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/pupnp/pupnp/security/advisories/GHSA-g6c2-x4r9-352g" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57486", "state": "RESERVED", "public_date": "2026-06-17", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-17" }, "refs": "ghsa-repos:pupnp/pupnp\tGHSA-q54q-vx78-v9rq", "description": "pupnp/pupnp repository advisory GHSA-q54q-vx78-v9rq", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 112, "clock_known": true, "hours_public": 2688, "clock_origin": "advisory", "advisory_date": "2026-06-17", "advisory_days_public": 112, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/pupnp/pupnp/security/advisories/GHSA-q54q-vx78-v9rq" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57487", "state": "RESERVED", "public_date": "2026-06-17", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-17" }, "refs": "ghsa-repos:pupnp/pupnp\tGHSA-gcj7-j9f7-q84c", "description": "pupnp/pupnp repository advisory GHSA-gcj7-j9f7-q84c", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 112, "clock_known": true, "hours_public": 2688, "clock_origin": "advisory", "advisory_date": "2026-06-17", "advisory_days_public": 112, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/pupnp/pupnp/security/advisories/GHSA-gcj7-j9f7-q84c" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57496", "state": "RESERVED", "public_date": "2026-06-18", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-06-18", "osv": "2026-06-18" }, "refs": "ghsa:GHSA-hxpf-9xvq-wph8;osv:PyPI:netlicensing-mcp", "description": "netlicensing-mcp: REST Path Traversal Bypasses Token Redaction", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 111, "clock_known": true, "hours_public": 2664, "clock_origin": "advisory", "advisory_date": "2026-06-18", "advisory_days_public": 111, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "netlicensing-mcp", "ecosystem": "PyPI", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-hxpf-9xvq-wph8", "osv": "https://osv.dev/list?q=CVE-2026-57496" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-54683", "state": "RESERVED", "public_date": "2026-06-18", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-06-18", "osv": "2026-06-18" }, "refs": "ghsa:GHSA-jr45-52cw-69h5;osv:Maven:nl.nl-portal:documenten-api", "description": "NL Portal Backend Libraries: Document contents remained downloadable by any logged-in user (incomplete fix of CVE-2026-49463)", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 111, "clock_known": true, "hours_public": 2664, "clock_origin": "advisory", "advisory_date": "2026-06-18", "advisory_days_public": 111, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "nl.nl-portal", "ecosystem": "Maven", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-jr45-52cw-69h5", "osv": "https://osv.dev/list?q=CVE-2026-54683" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57209", "state": "RESERVED", "public_date": "2026-06-18", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-06-18", "osv": "2026-06-18" }, "refs": "ghsa:GHSA-4jgr-pg2m-m988;osv:Go:github.com/dadrus/heimdall", "description": "Heimdall: Forwarded Header Injection via Unsanitized Host Header in Proxy Mode", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 111, "clock_known": true, "hours_public": 2664, "clock_origin": "advisory", "advisory_date": "2026-06-18", "advisory_days_public": 111, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "github.com/dadrus/heimdall", "ecosystem": "Go", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-4jgr-pg2m-m988", "osv": "https://osv.dev/list?q=CVE-2026-57209" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57210", "state": "RESERVED", "public_date": "2026-06-18", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-06-18", "osv": "2026-06-18" }, "refs": "ghsa:GHSA-38x9-25wx-7fg2;osv:Go:https://github.com/dadrus/heimdall", "description": "Heimdall: IP Spoofing via Unvalidated Forwarding Headers", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 111, "clock_known": true, "hours_public": 2664, "clock_origin": "advisory", "advisory_date": "2026-06-18", "advisory_days_public": 111, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "https", "ecosystem": "Go", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-38x9-25wx-7fg2", "osv": "https://osv.dev/list?q=CVE-2026-57210" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57569", "state": "RESERVED", "public_date": "2026-06-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-18" }, "refs": "ghsa-repos:LycheeOrg/Lychee\tGHSA-vj35-v9x5-vrxh", "description": "LycheeOrg/Lychee repository advisory GHSA-vj35-v9x5-vrxh", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 111, "clock_known": true, "hours_public": 2664, "clock_origin": "advisory", "advisory_date": "2026-06-18", "advisory_days_public": 111, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/LycheeOrg/Lychee/security/advisories/GHSA-vj35-v9x5-vrxh" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57568", "state": "RESERVED", "public_date": "2026-06-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-18" }, "refs": "ghsa-repos:LycheeOrg/Lychee\tGHSA-pgfr-x389-5p2h", "description": "LycheeOrg/Lychee repository advisory GHSA-pgfr-x389-5p2h", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 111, "clock_known": true, "hours_public": 2664, "clock_origin": "advisory", "advisory_date": "2026-06-18", "advisory_days_public": 111, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/LycheeOrg/Lychee/security/advisories/GHSA-pgfr-x389-5p2h" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55587", "state": "RESERVED", "public_date": "2026-06-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-18" }, "refs": "ghsa-repos:aliasvault/aliasvault\tGHSA-f99p-jfhr-6ffc", "description": "aliasvault/aliasvault repository advisory GHSA-f99p-jfhr-6ffc", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 111, "clock_known": true, "hours_public": 2664, "clock_origin": "advisory", "advisory_date": "2026-06-18", "advisory_days_public": 111, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/aliasvault/aliasvault/security/advisories/GHSA-f99p-jfhr-6ffc" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-47168", "state": "RESERVED", "public_date": "2026-06-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-18" }, "refs": "ghsa-repos:espocrm/espocrm\tGHSA-7q78-jjr9-mqcg", "description": "espocrm/espocrm repository advisory GHSA-7q78-jjr9-mqcg", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 111, "clock_known": true, "hours_public": 2664, "clock_origin": "advisory", "advisory_date": "2026-06-18", "advisory_days_public": 111, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/espocrm/espocrm/security/advisories/GHSA-7q78-jjr9-mqcg" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-46708", "state": "RESERVED", "public_date": "2026-06-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-18" }, "refs": "ghsa-repos:espocrm/espocrm\tGHSA-mqp6-23xq-7q3r", "description": "espocrm/espocrm repository advisory GHSA-mqp6-23xq-7q3r", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 111, "clock_known": true, "hours_public": 2664, "clock_origin": "advisory", "advisory_date": "2026-06-18", "advisory_days_public": 111, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/espocrm/espocrm/security/advisories/GHSA-mqp6-23xq-7q3r" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-46694", "state": "RESERVED", "public_date": "2026-06-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-18" }, "refs": "ghsa-repos:espocrm/espocrm\tGHSA-cg9f-34hj-p238", "description": "espocrm/espocrm repository advisory GHSA-cg9f-34hj-p238", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 111, "clock_known": true, "hours_public": 2664, "clock_origin": "advisory", "advisory_date": "2026-06-18", "advisory_days_public": 111, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/espocrm/espocrm/security/advisories/GHSA-cg9f-34hj-p238" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-46691", "state": "RESERVED", "public_date": "2026-06-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-18" }, "refs": "ghsa-repos:espocrm/espocrm\tGHSA-rrcj-rhc2-ch5q", "description": "espocrm/espocrm repository advisory GHSA-rrcj-rhc2-ch5q", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 111, "clock_known": true, "hours_public": 2664, "clock_origin": "advisory", "advisory_date": "2026-06-18", "advisory_days_public": 111, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/espocrm/espocrm/security/advisories/GHSA-rrcj-rhc2-ch5q" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55222", "state": "RESERVED", "public_date": "2026-06-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-18" }, "refs": "ghsa-repos:ilbers/isar\tGHSA-rq66-pfw5-whqq", "description": "ilbers/isar repository advisory GHSA-rq66-pfw5-whqq", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 111, "clock_known": true, "hours_public": 2664, "clock_origin": "advisory", "advisory_date": "2026-06-18", "advisory_days_public": 111, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ilbers/isar/security/advisories/GHSA-rq66-pfw5-whqq" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55486", "state": "RESERVED", "public_date": "2026-06-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-18" }, "refs": "ghsa-repos:intranda/goobi-viewer-core\tGHSA-975w-g9gj-xq48", "description": "intranda/goobi-viewer-core repository advisory GHSA-975w-g9gj-xq48", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 111, "clock_known": true, "hours_public": 2664, "clock_origin": "advisory", "advisory_date": "2026-06-18", "advisory_days_public": 111, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/intranda/goobi-viewer-core/security/advisories/GHSA-975w-g9gj-xq48" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55465", "state": "RESERVED", "public_date": "2026-06-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-18" }, "refs": "ghsa-repos:intranda/goobi-viewer-core\tGHSA-v5h4-qrx3-qg3h", "description": "intranda/goobi-viewer-core repository advisory GHSA-v5h4-qrx3-qg3h", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 111, "clock_known": true, "hours_public": 2664, "clock_origin": "advisory", "advisory_date": "2026-06-18", "advisory_days_public": 111, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/intranda/goobi-viewer-core/security/advisories/GHSA-v5h4-qrx3-qg3h" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55463", "state": "RESERVED", "public_date": "2026-06-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-18" }, "refs": "ghsa-repos:intranda/goobi-viewer-core\tGHSA-h5m9-fpvw-qr36", "description": "intranda/goobi-viewer-core repository advisory GHSA-h5m9-fpvw-qr36", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 111, "clock_known": true, "hours_public": 2664, "clock_origin": "advisory", "advisory_date": "2026-06-18", "advisory_days_public": 111, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/intranda/goobi-viewer-core/security/advisories/GHSA-h5m9-fpvw-qr36" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55459", "state": "RESERVED", "public_date": "2026-06-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-18" }, "refs": "ghsa-repos:intranda/goobi-viewer-core\tGHSA-7vrv-qh6g-gfx7", "description": "intranda/goobi-viewer-core repository advisory GHSA-7vrv-qh6g-gfx7", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 111, "clock_known": true, "hours_public": 2664, "clock_origin": "advisory", "advisory_date": "2026-06-18", "advisory_days_public": 111, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/intranda/goobi-viewer-core/security/advisories/GHSA-7vrv-qh6g-gfx7" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55457", "state": "RESERVED", "public_date": "2026-06-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-18" }, "refs": "ghsa-repos:intranda/goobi-viewer-core\tGHSA-4qpq-f4r6-7cc6", "description": "intranda/goobi-viewer-core repository advisory GHSA-4qpq-f4r6-7cc6", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 111, "clock_known": true, "hours_public": 2664, "clock_origin": "advisory", "advisory_date": "2026-06-18", "advisory_days_public": 111, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/intranda/goobi-viewer-core/security/advisories/GHSA-4qpq-f4r6-7cc6" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55444", "state": "RESERVED", "public_date": "2026-06-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-18" }, "refs": "ghsa-repos:intranda/goobi-viewer-core\tGHSA-763m-wjm9-6873", "description": "intranda/goobi-viewer-core repository advisory GHSA-763m-wjm9-6873", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 111, "clock_known": true, "hours_public": 2664, "clock_origin": "advisory", "advisory_date": "2026-06-18", "advisory_days_public": 111, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/intranda/goobi-viewer-core/security/advisories/GHSA-763m-wjm9-6873" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55442", "state": "RESERVED", "public_date": "2026-06-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-18" }, "refs": "ghsa-repos:intranda/goobi-viewer-core\tGHSA-2r24-qxpf-cj65", "description": "intranda/goobi-viewer-core repository advisory GHSA-2r24-qxpf-cj65", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 111, "clock_known": true, "hours_public": 2664, "clock_origin": "advisory", "advisory_date": "2026-06-18", "advisory_days_public": 111, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/intranda/goobi-viewer-core/security/advisories/GHSA-2r24-qxpf-cj65" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-46652", "state": "RESERVED", "public_date": "2026-06-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-18" }, "refs": "ghsa-repos:intranda/goobi-viewer-core\tGHSA-r386-2frm-w3v6", "description": "intranda/goobi-viewer-core repository advisory GHSA-r386-2frm-w3v6", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 111, "clock_known": true, "hours_public": 2664, "clock_origin": "advisory", "advisory_date": "2026-06-18", "advisory_days_public": 111, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/intranda/goobi-viewer-core/security/advisories/GHSA-r386-2frm-w3v6" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-46651", "state": "RESERVED", "public_date": "2026-06-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-18" }, "refs": "ghsa-repos:intranda/goobi-viewer-core\tGHSA-79jg-3m2m-jgc8", "description": "intranda/goobi-viewer-core repository advisory GHSA-79jg-3m2m-jgc8", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 111, "clock_known": true, "hours_public": 2664, "clock_origin": "advisory", "advisory_date": "2026-06-18", "advisory_days_public": 111, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/intranda/goobi-viewer-core/security/advisories/GHSA-79jg-3m2m-jgc8" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-46347", "state": "RESERVED", "public_date": "2026-06-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-18" }, "refs": "ghsa-repos:intranda/goobi-viewer-core\tGHSA-hw9w-7r6g-2fjc", "description": "intranda/goobi-viewer-core repository advisory GHSA-hw9w-7r6g-2fjc", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 111, "clock_known": true, "hours_public": 2664, "clock_origin": "advisory", "advisory_date": "2026-06-18", "advisory_days_public": 111, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/intranda/goobi-viewer-core/security/advisories/GHSA-hw9w-7r6g-2fjc" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-46346", "state": "RESERVED", "public_date": "2026-06-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-18" }, "refs": "ghsa-repos:intranda/goobi-viewer-core\tGHSA-gj5g-4rxf-8rmq", "description": "intranda/goobi-viewer-core repository advisory GHSA-gj5g-4rxf-8rmq", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 111, "clock_known": true, "hours_public": 2664, "clock_origin": "advisory", "advisory_date": "2026-06-18", "advisory_days_public": 111, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/intranda/goobi-viewer-core/security/advisories/GHSA-gj5g-4rxf-8rmq" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-53918", "state": "RESERVED", "public_date": "2026-06-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-18" }, "refs": "ghsa-repos:openwrt/odhcpd\tGHSA-44ff-jcwh-wgc2", "description": "openwrt/odhcpd repository advisory GHSA-44ff-jcwh-wgc2", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 111, "clock_known": true, "hours_public": 2664, "clock_origin": "advisory", "advisory_date": "2026-06-18", "advisory_days_public": 111, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/openwrt/odhcpd/security/advisories/GHSA-44ff-jcwh-wgc2" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-53920", "state": "RESERVED", "public_date": "2026-06-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-18" }, "refs": "ghsa-repos:openwrt/odhcpd\tGHSA-p769-5v73-pc4f", "description": "openwrt/odhcpd repository advisory GHSA-p769-5v73-pc4f", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 111, "clock_known": true, "hours_public": 2664, "clock_origin": "advisory", "advisory_date": "2026-06-18", "advisory_days_public": 111, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/openwrt/odhcpd/security/advisories/GHSA-p769-5v73-pc4f" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-53921", "state": "RESERVED", "public_date": "2026-06-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-18" }, "refs": "ghsa-repos:openwrt/odhcpd\tGHSA-7fwx-hhrg-3496", "description": "openwrt/odhcpd repository advisory GHSA-7fwx-hhrg-3496", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 111, "clock_known": true, "hours_public": 2664, "clock_origin": "advisory", "advisory_date": "2026-06-18", "advisory_days_public": 111, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/openwrt/odhcpd/security/advisories/GHSA-7fwx-hhrg-3496" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-41083", "state": "RESERVED", "public_date": "2026-06-18", "sources": "alpine,osv", "feed_count": 2, "dates": { "osv": "2026-06-18" }, "refs": "alpine:ocaml;osv:opam:ocaml", "description": "Windows command execution via filename quotes.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 111, "clock_known": true, "hours_public": 2664, "clock_origin": "advisory", "advisory_date": "2026-06-18", "advisory_days_public": 111, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "ocaml", "ecosystem": "opam", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-41083", "osv": "https://osv.dev/list?q=CVE-2026-41083" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55414", "state": "RESERVED", "public_date": "2026-06-19", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-06-19", "osv": "2026-06-19" }, "refs": "ghsa:GHSA-xm3x-9cfw-jhx4;osv:Maven:nl.nl-portal:form", "description": "NL Portal Backend Libraries: Unauthenticated form resolver forwards the privileged Objecten-API token to a caller-supplied URL (SSRF)", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 110, "clock_known": true, "hours_public": 2640, "clock_origin": "advisory", "advisory_date": "2026-06-19", "advisory_days_public": 110, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "nl.nl-portal", "ecosystem": "Maven", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-xm3x-9cfw-jhx4", "osv": "https://osv.dev/list?q=CVE-2026-55414" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-49442", "state": "RESERVED", "public_date": "2026-06-19", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-06-19", "csaf": "2026-06-21" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2018\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2018.json;ghsa-repos:Cacti/cacti\tGHSA-m7v2-f3xw-3qh7", "description": "Cacti/cacti repository advisory GHSA-m7v2-f3xw-3qh7", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 110, "clock_known": true, "hours_public": 2640, "clock_origin": "advisory", "advisory_date": "2026-06-19", "advisory_days_public": 110, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2018.json", "ghsa-repos": "https://github.com/Cacti/cacti/security/advisories/GHSA-m7v2-f3xw-3qh7" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-58255", "state": "RESERVED", "public_date": "2026-06-19", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-19" }, "refs": "ghsa-repos:jhuckaby/Cronicle\tGHSA-9xpg-9w3g-mpwj", "description": "jhuckaby/Cronicle repository advisory GHSA-9xpg-9w3g-mpwj", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 110, "clock_known": true, "hours_public": 2640, "clock_origin": "advisory", "advisory_date": "2026-06-19", "advisory_days_public": 110, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/jhuckaby/Cronicle/security/advisories/GHSA-9xpg-9w3g-mpwj" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-58202", "state": "RESERVED", "public_date": "2026-06-19", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-19" }, "refs": "ghsa-repos:open-reception/appointment-booking-software\tGHSA-w5g9-g2p4-2g4m", "description": "open-reception/appointment-booking-software repository advisory GHSA-w5g9-g2p4-2g4m", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 110, "clock_known": true, "hours_public": 2640, "clock_origin": "advisory", "advisory_date": "2026-06-19", "advisory_days_public": 110, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/open-reception/appointment-booking-software/security/advisories/GHSA-w5g9-g2p4-2g4m" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-58496", "state": "RESERVED", "public_date": "2026-06-19", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-19" }, "refs": "ghsa-repos:thorvg/thorvg\tGHSA-crfw-c34f-vqrj", "description": "thorvg/thorvg repository advisory GHSA-crfw-c34f-vqrj", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 110, "clock_known": true, "hours_public": 2640, "clock_origin": "advisory", "advisory_date": "2026-06-19", "advisory_days_public": 110, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/thorvg/thorvg/security/advisories/GHSA-crfw-c34f-vqrj" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-36849", "state": "RESERVED", "public_date": "2026-06-20", "sources": "alas,csaf,debian", "feed_count": 3, "dates": { "alas": "2026-06-20", "csaf": "2026-07-17" }, "refs": "alas:CVE-2026-36849;csaf:SUSE Product Security Team\tSUSE-SU-2026:22796-1\thttps://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_22796-1.json;debian:tiff", "description": "Denial of Service via large SamplesPerPixel tag", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 109, "clock_known": true, "hours_public": 2616, "clock_origin": "advisory", "advisory_date": "2026-06-20", "advisory_days_public": 109, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "tiff", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-36849.html", "csaf": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_22796-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-36849" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-44179", "state": "RESERVED", "public_date": "2026-06-21", "sources": "ghsa,ghsa-repos,osv", "feed_count": 3, "dates": { "ghsa": "2026-06-22", "ghsa-repos": "2026-06-21", "osv": "2026-06-22" }, "refs": "ghsa-repos:xwikisas/xwiki-pro-macros\tGHSA-w56x-9778-rppx;ghsa:GHSA-w56x-9778-rppx;osv:Maven:com.xwiki.pro:xwiki-pro-macros", "description": "xwiki-pro-macros has remote code execution from page title and content via excerpt-include macro", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 108, "clock_known": true, "hours_public": 2592, "clock_origin": "advisory", "advisory_date": "2026-06-21", "advisory_days_public": 108, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "com.xwiki.pro", "ecosystem": "Maven", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-w56x-9778-rppx", "ghsa-repos": "https://github.com/xwikisas/xwiki-pro-macros/security/advisories/GHSA-w56x-9778-rppx", "osv": "https://osv.dev/list?q=CVE-2026-44179" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-59959", "state": "RESERVED", "public_date": "2026-06-21", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-21" }, "refs": "ghsa-repos:HappySeaFox/sail\tGHSA-5g8g-g347-84m8", "description": "HappySeaFox/sail repository advisory GHSA-5g8g-g347-84m8", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 108, "clock_known": true, "hours_public": 2592, "clock_origin": "advisory", "advisory_date": "2026-06-21", "advisory_days_public": 108, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/HappySeaFox/sail/security/advisories/GHSA-5g8g-g347-84m8" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-59967", "state": "RESERVED", "public_date": "2026-06-21", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-21" }, "refs": "ghsa-repos:TandoorRecipes/recipes\tGHSA-4vw7-c646-g23w", "description": "TandoorRecipes/recipes repository advisory GHSA-4vw7-c646-g23w", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 108, "clock_known": true, "hours_public": 2592, "clock_origin": "advisory", "advisory_date": "2026-06-21", "advisory_days_public": 108, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-4vw7-c646-g23w" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-59970", "state": "RESERVED", "public_date": "2026-06-21", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-21" }, "refs": "ghsa-repos:TandoorRecipes/recipes\tGHSA-wq4h-2r8x-cv65", "description": "TandoorRecipes/recipes repository advisory GHSA-wq4h-2r8x-cv65", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 108, "clock_known": true, "hours_public": 2592, "clock_origin": "advisory", "advisory_date": "2026-06-21", "advisory_days_public": 108, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-wq4h-2r8x-cv65" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-59962", "state": "RESERVED", "public_date": "2026-06-21", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-21" }, "refs": "ghsa-repos:TandoorRecipes/recipes\tGHSA-4x57-2q4q-xwpp", "description": "TandoorRecipes/recipes repository advisory GHSA-4x57-2q4q-xwpp", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 108, "clock_known": true, "hours_public": 2592, "clock_origin": "advisory", "advisory_date": "2026-06-21", "advisory_days_public": 108, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-4x57-2q4q-xwpp" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-59963", "state": "RESERVED", "public_date": "2026-06-21", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-21" }, "refs": "ghsa-repos:TandoorRecipes/recipes\tGHSA-cqj3-64qw-4w52", "description": "TandoorRecipes/recipes repository advisory GHSA-cqj3-64qw-4w52", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 108, "clock_known": true, "hours_public": 2592, "clock_origin": "advisory", "advisory_date": "2026-06-21", "advisory_days_public": 108, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-cqj3-64qw-4w52" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-59966", "state": "RESERVED", "public_date": "2026-06-21", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-21" }, "refs": "ghsa-repos:TandoorRecipes/recipes\tGHSA-f2gw-c2c7-59v7", "description": "TandoorRecipes/recipes repository advisory GHSA-f2gw-c2c7-59v7", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 108, "clock_known": true, "hours_public": 2592, "clock_origin": "advisory", "advisory_date": "2026-06-21", "advisory_days_public": 108, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-f2gw-c2c7-59v7" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-50539", "state": "RESERVED", "public_date": "2026-06-21", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-21" }, "refs": "ghsa-repos:xibosignage/xibo-cms\tGHSA-p4pg-v57g-7jf6", "description": "xibosignage/xibo-cms repository advisory GHSA-p4pg-v57g-7jf6", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 108, "clock_known": true, "hours_public": 2592, "clock_origin": "advisory", "advisory_date": "2026-06-21", "advisory_days_public": 108, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/xibosignage/xibo-cms/security/advisories/GHSA-p4pg-v57g-7jf6" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-50541", "state": "RESERVED", "public_date": "2026-06-21", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-21" }, "refs": "ghsa-repos:xibosignage/xibo-cms\tGHSA-v6xr-pmg9-qpmv", "description": "xibosignage/xibo-cms repository advisory GHSA-v6xr-pmg9-qpmv", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 108, "clock_known": true, "hours_public": 2592, "clock_origin": "advisory", "advisory_date": "2026-06-21", "advisory_days_public": 108, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/xibosignage/xibo-cms/security/advisories/GHSA-v6xr-pmg9-qpmv" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-52729", "state": "RESERVED", "public_date": "2026-06-21", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-21" }, "refs": "ghsa-repos:xibosignage/xibo-cms\tGHSA-7j3h-48f7-w4fr", "description": "xibosignage/xibo-cms repository advisory GHSA-7j3h-48f7-w4fr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 108, "clock_known": true, "hours_public": 2592, "clock_origin": "advisory", "advisory_date": "2026-06-21", "advisory_days_public": 108, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/xibosignage/xibo-cms/security/advisories/GHSA-7j3h-48f7-w4fr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-50542", "state": "RESERVED", "public_date": "2026-06-21", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-21" }, "refs": "ghsa-repos:xibosignage/xibo-cms\tGHSA-wj8r-32gf-6f5f", "description": "xibosignage/xibo-cms repository advisory GHSA-wj8r-32gf-6f5f", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 108, "clock_known": true, "hours_public": 2592, "clock_origin": "advisory", "advisory_date": "2026-06-21", "advisory_days_public": 108, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/xibosignage/xibo-cms/security/advisories/GHSA-wj8r-32gf-6f5f" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-50543", "state": "RESERVED", "public_date": "2026-06-21", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-21" }, "refs": "ghsa-repos:xibosignage/xibo-cms\tGHSA-737f-mfxg-jv9q", "description": "xibosignage/xibo-cms repository advisory GHSA-737f-mfxg-jv9q", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 108, "clock_known": true, "hours_public": 2592, "clock_origin": "advisory", "advisory_date": "2026-06-21", "advisory_days_public": 108, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/xibosignage/xibo-cms/security/advisories/GHSA-737f-mfxg-jv9q" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-83812", "state": "RESERVED", "public_date": "2026-06-22", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-22" }, "refs": "ghsa-repos:ChurchCRM/CRM\tGHSA-8rv4-2mxp-gh5w", "description": "ChurchCRM/CRM repository advisory GHSA-8rv4-2mxp-gh5w", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 107, "clock_known": true, "hours_public": 2568, "clock_origin": "advisory", "advisory_date": "2026-06-22", "advisory_days_public": 107, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ChurchCRM/CRM/security/advisories/GHSA-8rv4-2mxp-gh5w" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61611", "state": "RESERVED", "public_date": "2026-06-22", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-22" }, "refs": "ghsa-repos:LycheeOrg/Lychee\tGHSA-48vf-fwx6-2ph6", "description": "LycheeOrg/Lychee repository advisory GHSA-48vf-fwx6-2ph6", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 107, "clock_known": true, "hours_public": 2568, "clock_origin": "advisory", "advisory_date": "2026-06-22", "advisory_days_public": 107, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/LycheeOrg/Lychee/security/advisories/GHSA-48vf-fwx6-2ph6" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61610", "state": "RESERVED", "public_date": "2026-06-22", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-22" }, "refs": "ghsa-repos:LycheeOrg/Lychee\tGHSA-qcqq-p4pq-7r77", "description": "LycheeOrg/Lychee repository advisory GHSA-qcqq-p4pq-7r77", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 107, "clock_known": true, "hours_public": 2568, "clock_origin": "advisory", "advisory_date": "2026-06-22", "advisory_days_public": 107, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/LycheeOrg/Lychee/security/advisories/GHSA-qcqq-p4pq-7r77" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61575", "state": "RESERVED", "public_date": "2026-06-22", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-22" }, "refs": "ghsa-repos:WWBN/AVideo-Encoder\tGHSA-w2g8-p296-r5g9", "description": "WWBN/AVideo-Encoder repository advisory GHSA-w2g8-p296-r5g9", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 107, "clock_known": true, "hours_public": 2568, "clock_origin": "advisory", "advisory_date": "2026-06-22", "advisory_days_public": 107, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/WWBN/AVideo-Encoder/security/advisories/GHSA-w2g8-p296-r5g9" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61573", "state": "RESERVED", "public_date": "2026-06-22", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-22" }, "refs": "ghsa-repos:WWBN/AVideo-Encoder\tGHSA-p9x3-679g-pwf5", "description": "WWBN/AVideo-Encoder repository advisory GHSA-p9x3-679g-pwf5", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 107, "clock_known": true, "hours_public": 2568, "clock_origin": "advisory", "advisory_date": "2026-06-22", "advisory_days_public": 107, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/WWBN/AVideo-Encoder/security/advisories/GHSA-p9x3-679g-pwf5" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61572", "state": "RESERVED", "public_date": "2026-06-22", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-22" }, "refs": "ghsa-repos:WWBN/AVideo-Encoder\tGHSA-cvhm-j9cp-8w59", "description": "WWBN/AVideo-Encoder repository advisory GHSA-cvhm-j9cp-8w59", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 107, "clock_known": true, "hours_public": 2568, "clock_origin": "advisory", "advisory_date": "2026-06-22", "advisory_days_public": 107, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/WWBN/AVideo-Encoder/security/advisories/GHSA-cvhm-j9cp-8w59" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61571", "state": "RESERVED", "public_date": "2026-06-22", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-22" }, "refs": "ghsa-repos:WWBN/AVideo-Encoder\tGHSA-297p-4mj8-28wm", "description": "WWBN/AVideo-Encoder repository advisory GHSA-297p-4mj8-28wm", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 107, "clock_known": true, "hours_public": 2568, "clock_origin": "advisory", "advisory_date": "2026-06-22", "advisory_days_public": 107, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/WWBN/AVideo-Encoder/security/advisories/GHSA-297p-4mj8-28wm" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61569", "state": "RESERVED", "public_date": "2026-06-22", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-22" }, "refs": "ghsa-repos:WWBN/AVideo-Encoder\tGHSA-2rrq-xf8q-3qpf", "description": "WWBN/AVideo-Encoder repository advisory GHSA-2rrq-xf8q-3qpf", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 107, "clock_known": true, "hours_public": 2568, "clock_origin": "advisory", "advisory_date": "2026-06-22", "advisory_days_public": 107, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/WWBN/AVideo-Encoder/security/advisories/GHSA-2rrq-xf8q-3qpf" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61567", "state": "RESERVED", "public_date": "2026-06-22", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-22" }, "refs": "ghsa-repos:WWBN/AVideo-Encoder\tGHSA-rf63-6vwm-wv8p", "description": "WWBN/AVideo-Encoder repository advisory GHSA-rf63-6vwm-wv8p", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 107, "clock_known": true, "hours_public": 2568, "clock_origin": "advisory", "advisory_date": "2026-06-22", "advisory_days_public": 107, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/WWBN/AVideo-Encoder/security/advisories/GHSA-rf63-6vwm-wv8p" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61564", "state": "RESERVED", "public_date": "2026-06-22", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-22" }, "refs": "ghsa-repos:WWBN/AVideo-Encoder\tGHSA-xrj3-cqm8-r992", "description": "WWBN/AVideo-Encoder repository advisory GHSA-xrj3-cqm8-r992", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 107, "clock_known": true, "hours_public": 2568, "clock_origin": "advisory", "advisory_date": "2026-06-22", "advisory_days_public": 107, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/WWBN/AVideo-Encoder/security/advisories/GHSA-xrj3-cqm8-r992" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-45049", "state": "RESERVED", "public_date": "2026-06-23", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-06-23", "osv": "2026-06-23" }, "refs": "ghsa:GHSA-r9pv-5rpp-vm8g;osv:Maven:org.openidentityplatform.openam:openam-federation", "description": "OpenAM Unauthenticated Session Hijacking via Information Exposure in CDCServlet", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 106, "clock_known": true, "hours_public": 2544, "clock_origin": "advisory", "advisory_date": "2026-06-23", "advisory_days_public": 106, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "org.openidentityplatform.openam", "ecosystem": "Maven", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-r9pv-5rpp-vm8g", "osv": "https://osv.dev/list?q=CVE-2026-45049" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-83811", "state": "RESERVED", "public_date": "2026-06-23", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-23" }, "refs": "ghsa-repos:ChurchCRM/CRM\tGHSA-3g57-j655-gjv3", "description": "ChurchCRM/CRM repository advisory GHSA-3g57-j655-gjv3", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 106, "clock_known": true, "hours_public": 2544, "clock_origin": "advisory", "advisory_date": "2026-06-23", "advisory_days_public": 106, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ChurchCRM/CRM/security/advisories/GHSA-3g57-j655-gjv3" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61719", "state": "RESERVED", "public_date": "2026-06-23", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-23" }, "refs": "ghsa-repos:LabRedesCefetRJ/WeGIA\tGHSA-qm7p-cprp-f974", "description": "LabRedesCefetRJ/WeGIA repository advisory GHSA-qm7p-cprp-f974", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 106, "clock_known": true, "hours_public": 2544, "clock_origin": "advisory", "advisory_date": "2026-06-23", "advisory_days_public": 106, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-qm7p-cprp-f974" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61673", "state": "RESERVED", "public_date": "2026-06-23", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-23" }, "refs": "ghsa-repos:LabRedesCefetRJ/WeGIA\tGHSA-83p7-cx5x-7g34", "description": "LabRedesCefetRJ/WeGIA repository advisory GHSA-83p7-cx5x-7g34", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 106, "clock_known": true, "hours_public": 2544, "clock_origin": "advisory", "advisory_date": "2026-06-23", "advisory_days_public": 106, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-83p7-cx5x-7g34" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61671", "state": "RESERVED", "public_date": "2026-06-23", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-23" }, "refs": "ghsa-repos:LabRedesCefetRJ/WeGIA\tGHSA-rf87-2prr-f2p2", "description": "LabRedesCefetRJ/WeGIA repository advisory GHSA-rf87-2prr-f2p2", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 106, "clock_known": true, "hours_public": 2544, "clock_origin": "advisory", "advisory_date": "2026-06-23", "advisory_days_public": 106, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-rf87-2prr-f2p2" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-44344", "state": "RESERVED", "public_date": "2026-06-23", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-23" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-8rj2-88v5-mx6w", "description": "chamilo/chamilo-lms repository advisory GHSA-8rj2-88v5-mx6w", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 106, "clock_known": true, "hours_public": 2544, "clock_origin": "advisory", "advisory_date": "2026-06-23", "advisory_days_public": 106, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-8rj2-88v5-mx6w" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-45141", "state": "RESERVED", "public_date": "2026-06-23", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-23" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-p2qq-wjp2-j334", "description": "chamilo/chamilo-lms repository advisory GHSA-p2qq-wjp2-j334", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 106, "clock_known": true, "hours_public": 2544, "clock_origin": "advisory", "advisory_date": "2026-06-23", "advisory_days_public": 106, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-p2qq-wjp2-j334" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-45145", "state": "RESERVED", "public_date": "2026-06-23", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-23" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-pr59-4rm7-ghwx", "description": "chamilo/chamilo-lms repository advisory GHSA-pr59-4rm7-ghwx", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 106, "clock_known": true, "hours_public": 2544, "clock_origin": "advisory", "advisory_date": "2026-06-23", "advisory_days_public": 106, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-pr59-4rm7-ghwx" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-45144", "state": "RESERVED", "public_date": "2026-06-23", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-23" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-9833-c7cj-x9xm", "description": "chamilo/chamilo-lms repository advisory GHSA-9833-c7cj-x9xm", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 106, "clock_known": true, "hours_public": 2544, "clock_origin": "advisory", "advisory_date": "2026-06-23", "advisory_days_public": 106, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-9833-c7cj-x9xm" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61730", "state": "RESERVED", "public_date": "2026-06-23", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-23" }, "refs": "ghsa-repos:socfortress/CoPilot\tGHSA-pm2w-mmc3-h8hc", "description": "socfortress/CoPilot repository advisory GHSA-pm2w-mmc3-h8hc", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 106, "clock_known": true, "hours_public": 2544, "clock_origin": "advisory", "advisory_date": "2026-06-23", "advisory_days_public": 106, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/socfortress/CoPilot/security/advisories/GHSA-pm2w-mmc3-h8hc" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61729", "state": "RESERVED", "public_date": "2026-06-23", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-23" }, "refs": "ghsa-repos:socfortress/CoPilot\tGHSA-x8gc-f8p4-frc2", "description": "socfortress/CoPilot repository advisory GHSA-x8gc-f8p4-frc2", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 106, "clock_known": true, "hours_public": 2544, "clock_origin": "advisory", "advisory_date": "2026-06-23", "advisory_days_public": 106, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/socfortress/CoPilot/security/advisories/GHSA-x8gc-f8p4-frc2" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61728", "state": "RESERVED", "public_date": "2026-06-23", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-23" }, "refs": "ghsa-repos:socfortress/CoPilot\tGHSA-8hqj-cqcc-5f6w", "description": "socfortress/CoPilot repository advisory GHSA-8hqj-cqcc-5f6w", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 106, "clock_known": true, "hours_public": 2544, "clock_origin": "advisory", "advisory_date": "2026-06-23", "advisory_days_public": 106, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/socfortress/CoPilot/security/advisories/GHSA-8hqj-cqcc-5f6w" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61708", "state": "RESERVED", "public_date": "2026-06-23", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-23" }, "refs": "ghsa-repos:socfortress/CoPilot\tGHSA-6j26-wcv6-gp3f", "description": "socfortress/CoPilot repository advisory GHSA-6j26-wcv6-gp3f", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 106, "clock_known": true, "hours_public": 2544, "clock_origin": "advisory", "advisory_date": "2026-06-23", "advisory_days_public": 106, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/socfortress/CoPilot/security/advisories/GHSA-6j26-wcv6-gp3f" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61707", "state": "RESERVED", "public_date": "2026-06-23", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-23" }, "refs": "ghsa-repos:socfortress/CoPilot\tGHSA-7q83-228r-wfh5", "description": "socfortress/CoPilot repository advisory GHSA-7q83-228r-wfh5", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 106, "clock_known": true, "hours_public": 2544, "clock_origin": "advisory", "advisory_date": "2026-06-23", "advisory_days_public": 106, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/socfortress/CoPilot/security/advisories/GHSA-7q83-228r-wfh5" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-11704", "state": "RESERVED", "public_date": "2026-06-23", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-06-23" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2055\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2055.json", "description": "CVE-2026-11704", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 106, "clock_known": true, "hours_public": 2544, "clock_origin": "advisory", "advisory_date": "2026-06-23", "advisory_days_public": 106, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2055.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-11705", "state": "RESERVED", "public_date": "2026-06-23", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-06-23" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2055\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2055.json", "description": "CVE-2026-11705", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 106, "clock_known": true, "hours_public": 2544, "clock_origin": "advisory", "advisory_date": "2026-06-23", "advisory_days_public": 106, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2055.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-12546", "state": "RESERVED", "public_date": "2026-06-23", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-06-23" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2055\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2055.json", "description": "CVE-2026-12546", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 106, "clock_known": true, "hours_public": 2544, "clock_origin": "advisory", "advisory_date": "2026-06-23", "advisory_days_public": 106, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2055.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-52895", "state": "RESERVED", "public_date": "2026-06-23", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-06-23" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2055\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2055.json", "description": "CVE-2026-52895", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 106, "clock_known": true, "hours_public": 2544, "clock_origin": "advisory", "advisory_date": "2026-06-23", "advisory_days_public": 106, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2055.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-52896", "state": "RESERVED", "public_date": "2026-06-23", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-06-23" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2055\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2055.json", "description": "CVE-2026-52896", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 106, "clock_known": true, "hours_public": 2544, "clock_origin": "advisory", "advisory_date": "2026-06-23", "advisory_days_public": 106, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2055.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-52897", "state": "RESERVED", "public_date": "2026-06-23", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-06-23" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2055\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2055.json", "description": "CVE-2026-52897", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 106, "clock_known": true, "hours_public": 2544, "clock_origin": "advisory", "advisory_date": "2026-06-23", "advisory_days_public": 106, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2055.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-52898", "state": "RESERVED", "public_date": "2026-06-23", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-06-23" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2055\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2055.json", "description": "CVE-2026-52898", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 106, "clock_known": true, "hours_public": 2544, "clock_origin": "advisory", "advisory_date": "2026-06-23", "advisory_days_public": 106, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2055.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-46499", "state": "RESERVED", "public_date": "2026-06-24", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-24" }, "refs": "ghsa-repos:CollaboraOnline/online\tGHSA-27j2-3cqv-cc5q", "description": "CollaboraOnline/online repository advisory GHSA-27j2-3cqv-cc5q", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 105, "clock_known": true, "hours_public": 2520, "clock_origin": "advisory", "advisory_date": "2026-06-24", "advisory_days_public": 105, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/CollaboraOnline/online/security/advisories/GHSA-27j2-3cqv-cc5q" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-48164", "state": "RESERVED", "public_date": "2026-06-24", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-24" }, "refs": "ghsa-repos:CollaboraOnline/online\tGHSA-wgmm-q3ch-64jj", "description": "CollaboraOnline/online repository advisory GHSA-wgmm-q3ch-64jj", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 105, "clock_known": true, "hours_public": 2520, "clock_origin": "advisory", "advisory_date": "2026-06-24", "advisory_days_public": 105, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/CollaboraOnline/online/security/advisories/GHSA-wgmm-q3ch-64jj" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61838", "state": "RESERVED", "public_date": "2026-06-24", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-24" }, "refs": "ghsa-repos:LycheeOrg/Lychee\tGHSA-735c-2wqc-x29r", "description": "LycheeOrg/Lychee repository advisory GHSA-735c-2wqc-x29r", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 105, "clock_known": true, "hours_public": 2520, "clock_origin": "advisory", "advisory_date": "2026-06-24", "advisory_days_public": 105, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/LycheeOrg/Lychee/security/advisories/GHSA-735c-2wqc-x29r" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55600", "state": "RESERVED", "public_date": "2026-06-24", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-24" }, "refs": "ghsa-repos:Part-DB/Part-DB-server\tGHSA-qqrh-jjhg-vv5r", "description": "Part-DB/Part-DB-server repository advisory GHSA-qqrh-jjhg-vv5r", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 105, "clock_known": true, "hours_public": 2520, "clock_origin": "advisory", "advisory_date": "2026-06-24", "advisory_days_public": 105, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Part-DB/Part-DB-server/security/advisories/GHSA-qqrh-jjhg-vv5r" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61806", "state": "RESERVED", "public_date": "2026-06-24", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-24" }, "refs": "ghsa-repos:frappe/lms\tGHSA-xjj9-h64v-254g", "description": "frappe/lms repository advisory GHSA-xjj9-h64v-254g", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 105, "clock_known": true, "hours_public": 2520, "clock_origin": "advisory", "advisory_date": "2026-06-24", "advisory_days_public": 105, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/frappe/lms/security/advisories/GHSA-xjj9-h64v-254g" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61805", "state": "RESERVED", "public_date": "2026-06-24", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-24" }, "refs": "ghsa-repos:frappe/lms\tGHSA-4566-2phx-68gh", "description": "frappe/lms repository advisory GHSA-4566-2phx-68gh", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 105, "clock_known": true, "hours_public": 2520, "clock_origin": "advisory", "advisory_date": "2026-06-24", "advisory_days_public": 105, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/frappe/lms/security/advisories/GHSA-4566-2phx-68gh" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61803", "state": "RESERVED", "public_date": "2026-06-24", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-24" }, "refs": "ghsa-repos:frappe/lms\tGHSA-g5jj-q8m7-359c", "description": "frappe/lms repository advisory GHSA-g5jj-q8m7-359c", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 105, "clock_known": true, "hours_public": 2520, "clock_origin": "advisory", "advisory_date": "2026-06-24", "advisory_days_public": 105, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/frappe/lms/security/advisories/GHSA-g5jj-q8m7-359c" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-39375", "state": "RESERVED", "public_date": "2026-06-24", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-24" }, "refs": "ghsa-repos:frappe/lms\tGHSA-9fqj-95wr-6hm6", "description": "frappe/lms repository advisory GHSA-9fqj-95wr-6hm6", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 105, "clock_known": true, "hours_public": 2520, "clock_origin": "advisory", "advisory_date": "2026-06-24", "advisory_days_public": 105, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/frappe/lms/security/advisories/GHSA-9fqj-95wr-6hm6" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-50000", "state": "RESERVED", "public_date": "2026-06-24", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-24" }, "refs": "ghsa-repos:freedomofpress/securedrop\tGHSA-78xq-8jf3-gpfx", "description": "freedomofpress/securedrop repository advisory GHSA-78xq-8jf3-gpfx", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 105, "clock_known": true, "hours_public": 2520, "clock_origin": "advisory", "advisory_date": "2026-06-24", "advisory_days_public": 105, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/freedomofpress/securedrop/security/advisories/GHSA-78xq-8jf3-gpfx" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-27844", "state": "RESERVED", "public_date": "2026-06-24", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-24" }, "refs": "ghsa-repos:owncloud/security-advisories\tGHSA-3q35-m6xv-23gj", "description": "owncloud/security-advisories repository advisory GHSA-3q35-m6xv-23gj", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 105, "clock_known": true, "hours_public": 2520, "clock_origin": "advisory", "advisory_date": "2026-06-24", "advisory_days_public": 105, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/owncloud/security-advisories/security/advisories/GHSA-3q35-m6xv-23gj" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61739", "state": "RESERVED", "public_date": "2026-06-24", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-24" }, "refs": "ghsa-repos:socfortress/CoPilot\tGHSA-c6jc-rh4j-wg88", "description": "socfortress/CoPilot repository advisory GHSA-c6jc-rh4j-wg88", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 105, "clock_known": true, "hours_public": 2520, "clock_origin": "advisory", "advisory_date": "2026-06-24", "advisory_days_public": 105, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/socfortress/CoPilot/security/advisories/GHSA-c6jc-rh4j-wg88" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61738", "state": "RESERVED", "public_date": "2026-06-24", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-24" }, "refs": "ghsa-repos:socfortress/CoPilot\tGHSA-q3g8-3cf7-744f", "description": "socfortress/CoPilot repository advisory GHSA-q3g8-3cf7-744f", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 105, "clock_known": true, "hours_public": 2520, "clock_origin": "advisory", "advisory_date": "2026-06-24", "advisory_days_public": 105, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/socfortress/CoPilot/security/advisories/GHSA-q3g8-3cf7-744f" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-13324", "state": "RESERVED", "public_date": "2026-06-25", "sources": "csaf,debian,redhat", "feed_count": 3, "dates": { "redhat": "2026-06-25", "csaf": "2026-06-25" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-13324\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-13324.json;debian:geary;redhat:CVE-2026-13324", "description": "geary: geary: Silent file attachment via ?attach= parameter", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 104, "clock_known": true, "hours_public": 2496, "clock_origin": "advisory", "advisory_date": "2026-06-25", "advisory_days_public": 104, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "geary", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-13324.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-13324", "redhat": "https://access.redhat.com/security/cve/CVE-2026-13324" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-46560", "state": "RESERVED", "public_date": "2026-06-25", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-06-25", "osv": "2026-06-25" }, "refs": "ghsa:GHSA-386j-6m86-78f9;osv:Maven:org.openidentityplatform.openam:openam-radius", "description": "OpenAM: Unauthenticated Authentication Bypass via RADIUS Spoofing", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 104, "clock_known": true, "hours_public": 2496, "clock_origin": "advisory", "advisory_date": "2026-06-25", "advisory_days_public": 104, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "org.openidentityplatform.openam", "ecosystem": "Maven", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-386j-6m86-78f9", "osv": "https://osv.dev/list?q=CVE-2026-46560" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55098", "state": "RESERVED", "public_date": "2026-06-25", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-25" }, "refs": "ghsa-repos:Basekick-Labs/arc\tGHSA-93cm-2v4m-c56c", "description": "Basekick-Labs/arc repository advisory GHSA-93cm-2v4m-c56c", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 104, "clock_known": true, "hours_public": 2496, "clock_origin": "advisory", "advisory_date": "2026-06-25", "advisory_days_public": 104, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Basekick-Labs/arc/security/advisories/GHSA-93cm-2v4m-c56c" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62179", "state": "RESERVED", "public_date": "2026-06-25", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-25" }, "refs": "ghsa-repos:MervinPraison/PraisonAI\tGHSA-mxmx-rh57-jx58", "description": "MervinPraison/PraisonAI repository advisory GHSA-mxmx-rh57-jx58", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 104, "clock_known": true, "hours_public": 2496, "clock_origin": "advisory", "advisory_date": "2026-06-25", "advisory_days_public": 104, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-mxmx-rh57-jx58" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62181", "state": "RESERVED", "public_date": "2026-06-25", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-25" }, "refs": "ghsa-repos:MervinPraison/PraisonAI\tGHSA-cv3g-hj65-pcfh", "description": "MervinPraison/PraisonAI repository advisory GHSA-cv3g-hj65-pcfh", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 104, "clock_known": true, "hours_public": 2496, "clock_origin": "advisory", "advisory_date": "2026-06-25", "advisory_days_public": 104, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-cv3g-hj65-pcfh" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62176", "state": "RESERVED", "public_date": "2026-06-25", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-25" }, "refs": "ghsa-repos:MervinPraison/PraisonAI\tGHSA-g6j7-pffp-8whg", "description": "MervinPraison/PraisonAI repository advisory GHSA-g6j7-pffp-8whg", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 104, "clock_known": true, "hours_public": 2496, "clock_origin": "advisory", "advisory_date": "2026-06-25", "advisory_days_public": 104, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-g6j7-pffp-8whg" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62170", "state": "RESERVED", "public_date": "2026-06-25", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-25" }, "refs": "ghsa-repos:MervinPraison/PraisonAI\tGHSA-q7m5-3jmv-vm48", "description": "MervinPraison/PraisonAI repository advisory GHSA-q7m5-3jmv-vm48", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 104, "clock_known": true, "hours_public": 2496, "clock_origin": "advisory", "advisory_date": "2026-06-25", "advisory_days_public": 104, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-q7m5-3jmv-vm48" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62171", "state": "RESERVED", "public_date": "2026-06-25", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-25" }, "refs": "ghsa-repos:MervinPraison/PraisonAI\tGHSA-4r3p-w3mc-5v34", "description": "MervinPraison/PraisonAI repository advisory GHSA-4r3p-w3mc-5v34", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 104, "clock_known": true, "hours_public": 2496, "clock_origin": "advisory", "advisory_date": "2026-06-25", "advisory_days_public": 104, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-4r3p-w3mc-5v34" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62167", "state": "RESERVED", "public_date": "2026-06-25", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-25" }, "refs": "ghsa-repos:MervinPraison/PraisonAI\tGHSA-4gfv-wg42-7jw5", "description": "MervinPraison/PraisonAI repository advisory GHSA-4gfv-wg42-7jw5", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 104, "clock_known": true, "hours_public": 2496, "clock_origin": "advisory", "advisory_date": "2026-06-25", "advisory_days_public": 104, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-4gfv-wg42-7jw5" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62166", "state": "RESERVED", "public_date": "2026-06-25", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-25" }, "refs": "ghsa-repos:MervinPraison/PraisonAI\tGHSA-4xxv-6wmf-xf45", "description": "MervinPraison/PraisonAI repository advisory GHSA-4xxv-6wmf-xf45", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 104, "clock_known": true, "hours_public": 2496, "clock_origin": "advisory", "advisory_date": "2026-06-25", "advisory_days_public": 104, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-4xxv-6wmf-xf45" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62163", "state": "RESERVED", "public_date": "2026-06-25", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-25" }, "refs": "ghsa-repos:MervinPraison/PraisonAI\tGHSA-qjw5-xwrp-xwpq", "description": "MervinPraison/PraisonAI repository advisory GHSA-qjw5-xwrp-xwpq", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 104, "clock_known": true, "hours_public": 2496, "clock_origin": "advisory", "advisory_date": "2026-06-25", "advisory_days_public": 104, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-qjw5-xwrp-xwpq" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57193", "state": "RESERVED", "public_date": "2026-06-25", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-06-25", "csaf": "2026-06-25" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2094\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2094.json;ghsa-repos:asterisk/asterisk\tGHSA-r6c2-hwc2-j4mp", "description": "asterisk/asterisk repository advisory GHSA-r6c2-hwc2-j4mp", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 104, "clock_known": true, "hours_public": 2496, "clock_origin": "advisory", "advisory_date": "2026-06-25", "advisory_days_public": 104, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2094.json", "ghsa-repos": "https://github.com/asterisk/asterisk/security/advisories/GHSA-r6c2-hwc2-j4mp" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57203", "state": "RESERVED", "public_date": "2026-06-25", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-25" }, "refs": "ghsa-repos:asterisk/asterisk\tGHSA-xgj6-2gc5-5x9c", "description": "asterisk/asterisk repository advisory GHSA-xgj6-2gc5-5x9c", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 104, "clock_known": true, "hours_public": 2496, "clock_origin": "advisory", "advisory_date": "2026-06-25", "advisory_days_public": 104, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/asterisk/asterisk/security/advisories/GHSA-xgj6-2gc5-5x9c" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57190", "state": "RESERVED", "public_date": "2026-06-25", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-06-25", "csaf": "2026-06-25" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2094\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2094.json;ghsa-repos:asterisk/asterisk\tGHSA-ph27-3m5q-mj5m", "description": "asterisk/asterisk repository advisory GHSA-ph27-3m5q-mj5m", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 104, "clock_known": true, "hours_public": 2496, "clock_origin": "advisory", "advisory_date": "2026-06-25", "advisory_days_public": 104, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2094.json", "ghsa-repos": "https://github.com/asterisk/asterisk/security/advisories/GHSA-ph27-3m5q-mj5m" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57197", "state": "RESERVED", "public_date": "2026-06-25", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-06-25", "csaf": "2026-06-25" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2094\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2094.json;ghsa-repos:asterisk/asterisk\tGHSA-8jhw-m2hg-vp3h", "description": "asterisk/asterisk repository advisory GHSA-8jhw-m2hg-vp3h", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 104, "clock_known": true, "hours_public": 2496, "clock_origin": "advisory", "advisory_date": "2026-06-25", "advisory_days_public": 104, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2094.json", "ghsa-repos": "https://github.com/asterisk/asterisk/security/advisories/GHSA-8jhw-m2hg-vp3h" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57188", "state": "RESERVED", "public_date": "2026-06-25", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-06-25", "csaf": "2026-06-25" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2094\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2094.json;ghsa-repos:asterisk/asterisk\tGHSA-mxgm-8c6f-5p8f", "description": "asterisk/asterisk repository advisory GHSA-mxgm-8c6f-5p8f", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 104, "clock_known": true, "hours_public": 2496, "clock_origin": "advisory", "advisory_date": "2026-06-25", "advisory_days_public": 104, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2094.json", "ghsa-repos": "https://github.com/asterisk/asterisk/security/advisories/GHSA-mxgm-8c6f-5p8f" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57191", "state": "RESERVED", "public_date": "2026-06-25", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-25" }, "refs": "ghsa-repos:asterisk/asterisk\tGHSA-589g-qgf8-m6mx", "description": "asterisk/asterisk repository advisory GHSA-589g-qgf8-m6mx", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 104, "clock_known": true, "hours_public": 2496, "clock_origin": "advisory", "advisory_date": "2026-06-25", "advisory_days_public": 104, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/asterisk/asterisk/security/advisories/GHSA-589g-qgf8-m6mx" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57199", "state": "RESERVED", "public_date": "2026-06-25", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-06-25", "csaf": "2026-06-25" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2094\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2094.json;ghsa-repos:asterisk/asterisk\tGHSA-q9fr-m7g8-6ph5", "description": "asterisk/asterisk repository advisory GHSA-q9fr-m7g8-6ph5", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 104, "clock_known": true, "hours_public": 2496, "clock_origin": "advisory", "advisory_date": "2026-06-25", "advisory_days_public": 104, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2094.json", "ghsa-repos": "https://github.com/asterisk/asterisk/security/advisories/GHSA-q9fr-m7g8-6ph5" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57201", "state": "RESERVED", "public_date": "2026-06-25", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-06-25", "csaf": "2026-06-25" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2094\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2094.json;ghsa-repos:asterisk/asterisk\tGHSA-x348-j6c9-77f3", "description": "asterisk/asterisk repository advisory GHSA-x348-j6c9-77f3", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 104, "clock_known": true, "hours_public": 2496, "clock_origin": "advisory", "advisory_date": "2026-06-25", "advisory_days_public": 104, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2094.json", "ghsa-repos": "https://github.com/asterisk/asterisk/security/advisories/GHSA-x348-j6c9-77f3" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57192", "state": "RESERVED", "public_date": "2026-06-25", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-06-25", "csaf": "2026-06-25" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2094\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2094.json;ghsa-repos:asterisk/asterisk\tGHSA-qf8j-jp7h-c5hx", "description": "asterisk/asterisk repository advisory GHSA-qf8j-jp7h-c5hx", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 104, "clock_known": true, "hours_public": 2496, "clock_origin": "advisory", "advisory_date": "2026-06-25", "advisory_days_public": 104, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2094.json", "ghsa-repos": "https://github.com/asterisk/asterisk/security/advisories/GHSA-qf8j-jp7h-c5hx" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57195", "state": "RESERVED", "public_date": "2026-06-25", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-25" }, "refs": "ghsa-repos:asterisk/asterisk\tGHSA-3rhj-hhw7-m6fw", "description": "asterisk/asterisk repository advisory GHSA-3rhj-hhw7-m6fw", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 104, "clock_known": true, "hours_public": 2496, "clock_origin": "advisory", "advisory_date": "2026-06-25", "advisory_days_public": 104, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/asterisk/asterisk/security/advisories/GHSA-3rhj-hhw7-m6fw" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57196", "state": "RESERVED", "public_date": "2026-06-25", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-06-25", "csaf": "2026-06-25" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2094\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2094.json;ghsa-repos:asterisk/asterisk\tGHSA-4pgv-j3mr-3rcp", "description": "asterisk/asterisk repository advisory GHSA-4pgv-j3mr-3rcp", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 104, "clock_known": true, "hours_public": 2496, "clock_origin": "advisory", "advisory_date": "2026-06-25", "advisory_days_public": 104, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2094.json", "ghsa-repos": "https://github.com/asterisk/asterisk/security/advisories/GHSA-4pgv-j3mr-3rcp" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57185", "state": "RESERVED", "public_date": "2026-06-25", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-06-25", "csaf": "2026-06-25" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2094\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2094.json;ghsa-repos:asterisk/asterisk\tGHSA-8jw3-ccr9-xrmf", "description": "asterisk/asterisk repository advisory GHSA-8jw3-ccr9-xrmf", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 104, "clock_known": true, "hours_public": 2496, "clock_origin": "advisory", "advisory_date": "2026-06-25", "advisory_days_public": 104, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2094.json", "ghsa-repos": "https://github.com/asterisk/asterisk/security/advisories/GHSA-8jw3-ccr9-xrmf" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57189", "state": "RESERVED", "public_date": "2026-06-25", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-06-25", "csaf": "2026-06-25" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2094\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2094.json;ghsa-repos:asterisk/asterisk\tGHSA-j2mm-57pq-jh94", "description": "asterisk/asterisk repository advisory GHSA-j2mm-57pq-jh94", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 104, "clock_known": true, "hours_public": 2496, "clock_origin": "advisory", "advisory_date": "2026-06-25", "advisory_days_public": 104, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2094.json", "ghsa-repos": "https://github.com/asterisk/asterisk/security/advisories/GHSA-j2mm-57pq-jh94" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57198", "state": "RESERVED", "public_date": "2026-06-25", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-25" }, "refs": "ghsa-repos:asterisk/asterisk\tGHSA-vfhr-r9x9-c687", "description": "asterisk/asterisk repository advisory GHSA-vfhr-r9x9-c687", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 104, "clock_known": true, "hours_public": 2496, "clock_origin": "advisory", "advisory_date": "2026-06-25", "advisory_days_public": 104, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/asterisk/asterisk/security/advisories/GHSA-vfhr-r9x9-c687" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57202", "state": "RESERVED", "public_date": "2026-06-25", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-06-25", "csaf": "2026-06-25" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2094\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2094.json;ghsa-repos:asterisk/asterisk\tGHSA-vrfp-mg3q-3959", "description": "asterisk/asterisk repository advisory GHSA-vrfp-mg3q-3959", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 104, "clock_known": true, "hours_public": 2496, "clock_origin": "advisory", "advisory_date": "2026-06-25", "advisory_days_public": 104, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2094.json", "ghsa-repos": "https://github.com/asterisk/asterisk/security/advisories/GHSA-vrfp-mg3q-3959" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57184", "state": "RESERVED", "public_date": "2026-06-25", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-06-25", "csaf": "2026-06-25" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2094\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2094.json;ghsa-repos:asterisk/asterisk\tGHSA-746q-794h-cc7f", "description": "asterisk/asterisk repository advisory GHSA-746q-794h-cc7f", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 104, "clock_known": true, "hours_public": 2496, "clock_origin": "advisory", "advisory_date": "2026-06-25", "advisory_days_public": 104, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2094.json", "ghsa-repos": "https://github.com/asterisk/asterisk/security/advisories/GHSA-746q-794h-cc7f" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57200", "state": "RESERVED", "public_date": "2026-06-25", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-06-25", "csaf": "2026-06-25" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2094\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2094.json;ghsa-repos:asterisk/asterisk\tGHSA-wcvv-g26m-wx5c", "description": "asterisk/asterisk repository advisory GHSA-wcvv-g26m-wx5c", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 104, "clock_known": true, "hours_public": 2496, "clock_origin": "advisory", "advisory_date": "2026-06-25", "advisory_days_public": 104, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2094.json", "ghsa-repos": "https://github.com/asterisk/asterisk/security/advisories/GHSA-wcvv-g26m-wx5c" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57187", "state": "RESERVED", "public_date": "2026-06-25", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-25" }, "refs": "ghsa-repos:asterisk/asterisk\tGHSA-g8q2-p36q-94f6", "description": "asterisk/asterisk repository advisory GHSA-g8q2-p36q-94f6", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 104, "clock_known": true, "hours_public": 2496, "clock_origin": "advisory", "advisory_date": "2026-06-25", "advisory_days_public": 104, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/asterisk/asterisk/security/advisories/GHSA-g8q2-p36q-94f6" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57194", "state": "RESERVED", "public_date": "2026-06-25", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-25" }, "refs": "ghsa-repos:asterisk/asterisk\tGHSA-3g56-cgrh-95p5", "description": "asterisk/asterisk repository advisory GHSA-3g56-cgrh-95p5", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 104, "clock_known": true, "hours_public": 2496, "clock_origin": "advisory", "advisory_date": "2026-06-25", "advisory_days_public": 104, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/asterisk/asterisk/security/advisories/GHSA-3g56-cgrh-95p5" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57186", "state": "RESERVED", "public_date": "2026-06-25", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-06-25", "csaf": "2026-06-25" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2094\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2094.json;ghsa-repos:asterisk/asterisk\tGHSA-h5hv-jmgj-92q2", "description": "asterisk/asterisk repository advisory GHSA-h5hv-jmgj-92q2", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 104, "clock_known": true, "hours_public": 2496, "clock_origin": "advisory", "advisory_date": "2026-06-25", "advisory_days_public": 104, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2094.json", "ghsa-repos": "https://github.com/asterisk/asterisk/security/advisories/GHSA-h5hv-jmgj-92q2" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62162", "state": "RESERVED", "public_date": "2026-06-25", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-25" }, "refs": "ghsa-repos:cardano-scaling/hydra\tGHSA-gfpc-m687-p7h5", "description": "cardano-scaling/hydra repository advisory GHSA-gfpc-m687-p7h5", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 104, "clock_known": true, "hours_public": 2496, "clock_origin": "advisory", "advisory_date": "2026-06-25", "advisory_days_public": 104, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/cardano-scaling/hydra/security/advisories/GHSA-gfpc-m687-p7h5" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57493", "state": "RESERVED", "public_date": "2026-06-25", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-25" }, "refs": "ghsa-repos:error311/FileRise\tGHSA-r55g-3hcc-6jx7", "description": "error311/FileRise repository advisory GHSA-r55g-3hcc-6jx7", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 104, "clock_known": true, "hours_public": 2496, "clock_origin": "advisory", "advisory_date": "2026-06-25", "advisory_days_public": 104, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/error311/FileRise/security/advisories/GHSA-r55g-3hcc-6jx7" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57492", "state": "RESERVED", "public_date": "2026-06-25", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-25" }, "refs": "ghsa-repos:error311/FileRise\tGHSA-g555-3rg9-wrq8", "description": "error311/FileRise repository advisory GHSA-g555-3rg9-wrq8", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 104, "clock_known": true, "hours_public": 2496, "clock_origin": "advisory", "advisory_date": "2026-06-25", "advisory_days_public": 104, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/error311/FileRise/security/advisories/GHSA-g555-3rg9-wrq8" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57491", "state": "RESERVED", "public_date": "2026-06-25", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-25" }, "refs": "ghsa-repos:error311/FileRise\tGHSA-c4g2-8fg6-5xrr", "description": "error311/FileRise repository advisory GHSA-c4g2-8fg6-5xrr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 104, "clock_known": true, "hours_public": 2496, "clock_origin": "advisory", "advisory_date": "2026-06-25", "advisory_days_public": 104, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/error311/FileRise/security/advisories/GHSA-c4g2-8fg6-5xrr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57490", "state": "RESERVED", "public_date": "2026-06-25", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-25" }, "refs": "ghsa-repos:error311/FileRise\tGHSA-cx7g-xhj8-8cx3", "description": "error311/FileRise repository advisory GHSA-cx7g-xhj8-8cx3", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 104, "clock_known": true, "hours_public": 2496, "clock_origin": "advisory", "advisory_date": "2026-06-25", "advisory_days_public": 104, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/error311/FileRise/security/advisories/GHSA-cx7g-xhj8-8cx3" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57489", "state": "RESERVED", "public_date": "2026-06-25", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-25" }, "refs": "ghsa-repos:error311/FileRise\tGHSA-98pg-w3jp-r8fv", "description": "error311/FileRise repository advisory GHSA-98pg-w3jp-r8fv", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 104, "clock_known": true, "hours_public": 2496, "clock_origin": "advisory", "advisory_date": "2026-06-25", "advisory_days_public": 104, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/error311/FileRise/security/advisories/GHSA-98pg-w3jp-r8fv" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61801", "state": "RESERVED", "public_date": "2026-06-25", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-25" }, "refs": "ghsa-repos:moby/sys\tGHSA-mjcv-p78q-w5fw", "description": "moby/sys repository advisory GHSA-mjcv-p78q-w5fw", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 104, "clock_known": true, "hours_public": 2496, "clock_origin": "advisory", "advisory_date": "2026-06-25", "advisory_days_public": 104, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/moby/sys/security/advisories/GHSA-mjcv-p78q-w5fw" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62298", "state": "RESERVED", "public_date": "2026-06-25", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-25" }, "refs": "ghsa-repos:mouse07410/asn1c\tGHSA-rcj5-gcvg-x796", "description": "mouse07410/asn1c repository advisory GHSA-rcj5-gcvg-x796", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 104, "clock_known": true, "hours_public": 2496, "clock_origin": "advisory", "advisory_date": "2026-06-25", "advisory_days_public": 104, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/mouse07410/asn1c/security/advisories/GHSA-rcj5-gcvg-x796" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-13173", "state": "RESERVED", "public_date": "2026-06-25", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-06-25" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2085\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2085.json", "description": "CVE-2025-13173", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 104, "clock_known": true, "hours_public": 2496, "clock_origin": "advisory", "advisory_date": "2026-06-25", "advisory_days_public": 104, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2085.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-2613", "state": "RESERVED", "public_date": "2026-06-25", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-06-25" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2085\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2085.json", "description": "CVE-2026-2613", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 104, "clock_known": true, "hours_public": 2496, "clock_origin": "advisory", "advisory_date": "2026-06-25", "advisory_days_public": 104, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2085.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-4052", "state": "RESERVED", "public_date": "2026-06-25", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-06-25" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2085\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2085.json", "description": "CVE-2026-4052", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 104, "clock_known": true, "hours_public": 2496, "clock_origin": "advisory", "advisory_date": "2026-06-25", "advisory_days_public": 104, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2085.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62679", "state": "RESERVED", "public_date": "2026-06-26", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-26" }, "refs": "ghsa-repos:LycheeOrg/Lychee\tGHSA-j5ff-34x8-xxqg", "description": "LycheeOrg/Lychee repository advisory GHSA-j5ff-34x8-xxqg", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 103, "clock_known": true, "hours_public": 2472, "clock_origin": "advisory", "advisory_date": "2026-06-26", "advisory_days_public": 103, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/LycheeOrg/Lychee/security/advisories/GHSA-j5ff-34x8-xxqg" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61850", "state": "RESERVED", "public_date": "2026-06-26", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-26" }, "refs": "ghsa-repos:akuity/kargo\tGHSA-wp4p-hr79-q4g8", "description": "akuity/kargo repository advisory GHSA-wp4p-hr79-q4g8", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 103, "clock_known": true, "hours_public": 2472, "clock_origin": "advisory", "advisory_date": "2026-06-26", "advisory_days_public": 103, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/akuity/kargo/security/advisories/GHSA-wp4p-hr79-q4g8" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62302", "state": "RESERVED", "public_date": "2026-06-26", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-26" }, "refs": "ghsa-repos:franklioxygen/MyTube\tGHSA-rwwf-29mq-5j43", "description": "franklioxygen/MyTube repository advisory GHSA-rwwf-29mq-5j43", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 103, "clock_known": true, "hours_public": 2472, "clock_origin": "advisory", "advisory_date": "2026-06-26", "advisory_days_public": 103, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/franklioxygen/MyTube/security/advisories/GHSA-rwwf-29mq-5j43" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62301", "state": "RESERVED", "public_date": "2026-06-26", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-26" }, "refs": "ghsa-repos:franklioxygen/MyTube\tGHSA-hcm6-w6x8-6jhr", "description": "franklioxygen/MyTube repository advisory GHSA-hcm6-w6x8-6jhr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 103, "clock_known": true, "hours_public": 2472, "clock_origin": "advisory", "advisory_date": "2026-06-26", "advisory_days_public": 103, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/franklioxygen/MyTube/security/advisories/GHSA-hcm6-w6x8-6jhr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55493", "state": "RESERVED", "public_date": "2026-06-26", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-26" }, "refs": "ghsa-repos:kohler/hotcrp\tGHSA-x3g6-4c5h-7p29", "description": "kohler/hotcrp repository advisory GHSA-x3g6-4c5h-7p29", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 103, "clock_known": true, "hours_public": 2472, "clock_origin": "advisory", "advisory_date": "2026-06-26", "advisory_days_public": 103, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kohler/hotcrp/security/advisories/GHSA-x3g6-4c5h-7p29" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62333", "state": "RESERVED", "public_date": "2026-06-26", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-26" }, "refs": "ghsa-repos:openvm-org/openvm\tGHSA-396x-v8w4-9x82", "description": "openvm-org/openvm repository advisory GHSA-396x-v8w4-9x82", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 103, "clock_known": true, "hours_public": 2472, "clock_origin": "advisory", "advisory_date": "2026-06-26", "advisory_days_public": 103, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/openvm-org/openvm/security/advisories/GHSA-396x-v8w4-9x82" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62334", "state": "RESERVED", "public_date": "2026-06-26", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-26" }, "refs": "ghsa-repos:openvm-org/openvm\tGHSA-j29p-wr24-hp4f", "description": "openvm-org/openvm repository advisory GHSA-j29p-wr24-hp4f", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 103, "clock_known": true, "hours_public": 2472, "clock_origin": "advisory", "advisory_date": "2026-06-26", "advisory_days_public": 103, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/openvm-org/openvm/security/advisories/GHSA-j29p-wr24-hp4f" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62335", "state": "RESERVED", "public_date": "2026-06-26", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-26" }, "refs": "ghsa-repos:openvm-org/openvm\tGHSA-w82q-w67c-67wv", "description": "openvm-org/openvm repository advisory GHSA-w82q-w67c-67wv", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 103, "clock_known": true, "hours_public": 2472, "clock_origin": "advisory", "advisory_date": "2026-06-26", "advisory_days_public": 103, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/openvm-org/openvm/security/advisories/GHSA-w82q-w67c-67wv" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-40573", "state": "RESERVED", "public_date": "2026-06-27", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-27" }, "refs": "ghsa-repos:MinecAnton209/NovumOS\tGHSA-rq9v-wxp3-ffrr", "description": "MinecAnton209/NovumOS repository advisory GHSA-rq9v-wxp3-ffrr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 102, "clock_known": true, "hours_public": 2448, "clock_origin": "advisory", "advisory_date": "2026-06-27", "advisory_days_public": 102, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/MinecAnton209/NovumOS/security/advisories/GHSA-rq9v-wxp3-ffrr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-13606", "state": "RESERVED", "public_date": "2026-06-28", "sources": "alas,csaf,debian,redhat", "feed_count": 4, "dates": { "alas": "2026-07-01", "redhat": "2026-06-28", "csaf": "2026-07-01" }, "refs": "alas:CVE-2026-13606;csaf:SUSE Product Security Team\tCVE-2026-13606\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-13606.json;debian:graphicsmagick;redhat:CVE-2026-13606", "description": "A flaw was found in GraphicsMagick's Photo CD (PCD) decoder.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 101, "clock_known": true, "hours_public": 2424, "clock_origin": "advisory", "advisory_date": "2026-06-28", "advisory_days_public": 101, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "graphicsmagick", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-13606.html", "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-13606.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-13606", "redhat": "https://access.redhat.com/security/cve/CVE-2026-13606" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62966", "state": "RESERVED", "public_date": "2026-06-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-28" }, "refs": "ghsa-repos:ESP32Async/ESPAsyncWebServer\tGHSA-8m8p-vhxc-jmjw", "description": "ESP32Async/ESPAsyncWebServer repository advisory GHSA-8m8p-vhxc-jmjw", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 101, "clock_known": true, "hours_public": 2424, "clock_origin": "advisory", "advisory_date": "2026-06-28", "advisory_days_public": 101, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ESP32Async/ESPAsyncWebServer/security/advisories/GHSA-8m8p-vhxc-jmjw" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62965", "state": "RESERVED", "public_date": "2026-06-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-28" }, "refs": "ghsa-repos:sabnzbd/sabnzbd\tGHSA-hxwh-mmrg-p8f5", "description": "sabnzbd/sabnzbd repository advisory GHSA-hxwh-mmrg-p8f5", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 101, "clock_known": true, "hours_public": 2424, "clock_origin": "advisory", "advisory_date": "2026-06-28", "advisory_days_public": 101, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/sabnzbd/sabnzbd/security/advisories/GHSA-hxwh-mmrg-p8f5" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63115", "state": "RESERVED", "public_date": "2026-06-29", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-29" }, "refs": "ghsa-repos:TryGhost/ActivityPub\tGHSA-mm4q-93gr-5mwc", "description": "TryGhost/ActivityPub repository advisory GHSA-mm4q-93gr-5mwc", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 100, "clock_known": true, "hours_public": 2400, "clock_origin": "advisory", "advisory_date": "2026-06-29", "advisory_days_public": 100, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/TryGhost/ActivityPub/security/advisories/GHSA-mm4q-93gr-5mwc" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55146", "state": "RESERVED", "public_date": "2026-06-29", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-29" }, "refs": "ghsa-repos:aces/Loris\tGHSA-c9q6-5f24-p7mj", "description": "aces/Loris repository advisory GHSA-c9q6-5f24-p7mj", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 100, "clock_known": true, "hours_public": 2400, "clock_origin": "advisory", "advisory_date": "2026-06-29", "advisory_days_public": 100, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/aces/Loris/security/advisories/GHSA-c9q6-5f24-p7mj" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55147", "state": "RESERVED", "public_date": "2026-06-29", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-29" }, "refs": "ghsa-repos:aces/Loris\tGHSA-m48r-jv24-jjcx", "description": "aces/Loris repository advisory GHSA-m48r-jv24-jjcx", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 100, "clock_known": true, "hours_public": 2400, "clock_origin": "advisory", "advisory_date": "2026-06-29", "advisory_days_public": 100, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/aces/Loris/security/advisories/GHSA-m48r-jv24-jjcx" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62347", "state": "RESERVED", "public_date": "2026-06-29", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-29" }, "refs": "ghsa-repos:element-hq/element-call\tGHSA-wpww-g4f9-vg8x", "description": "element-hq/element-call repository advisory GHSA-wpww-g4f9-vg8x", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 100, "clock_known": true, "hours_public": 2400, "clock_origin": "advisory", "advisory_date": "2026-06-29", "advisory_days_public": 100, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/element-hq/element-call/security/advisories/GHSA-wpww-g4f9-vg8x" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-59993", "state": "RESERVED", "public_date": "2026-06-29", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-29" }, "refs": "ghsa-repos:h2o/picotls\tGHSA-2xcv-h2pg-m99c", "description": "h2o/picotls repository advisory GHSA-2xcv-h2pg-m99c", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 100, "clock_known": true, "hours_public": 2400, "clock_origin": "advisory", "advisory_date": "2026-06-29", "advisory_days_public": 100, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/h2o/picotls/security/advisories/GHSA-2xcv-h2pg-m99c" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-50760", "state": "RESERVED", "public_date": "2026-06-29", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-06-29" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2124\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2124.json", "description": "CVE-2026-50760", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 100, "clock_known": true, "hours_public": 2400, "clock_origin": "advisory", "advisory_date": "2026-06-29", "advisory_days_public": 100, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2124.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63201", "state": "RESERVED", "public_date": "2026-06-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-30" }, "refs": "ghsa-repos:CESNET/netopeer2\tGHSA-25gm-4x89-7r2q", "description": "CESNET/netopeer2 repository advisory GHSA-25gm-4x89-7r2q", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 99, "clock_known": true, "hours_public": 2376, "clock_origin": "advisory", "advisory_date": "2026-06-30", "advisory_days_public": 99, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/CESNET/netopeer2/security/advisories/GHSA-25gm-4x89-7r2q" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61726", "state": "RESERVED", "public_date": "2026-06-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-30" }, "refs": "ghsa-repos:TandoorRecipes/recipes\tGHSA-wjf3-fq5w-7j7w", "description": "TandoorRecipes/recipes repository advisory GHSA-wjf3-fq5w-7j7w", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 99, "clock_known": true, "hours_public": 2376, "clock_origin": "advisory", "advisory_date": "2026-06-30", "advisory_days_public": 99, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-wjf3-fq5w-7j7w" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63393", "state": "RESERVED", "public_date": "2026-06-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-06-30" }, "refs": "ghsa-repos:opensearch-project/sql\tGHSA-r8cv-xvqm-4qj4", "description": "opensearch-project/sql repository advisory GHSA-r8cv-xvqm-4qj4", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 99, "clock_known": true, "hours_public": 2376, "clock_origin": "advisory", "advisory_date": "2026-06-30", "advisory_days_public": 99, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/opensearch-project/sql/security/advisories/GHSA-r8cv-xvqm-4qj4" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63430", "state": "RESERVED", "public_date": "2026-06-30", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-06-30" }, "refs": "osv:crates.io:ammonia", "description": "mXSS in ammonia via MathML `annotation-xml` encoding strip", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 99, "clock_known": true, "hours_public": 2376, "clock_origin": "advisory", "advisory_date": "2026-06-30", "advisory_days_public": 99, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "ammonia", "ecosystem": "crates.io", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-63430" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-31323", "state": "RESERVED", "public_date": "2026-06-30", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-06-30" }, "refs": "csaf:SUSE Product Security Team\tCVE-2026-31323\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-31323.json", "description": "CVE-2026-31323", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 99, "clock_known": true, "hours_public": 2376, "clock_origin": "advisory", "advisory_date": "2026-06-30", "advisory_days_public": 99, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-31323.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-15660", "state": "RESERVED", "public_date": "2026-06-30", "sources": "csaf,zdi", "feed_count": 2, "dates": { "csaf": "2026-06-30", "zdi": "2026-07-15" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2140\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2140.json;zdi:ZDI-26-423", "description": "CVE-2025-15660", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 99, "clock_known": true, "hours_public": 2376, "clock_origin": "advisory", "advisory_date": "2026-06-30", "advisory_days_public": 99, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2140.json", "zdi": "https://www.zerodayinitiative.com/advisories/ZDI-26-423/" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-13135", "state": "RESERVED", "public_date": "2026-06-30", "sources": "csaf,zdi", "feed_count": 2, "dates": { "csaf": "2026-06-30", "zdi": "2026-07-15" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2140\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2140.json;zdi:ZDI-26-424", "description": "CVE-2026-13135", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 99, "clock_known": true, "hours_public": 2376, "clock_origin": "advisory", "advisory_date": "2026-06-30", "advisory_days_public": 99, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2140.json", "zdi": "https://www.zerodayinitiative.com/advisories/ZDI-26-424/" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-13136", "state": "RESERVED", "public_date": "2026-06-30", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-06-30" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2140\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2140.json", "description": "CVE-2026-13136", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 99, "clock_known": true, "hours_public": 2376, "clock_origin": "advisory", "advisory_date": "2026-06-30", "advisory_days_public": 99, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2140.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-48003", "state": "RESERVED", "public_date": "2026-07-01", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-07-01" }, "refs": "alas:CVE-2026-48003;debian:qemu", "description": "Incorrect loop bounds in vnc_update_freq result in iterating past the last row and past the last column in the VNC stats array.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 98, "clock_known": true, "hours_public": 2352, "clock_origin": "advisory", "advisory_date": "2026-07-01", "advisory_days_public": 98, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-48003.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-48003" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-8343", "state": "RESERVED", "public_date": "2026-07-01", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-07-01" }, "refs": "alas:CVE-2026-8343;debian:qemu", "description": "qemu", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 98, "clock_known": true, "hours_public": 2352, "clock_origin": "advisory", "advisory_date": "2026-07-01", "advisory_days_public": 98, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-8343.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-8343" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-48002", "state": "RESERVED", "public_date": "2026-07-01", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-07-01" }, "refs": "alas:CVE-2026-48002;debian:qemu", "description": "Incorrect calculation of the boundary condition when tracking lossy rectangles in the worker thread will result in an OOB write which can corrupt further worker state, and/or trigger any guard pages that may lie beyond the VncWorker struct.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 98, "clock_known": true, "hours_public": 2352, "clock_origin": "advisory", "advisory_date": "2026-07-01", "advisory_days_public": 98, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-48002.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-48002" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-48004", "state": "RESERVED", "public_date": "2026-07-01", "sources": "alas,csaf,debian", "feed_count": 3, "dates": { "alas": "2026-07-01", "csaf": "2026-07-07" }, "refs": "alas:CVE-2026-48004;csaf:SUSE Product Security Team\tSUSE-SU-2026:22550-1\thttps://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_22550-1.json;debian:qemu", "description": "qemu", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 98, "clock_known": true, "hours_public": 2352, "clock_origin": "advisory", "advisory_date": "2026-07-01", "advisory_days_public": 98, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-48004.html", "csaf": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_22550-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-48004" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-48915", "state": "RESERVED", "public_date": "2026-07-01", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-07-01" }, "refs": "alas:CVE-2026-48915;debian:qemu", "description": "qemu", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 98, "clock_known": true, "hours_public": 2352, "clock_origin": "advisory", "advisory_date": "2026-07-01", "advisory_days_public": 98, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-48915.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-48915" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-6425", "state": "RESERVED", "public_date": "2026-07-01", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-07-01" }, "refs": "alas:CVE-2026-6425;debian:qemu", "description": "qemu", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 98, "clock_known": true, "hours_public": 2352, "clock_origin": "advisory", "advisory_date": "2026-07-01", "advisory_days_public": 98, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-6425.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-6425" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-46487", "state": "RESERVED", "public_date": "2026-07-01", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-07-01", "osv": "2026-07-01" }, "refs": "ghsa:GHSA-582q-v28r-7cxr;osv:Maven:org.geonetwork-opensource:geonetwork", "description": "GeoNetwork has ACL bypass on Elasticsearch search when request body omits query field", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 98, "clock_known": true, "hours_public": 2352, "clock_origin": "advisory", "advisory_date": "2026-07-01", "advisory_days_public": 98, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "org.geonetwork-opensource", "ecosystem": "Maven", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-582q-v28r-7cxr", "osv": "https://osv.dev/list?q=CVE-2026-46487" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-39379", "state": "RESERVED", "public_date": "2026-07-01", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-07-01", "osv": "2026-07-01" }, "refs": "ghsa:GHSA-2v4m-fw6c-g78f;osv:Maven:org.geonetwork-opensource:geonetwork", "description": "GeoNetwork has reflected XSS through client-side template injection", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 98, "clock_known": true, "hours_public": 2352, "clock_origin": "advisory", "advisory_date": "2026-07-01", "advisory_days_public": 98, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "org.geonetwork-opensource", "ecosystem": "Maven", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-2v4m-fw6c-g78f", "osv": "https://osv.dev/list?q=CVE-2026-39379" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63441", "state": "RESERVED", "public_date": "2026-07-01", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-01" }, "refs": "ghsa-repos:Bubka/2FAuth\tGHSA-wc8m-7c5g-xrrc", "description": "Bubka/2FAuth repository advisory GHSA-wc8m-7c5g-xrrc", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 98, "clock_known": true, "hours_public": 2352, "clock_origin": "advisory", "advisory_date": "2026-07-01", "advisory_days_public": 98, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Bubka/2FAuth/security/advisories/GHSA-wc8m-7c5g-xrrc" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63440", "state": "RESERVED", "public_date": "2026-07-01", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-01" }, "refs": "ghsa-repos:Bubka/2FAuth\tGHSA-22mh-gmrh-gpwg", "description": "Bubka/2FAuth repository advisory GHSA-22mh-gmrh-gpwg", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 98, "clock_known": true, "hours_public": 2352, "clock_origin": "advisory", "advisory_date": "2026-07-01", "advisory_days_public": 98, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Bubka/2FAuth/security/advisories/GHSA-22mh-gmrh-gpwg" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63439", "state": "RESERVED", "public_date": "2026-07-01", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-01" }, "refs": "ghsa-repos:Bubka/2FAuth\tGHSA-mh8r-74x2-r457", "description": "Bubka/2FAuth repository advisory GHSA-mh8r-74x2-r457", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 98, "clock_known": true, "hours_public": 2352, "clock_origin": "advisory", "advisory_date": "2026-07-01", "advisory_days_public": 98, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Bubka/2FAuth/security/advisories/GHSA-mh8r-74x2-r457" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63438", "state": "RESERVED", "public_date": "2026-07-01", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-01" }, "refs": "ghsa-repos:Bubka/2FAuth\tGHSA-r9xx-45m8-mw24", "description": "Bubka/2FAuth repository advisory GHSA-r9xx-45m8-mw24", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 98, "clock_known": true, "hours_public": 2352, "clock_origin": "advisory", "advisory_date": "2026-07-01", "advisory_days_public": 98, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Bubka/2FAuth/security/advisories/GHSA-r9xx-45m8-mw24" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63437", "state": "RESERVED", "public_date": "2026-07-01", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-01" }, "refs": "ghsa-repos:Bubka/2FAuth\tGHSA-m52c-63g8-qg5c", "description": "Bubka/2FAuth repository advisory GHSA-m52c-63g8-qg5c", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 98, "clock_known": true, "hours_public": 2352, "clock_origin": "advisory", "advisory_date": "2026-07-01", "advisory_days_public": 98, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Bubka/2FAuth/security/advisories/GHSA-m52c-63g8-qg5c" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63494", "state": "RESERVED", "public_date": "2026-07-01", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-01" }, "refs": "ghsa-repos:WWBN/AVideo\tGHSA-g9x9-q7qj-6mv5", "description": "WWBN/AVideo repository advisory GHSA-g9x9-q7qj-6mv5", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 98, "clock_known": true, "hours_public": 2352, "clock_origin": "advisory", "advisory_date": "2026-07-01", "advisory_days_public": 98, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/WWBN/AVideo/security/advisories/GHSA-g9x9-q7qj-6mv5" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63492", "state": "RESERVED", "public_date": "2026-07-01", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-01" }, "refs": "ghsa-repos:WWBN/AVideo\tGHSA-j44m-77cc-p3cc", "description": "WWBN/AVideo repository advisory GHSA-j44m-77cc-p3cc", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 98, "clock_known": true, "hours_public": 2352, "clock_origin": "advisory", "advisory_date": "2026-07-01", "advisory_days_public": 98, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/WWBN/AVideo/security/advisories/GHSA-j44m-77cc-p3cc" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-45146", "state": "RESERVED", "public_date": "2026-07-01", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-01" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-prqp-8x29-cr88", "description": "chamilo/chamilo-lms repository advisory GHSA-prqp-8x29-cr88", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 98, "clock_known": true, "hours_public": 2352, "clock_origin": "advisory", "advisory_date": "2026-07-01", "advisory_days_public": 98, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-prqp-8x29-cr88" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63433", "state": "RESERVED", "public_date": "2026-07-01", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-01" }, "refs": "ghsa-repos:franklioxygen/MyTube\tGHSA-9qxv-p8j9-gv5r", "description": "franklioxygen/MyTube repository advisory GHSA-9qxv-p8j9-gv5r", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 98, "clock_known": true, "hours_public": 2352, "clock_origin": "advisory", "advisory_date": "2026-07-01", "advisory_days_public": 98, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/franklioxygen/MyTube/security/advisories/GHSA-9qxv-p8j9-gv5r" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63434", "state": "RESERVED", "public_date": "2026-07-01", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-01" }, "refs": "ghsa-repos:franklioxygen/MyTube\tGHSA-h5xx-g8fc-crr7", "description": "franklioxygen/MyTube repository advisory GHSA-h5xx-g8fc-crr7", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 98, "clock_known": true, "hours_public": 2352, "clock_origin": "advisory", "advisory_date": "2026-07-01", "advisory_days_public": 98, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/franklioxygen/MyTube/security/advisories/GHSA-h5xx-g8fc-crr7" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63442", "state": "RESERVED", "public_date": "2026-07-01", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-01" }, "refs": "ghsa-repos:opnsense/core\tGHSA-2v2x-m4j7-76pv", "description": "opnsense/core repository advisory GHSA-2v2x-m4j7-76pv", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 98, "clock_known": true, "hours_public": 2352, "clock_origin": "advisory", "advisory_date": "2026-07-01", "advisory_days_public": 98, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/opnsense/core/security/advisories/GHSA-2v2x-m4j7-76pv" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-58394", "state": "RESERVED", "public_date": "2026-07-01", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-07-01", "csaf": "2026-07-01" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2177\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2177.json;ghsa-repos:opnsense/core\tGHSA-8pgr-x852-qx4j", "description": "opnsense/core repository advisory GHSA-8pgr-x852-qx4j", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 98, "clock_known": true, "hours_public": 2352, "clock_origin": "advisory", "advisory_date": "2026-07-01", "advisory_days_public": 98, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2177.json", "ghsa-repos": "https://github.com/opnsense/core/security/advisories/GHSA-8pgr-x852-qx4j" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-58395", "state": "RESERVED", "public_date": "2026-07-01", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-07-01", "csaf": "2026-07-01" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2177\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2177.json;ghsa-repos:opnsense/core\tGHSA-98h6-479q-9q3w", "description": "opnsense/core repository advisory GHSA-98h6-479q-9q3w", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 98, "clock_known": true, "hours_public": 2352, "clock_origin": "advisory", "advisory_date": "2026-07-01", "advisory_days_public": 98, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2177.json", "ghsa-repos": "https://github.com/opnsense/core/security/advisories/GHSA-98h6-479q-9q3w" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-58392", "state": "RESERVED", "public_date": "2026-07-01", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-07-01", "csaf": "2026-07-01" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2177\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2177.json;ghsa-repos:opnsense/core\tGHSA-h793-67jm-j4m5", "description": "opnsense/core repository advisory GHSA-h793-67jm-j4m5", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 98, "clock_known": true, "hours_public": 2352, "clock_origin": "advisory", "advisory_date": "2026-07-01", "advisory_days_public": 98, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2177.json", "ghsa-repos": "https://github.com/opnsense/core/security/advisories/GHSA-h793-67jm-j4m5" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-58391", "state": "RESERVED", "public_date": "2026-07-01", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-07-01", "csaf": "2026-07-01" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2177\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2177.json;ghsa-repos:opnsense/core\tGHSA-2xrm-p255-p43h", "description": "opnsense/core repository advisory GHSA-2xrm-p255-p43h", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 98, "clock_known": true, "hours_public": 2352, "clock_origin": "advisory", "advisory_date": "2026-07-01", "advisory_days_public": 98, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2177.json", "ghsa-repos": "https://github.com/opnsense/core/security/advisories/GHSA-2xrm-p255-p43h" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57155", "state": "RESERVED", "public_date": "2026-07-01", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-07-01", "csaf": "2026-07-01" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2177\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2177.json;ghsa-repos:opnsense/core\tGHSA-wjqq-rfmm-v5h3", "description": "opnsense/core repository advisory GHSA-wjqq-rfmm-v5h3", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 98, "clock_known": true, "hours_public": 2352, "clock_origin": "advisory", "advisory_date": "2026-07-01", "advisory_days_public": 98, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2177.json", "ghsa-repos": "https://github.com/opnsense/core/security/advisories/GHSA-wjqq-rfmm-v5h3" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-58390", "state": "RESERVED", "public_date": "2026-07-01", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-01" }, "refs": "ghsa-repos:opnsense/core\tGHSA-26cj-h9rj-g5pf", "description": "opnsense/core repository advisory GHSA-26cj-h9rj-g5pf", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 98, "clock_known": true, "hours_public": 2352, "clock_origin": "advisory", "advisory_date": "2026-07-01", "advisory_days_public": 98, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/opnsense/core/security/advisories/GHSA-26cj-h9rj-g5pf" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-58393", "state": "RESERVED", "public_date": "2026-07-01", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-07-01", "csaf": "2026-07-01" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2177\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2177.json;ghsa-repos:opnsense/core\tGHSA-2m9v-p7r9-gfcw", "description": "opnsense/core repository advisory GHSA-2m9v-p7r9-gfcw", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 98, "clock_known": true, "hours_public": 2352, "clock_origin": "advisory", "advisory_date": "2026-07-01", "advisory_days_public": 98, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2177.json", "ghsa-repos": "https://github.com/opnsense/core/security/advisories/GHSA-2m9v-p7r9-gfcw" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57154", "state": "RESERVED", "public_date": "2026-07-01", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-07-01", "csaf": "2026-07-01" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2177\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2177.json;ghsa-repos:opnsense/core\tGHSA-fq94-cxvc-9r7w", "description": "opnsense/core repository advisory GHSA-fq94-cxvc-9r7w", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 98, "clock_known": true, "hours_public": 2352, "clock_origin": "advisory", "advisory_date": "2026-07-01", "advisory_days_public": 98, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2177.json", "ghsa-repos": "https://github.com/opnsense/core/security/advisories/GHSA-fq94-cxvc-9r7w" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63497", "state": "RESERVED", "public_date": "2026-07-01", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-01" }, "refs": "ghsa-repos:titraio/titra\tGHSA-cphv-qx83-x397", "description": "titraio/titra repository advisory GHSA-cphv-qx83-x397", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 98, "clock_known": true, "hours_public": 2352, "clock_origin": "advisory", "advisory_date": "2026-07-01", "advisory_days_public": 98, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/titraio/titra/security/advisories/GHSA-cphv-qx83-x397" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63502", "state": "RESERVED", "public_date": "2026-07-01", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-01" }, "refs": "ghsa-repos:yeti-platform/yeti\tGHSA-4q3w-w2g5-8wqq", "description": "yeti-platform/yeti repository advisory GHSA-4q3w-w2g5-8wqq", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 98, "clock_known": true, "hours_public": 2352, "clock_origin": "advisory", "advisory_date": "2026-07-01", "advisory_days_public": 98, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/yeti-platform/yeti/security/advisories/GHSA-4q3w-w2g5-8wqq" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63500", "state": "RESERVED", "public_date": "2026-07-01", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-01" }, "refs": "ghsa-repos:yeti-platform/yeti\tGHSA-6xf2-8436-rgvf", "description": "yeti-platform/yeti repository advisory GHSA-6xf2-8436-rgvf", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 98, "clock_known": true, "hours_public": 2352, "clock_origin": "advisory", "advisory_date": "2026-07-01", "advisory_days_public": 98, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/yeti-platform/yeti/security/advisories/GHSA-6xf2-8436-rgvf" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63489", "state": "RESERVED", "public_date": "2026-07-01", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-01" }, "refs": "ghsa-repos:yeti-platform/yeti\tGHSA-vw33-fwfx-6m9p", "description": "yeti-platform/yeti repository advisory GHSA-vw33-fwfx-6m9p", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 98, "clock_known": true, "hours_public": 2352, "clock_origin": "advisory", "advisory_date": "2026-07-01", "advisory_days_public": 98, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/yeti-platform/yeti/security/advisories/GHSA-vw33-fwfx-6m9p" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63482", "state": "RESERVED", "public_date": "2026-07-01", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-01" }, "refs": "ghsa-repos:yeti-platform/yeti\tGHSA-34r4-95hx-gxqr", "description": "yeti-platform/yeti repository advisory GHSA-34r4-95hx-gxqr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 98, "clock_known": true, "hours_public": 2352, "clock_origin": "advisory", "advisory_date": "2026-07-01", "advisory_days_public": 98, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/yeti-platform/yeti/security/advisories/GHSA-34r4-95hx-gxqr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-28632", "state": "RESERVED", "public_date": "2026-07-01", "sources": "samsung", "feed_count": 1, "dates": { "samsung": "2026-07-01" }, "refs": "samsung:SMR-Jul-2026", "description": "Samsung SMR Jul 2026", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 98, "clock_known": true, "hours_public": 2352, "clock_origin": "advisory", "advisory_date": "2026-07-01", "advisory_days_public": 98, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "samsung": "https://security.samsungmobile.com/securityUpdate.smsb" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-28585", "state": "RESERVED", "public_date": "2026-07-01", "sources": "samsung", "feed_count": 1, "dates": { "samsung": "2026-07-01" }, "refs": "samsung:SMR-Jul-2026", "description": "Samsung SMR Jul 2026", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 98, "clock_known": true, "hours_public": 2352, "clock_origin": "advisory", "advisory_date": "2026-07-01", "advisory_days_public": 98, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "samsung": "https://security.samsungmobile.com/securityUpdate.smsb" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-12184", "state": "RESERVED", "public_date": "2026-07-02", "sources": "alas,alpine,csaf,debian,ghsa-repos", "feed_count": 5, "dates": { "alas": "2026-07-06", "ghsa-repos": "2026-07-02", "csaf": "2026-07-12" }, "refs": "alas:CVE-2026-12184;alpine:php83;csaf:SUSE Product Security Team\topenSUSE-SU-2026:21308-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21308-1.json;debian:php8.2;ghsa-repos:php/php-src\tGHSA-mhmq-mmqj-2v39", "description": "PHP: Failure to setup TLS with a remote server can result in a remote DoS", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 97, "clock_known": true, "hours_public": 2328, "clock_origin": "advisory", "advisory_date": "2026-07-02", "advisory_days_public": 97, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "php83", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-12184.html", "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-12184", "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21308-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-12184", "ghsa-repos": "https://github.com/php/php-src/security/advisories/GHSA-mhmq-mmqj-2v39" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63011", "state": "RESERVED", "public_date": "2026-07-02", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-02" }, "refs": "ghsa-repos:Intermesh/groupoffice\tGHSA-4m9w-3p93-6cwx", "description": "Intermesh/groupoffice repository advisory GHSA-4m9w-3p93-6cwx", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 97, "clock_known": true, "hours_public": 2328, "clock_origin": "advisory", "advisory_date": "2026-07-02", "advisory_days_public": 97, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Intermesh/groupoffice/security/advisories/GHSA-4m9w-3p93-6cwx" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63010", "state": "RESERVED", "public_date": "2026-07-02", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-02" }, "refs": "ghsa-repos:Intermesh/groupoffice\tGHSA-jw34-6g49-r6cw", "description": "Intermesh/groupoffice repository advisory GHSA-jw34-6g49-r6cw", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 97, "clock_known": true, "hours_public": 2328, "clock_origin": "advisory", "advisory_date": "2026-07-02", "advisory_days_public": 97, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Intermesh/groupoffice/security/advisories/GHSA-jw34-6g49-r6cw" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63653", "state": "RESERVED", "public_date": "2026-07-02", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-02" }, "refs": "ghsa-repos:Intermesh/groupoffice\tGHSA-3cp5-q6fp-mqf5", "description": "Intermesh/groupoffice repository advisory GHSA-3cp5-q6fp-mqf5", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 97, "clock_known": true, "hours_public": 2328, "clock_origin": "advisory", "advisory_date": "2026-07-02", "advisory_days_public": 97, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Intermesh/groupoffice/security/advisories/GHSA-3cp5-q6fp-mqf5" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-64668", "state": "RESERVED", "public_date": "2026-07-02", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-02" }, "refs": "ghsa-repos:mcdope/pam_usb\tGHSA-7583-9cqv-j9rf", "description": "mcdope/pam_usb repository advisory GHSA-7583-9cqv-j9rf", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 97, "clock_known": true, "hours_public": 2328, "clock_origin": "advisory", "advisory_date": "2026-07-02", "advisory_days_public": 97, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/mcdope/pam_usb/security/advisories/GHSA-7583-9cqv-j9rf" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-64669", "state": "RESERVED", "public_date": "2026-07-02", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-02" }, "refs": "ghsa-repos:mcdope/pam_usb\tGHSA-gc4c-v52c-2v34", "description": "mcdope/pam_usb repository advisory GHSA-gc4c-v52c-2v34", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 97, "clock_known": true, "hours_public": 2328, "clock_origin": "advisory", "advisory_date": "2026-07-02", "advisory_days_public": 97, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/mcdope/pam_usb/security/advisories/GHSA-gc4c-v52c-2v34" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-64667", "state": "RESERVED", "public_date": "2026-07-02", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-02" }, "refs": "ghsa-repos:mcdope/pam_usb\tGHSA-gc6f-5hpq-ghxh", "description": "mcdope/pam_usb repository advisory GHSA-gc6f-5hpq-ghxh", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 97, "clock_known": true, "hours_public": 2328, "clock_origin": "advisory", "advisory_date": "2026-07-02", "advisory_days_public": 97, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/mcdope/pam_usb/security/advisories/GHSA-gc6f-5hpq-ghxh" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-64666", "state": "RESERVED", "public_date": "2026-07-02", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-02" }, "refs": "ghsa-repos:mcdope/pam_usb\tGHSA-ffx6-xjp6-x33g", "description": "mcdope/pam_usb repository advisory GHSA-ffx6-xjp6-x33g", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 97, "clock_known": true, "hours_public": 2328, "clock_origin": "advisory", "advisory_date": "2026-07-02", "advisory_days_public": 97, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/mcdope/pam_usb/security/advisories/GHSA-ffx6-xjp6-x33g" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-64686", "state": "RESERVED", "public_date": "2026-07-02", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-02" }, "refs": "ghsa-repos:opensearch-project/OpenSearch-Dashboards\tGHSA-6qp6-3675-ffr3", "description": "opensearch-project/OpenSearch-Dashboards repository advisory GHSA-6qp6-3675-ffr3", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 97, "clock_known": true, "hours_public": 2328, "clock_origin": "advisory", "advisory_date": "2026-07-02", "advisory_days_public": 97, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/opensearch-project/OpenSearch-Dashboards/security/advisories/GHSA-6qp6-3675-ffr3" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-71490", "state": "RESERVED", "public_date": "2026-07-02", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-02" }, "refs": "ghsa-repos:opnsense/core\tGHSA-p9pr-782r-w2xw", "description": "opnsense/core repository advisory GHSA-p9pr-782r-w2xw", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 97, "clock_known": true, "hours_public": 2328, "clock_origin": "advisory", "advisory_date": "2026-07-02", "advisory_days_public": 97, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/opnsense/core/security/advisories/GHSA-p9pr-782r-w2xw" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-46642", "state": "RESERVED", "public_date": "2026-07-02", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-07-02" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2189\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2189.json", "description": "CVE-2025-46642", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 97, "clock_known": true, "hours_public": 2328, "clock_origin": "advisory", "advisory_date": "2026-07-02", "advisory_days_public": 97, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2189.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-56084", "state": "RESERVED", "public_date": "2026-07-02", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-07-02" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2189\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2189.json", "description": "CVE-2026-56084", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 97, "clock_known": true, "hours_public": 2328, "clock_origin": "advisory", "advisory_date": "2026-07-02", "advisory_days_public": 97, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2189.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61810", "state": "RESERVED", "public_date": "2026-07-03", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-03" }, "refs": "ghsa-repos:DMTF/libspdm\tGHSA-chjj-xvqx-c8w4", "description": "DMTF/libspdm repository advisory GHSA-chjj-xvqx-c8w4", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 96, "clock_known": true, "hours_public": 2304, "clock_origin": "advisory", "advisory_date": "2026-07-03", "advisory_days_public": 96, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/DMTF/libspdm/security/advisories/GHSA-chjj-xvqx-c8w4" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61637", "state": "RESERVED", "public_date": "2026-07-03", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-03" }, "refs": "ghsa-repos:Icinga/icingaweb2\tGHSA-w7c2-xjv9-q8fv", "description": "Icinga/icingaweb2 repository advisory GHSA-w7c2-xjv9-q8fv", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 96, "clock_known": true, "hours_public": 2304, "clock_origin": "advisory", "advisory_date": "2026-07-03", "advisory_days_public": 96, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Icinga/icingaweb2/security/advisories/GHSA-w7c2-xjv9-q8fv" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61619", "state": "RESERVED", "public_date": "2026-07-03", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-03" }, "refs": "ghsa-repos:coreruleset/coreruleset\tGHSA-f5qm-3h4p-8qhg", "description": "coreruleset/coreruleset repository advisory GHSA-f5qm-3h4p-8qhg", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 96, "clock_known": true, "hours_public": 2304, "clock_origin": "advisory", "advisory_date": "2026-07-03", "advisory_days_public": 96, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/coreruleset/coreruleset/security/advisories/GHSA-f5qm-3h4p-8qhg" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62971", "state": "RESERVED", "public_date": "2026-07-03", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-03" }, "refs": "ghsa-repos:coreruleset/coreruleset\tGHSA-6jp8-c2w2-x7wr", "description": "coreruleset/coreruleset repository advisory GHSA-6jp8-c2w2-x7wr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 96, "clock_known": true, "hours_public": 2304, "clock_origin": "advisory", "advisory_date": "2026-07-03", "advisory_days_public": 96, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/coreruleset/coreruleset/security/advisories/GHSA-6jp8-c2w2-x7wr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-65825", "state": "RESERVED", "public_date": "2026-07-03", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-03" }, "refs": "ghsa-repos:open-reception/appointment-booking-software\tGHSA-v4q4-xmqf-gmq8", "description": "open-reception/appointment-booking-software repository advisory GHSA-v4q4-xmqf-gmq8", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 96, "clock_known": true, "hours_public": 2304, "clock_origin": "advisory", "advisory_date": "2026-07-03", "advisory_days_public": 96, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/open-reception/appointment-booking-software/security/advisories/GHSA-v4q4-xmqf-gmq8" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-65824", "state": "RESERVED", "public_date": "2026-07-03", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-03" }, "refs": "ghsa-repos:open-reception/appointment-booking-software\tGHSA-hvcx-8476-rwv6", "description": "open-reception/appointment-booking-software repository advisory GHSA-hvcx-8476-rwv6", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 96, "clock_known": true, "hours_public": 2304, "clock_origin": "advisory", "advisory_date": "2026-07-03", "advisory_days_public": 96, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/open-reception/appointment-booking-software/security/advisories/GHSA-hvcx-8476-rwv6" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-58331", "state": "RESERVED", "public_date": "2026-07-03", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-07-03" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-58331\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58331.json", "description": "moodle: arbitrary file read risk", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 96, "clock_known": true, "hours_public": 2304, "clock_origin": "advisory", "advisory_date": "2026-07-03", "advisory_days_public": 96, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58331.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-58332", "state": "RESERVED", "public_date": "2026-07-03", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-07-03" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-58332\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58332.json", "description": "moodle: Email-based MFA bypass", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 96, "clock_known": true, "hours_public": 2304, "clock_origin": "advisory", "advisory_date": "2026-07-03", "advisory_days_public": 96, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58332.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-58333", "state": "RESERVED", "public_date": "2026-07-03", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-07-03" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-58333\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58333.json", "description": "moodle: Arbitrary file read risk in backup restore", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 96, "clock_known": true, "hours_public": 2304, "clock_origin": "advisory", "advisory_date": "2026-07-03", "advisory_days_public": 96, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58333.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-58334", "state": "RESERVED", "public_date": "2026-07-03", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-07-03" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-58334\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58334.json", "description": "moodle: RCE risk via admin presets import", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 96, "clock_known": true, "hours_public": 2304, "clock_origin": "advisory", "advisory_date": "2026-07-03", "advisory_days_public": 96, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58334.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-58335", "state": "RESERVED", "public_date": "2026-07-03", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-07-03" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-58335\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58335.json", "description": "moodle: Missing group access checks in grade web services", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 96, "clock_known": true, "hours_public": 2304, "clock_origin": "advisory", "advisory_date": "2026-07-03", "advisory_days_public": 96, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58335.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-58336", "state": "RESERVED", "public_date": "2026-07-03", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-07-03" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-58336\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58336.json", "description": "moodle: IDOR allows arbitrary comment deletion", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 96, "clock_known": true, "hours_public": 2304, "clock_origin": "advisory", "advisory_date": "2026-07-03", "advisory_days_public": 96, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58336.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-58337", "state": "RESERVED", "public_date": "2026-07-03", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-07-03" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-58337\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58337.json", "description": "moodle: CSRF risk in user homepage preference setting", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 96, "clock_known": true, "hours_public": 2304, "clock_origin": "advisory", "advisory_date": "2026-07-03", "advisory_days_public": 96, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58337.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-58338", "state": "RESERVED", "public_date": "2026-07-03", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-07-03" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-58338\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58338.json", "description": "moodle: CSRF risk in user profile page reset", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 96, "clock_known": true, "hours_public": 2304, "clock_origin": "advisory", "advisory_date": "2026-07-03", "advisory_days_public": 96, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58338.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-58339", "state": "RESERVED", "public_date": "2026-07-03", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-07-03" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-58339\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58339.json", "description": "moodle: Reflected XSS via Feedback import error message", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 96, "clock_known": true, "hours_public": 2304, "clock_origin": "advisory", "advisory_date": "2026-07-03", "advisory_days_public": 96, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58339.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-58340", "state": "RESERVED", "public_date": "2026-07-03", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-07-03" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-58340\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58340.json", "description": "moodle: CSRF and XSS in grade item idnumber editing", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 96, "clock_known": true, "hours_public": 2304, "clock_origin": "advisory", "advisory_date": "2026-07-03", "advisory_days_public": 96, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58340.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-58342", "state": "RESERVED", "public_date": "2026-07-03", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-07-03" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-58342\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58342.json", "description": "moodle: CSRF risk when adding quiz section headings", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 96, "clock_known": true, "hours_public": 2304, "clock_origin": "advisory", "advisory_date": "2026-07-03", "advisory_days_public": 96, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58342.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-58344", "state": "RESERVED", "public_date": "2026-07-03", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-07-03" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-58344\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58344.json", "description": "moodle: CSRF risk in quiz attempt regrading", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 96, "clock_known": true, "hours_public": 2304, "clock_origin": "advisory", "advisory_date": "2026-07-03", "advisory_days_public": 96, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58344.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-68548", "state": "RESERVED", "public_date": "2026-07-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-04" }, "refs": "ghsa-repos:xyproto/algernon\tGHSA-vm84-8c4p-64hx", "description": "xyproto/algernon repository advisory GHSA-vm84-8c4p-64hx", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 95, "clock_known": true, "hours_public": 2280, "clock_origin": "advisory", "advisory_date": "2026-07-04", "advisory_days_public": 95, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/xyproto/algernon/security/advisories/GHSA-vm84-8c4p-64hx" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-58498", "state": "RESERVED", "public_date": "2026-07-05", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-05" }, "refs": "ghsa-repos:bacnet-stack/bacnet-stack\tGHSA-4p4w-m434-jrhj", "description": "bacnet-stack/bacnet-stack repository advisory GHSA-4p4w-m434-jrhj", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 94, "clock_known": true, "hours_public": 2256, "clock_origin": "advisory", "advisory_date": "2026-07-05", "advisory_days_public": 94, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-4p4w-m434-jrhj" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-58265", "state": "RESERVED", "public_date": "2026-07-05", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-05" }, "refs": "ghsa-repos:bacnet-stack/bacnet-stack\tGHSA-j66x-fr38-r7m5", "description": "bacnet-stack/bacnet-stack repository advisory GHSA-j66x-fr38-r7m5", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 94, "clock_known": true, "hours_public": 2256, "clock_origin": "advisory", "advisory_date": "2026-07-05", "advisory_days_public": 94, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-j66x-fr38-r7m5" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-64675", "state": "RESERVED", "public_date": "2026-07-05", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-05" }, "refs": "ghsa-repos:bacnet-stack/bacnet-stack\tGHSA-mmg6-p4pr-cj6h", "description": "bacnet-stack/bacnet-stack repository advisory GHSA-mmg6-p4pr-cj6h", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 94, "clock_known": true, "hours_public": 2256, "clock_origin": "advisory", "advisory_date": "2026-07-05", "advisory_days_public": 94, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-mmg6-p4pr-cj6h" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-52790", "state": "RESERVED", "public_date": "2026-07-05", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-05" }, "refs": "ghsa-repos:bacnet-stack/bacnet-stack\tGHSA-jr7p-rm2x-739x", "description": "bacnet-stack/bacnet-stack repository advisory GHSA-jr7p-rm2x-739x", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 94, "clock_known": true, "hours_public": 2256, "clock_origin": "advisory", "advisory_date": "2026-07-05", "advisory_days_public": 94, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-jr7p-rm2x-739x" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-52789", "state": "RESERVED", "public_date": "2026-07-05", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-05" }, "refs": "ghsa-repos:bacnet-stack/bacnet-stack\tGHSA-4rf9-4vgq-5gcw", "description": "bacnet-stack/bacnet-stack repository advisory GHSA-4rf9-4vgq-5gcw", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 94, "clock_known": true, "hours_public": 2256, "clock_origin": "advisory", "advisory_date": "2026-07-05", "advisory_days_public": 94, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-4rf9-4vgq-5gcw" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-52788", "state": "RESERVED", "public_date": "2026-07-05", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-05" }, "refs": "ghsa-repos:bacnet-stack/bacnet-stack\tGHSA-rf83-3rr5-v4mj", "description": "bacnet-stack/bacnet-stack repository advisory GHSA-rf83-3rr5-v4mj", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 94, "clock_known": true, "hours_public": 2256, "clock_origin": "advisory", "advisory_date": "2026-07-05", "advisory_days_public": 94, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-rf83-3rr5-v4mj" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-52786", "state": "RESERVED", "public_date": "2026-07-05", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-05" }, "refs": "ghsa-repos:bacnet-stack/bacnet-stack\tGHSA-c4q6-7827-mfg6", "description": "bacnet-stack/bacnet-stack repository advisory GHSA-c4q6-7827-mfg6", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 94, "clock_known": true, "hours_public": 2256, "clock_origin": "advisory", "advisory_date": "2026-07-05", "advisory_days_public": 94, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-c4q6-7827-mfg6" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-52787", "state": "RESERVED", "public_date": "2026-07-05", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-05" }, "refs": "ghsa-repos:bacnet-stack/bacnet-stack\tGHSA-4fgg-fghm-jm43", "description": "bacnet-stack/bacnet-stack repository advisory GHSA-4fgg-fghm-jm43", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 94, "clock_known": true, "hours_public": 2256, "clock_origin": "advisory", "advisory_date": "2026-07-05", "advisory_days_public": 94, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-4fgg-fghm-jm43" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-49990", "state": "RESERVED", "public_date": "2026-07-05", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-05" }, "refs": "ghsa-repos:bacnet-stack/bacnet-stack\tGHSA-8759-hx7g-94qx", "description": "bacnet-stack/bacnet-stack repository advisory GHSA-8759-hx7g-94qx", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 94, "clock_known": true, "hours_public": 2256, "clock_origin": "advisory", "advisory_date": "2026-07-05", "advisory_days_public": 94, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-8759-hx7g-94qx" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-47710", "state": "RESERVED", "public_date": "2026-07-05", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-05" }, "refs": "ghsa-repos:bacnet-stack/bacnet-stack\tGHSA-2xm5-gjpc-9m6q", "description": "bacnet-stack/bacnet-stack repository advisory GHSA-2xm5-gjpc-9m6q", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 94, "clock_known": true, "hours_public": 2256, "clock_origin": "advisory", "advisory_date": "2026-07-05", "advisory_days_public": 94, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-2xm5-gjpc-9m6q" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-47711", "state": "RESERVED", "public_date": "2026-07-05", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-05" }, "refs": "ghsa-repos:bacnet-stack/bacnet-stack\tGHSA-vrpm-9gm2-x552", "description": "bacnet-stack/bacnet-stack repository advisory GHSA-vrpm-9gm2-x552", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 94, "clock_known": true, "hours_public": 2256, "clock_origin": "advisory", "advisory_date": "2026-07-05", "advisory_days_public": 94, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-vrpm-9gm2-x552" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-47259", "state": "RESERVED", "public_date": "2026-07-05", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-05" }, "refs": "ghsa-repos:bacnet-stack/bacnet-stack\tGHSA-9w9m-w7w5-rrv3", "description": "bacnet-stack/bacnet-stack repository advisory GHSA-9w9m-w7w5-rrv3", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 94, "clock_known": true, "hours_public": 2256, "clock_origin": "advisory", "advisory_date": "2026-07-05", "advisory_days_public": 94, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-9w9m-w7w5-rrv3" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-47258", "state": "RESERVED", "public_date": "2026-07-05", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-05" }, "refs": "ghsa-repos:bacnet-stack/bacnet-stack\tGHSA-rjmv-3mcm-r83j", "description": "bacnet-stack/bacnet-stack repository advisory GHSA-rjmv-3mcm-r83j", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 94, "clock_known": true, "hours_public": 2256, "clock_origin": "advisory", "advisory_date": "2026-07-05", "advisory_days_public": 94, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-rjmv-3mcm-r83j" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-47257", "state": "RESERVED", "public_date": "2026-07-05", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-05" }, "refs": "ghsa-repos:bacnet-stack/bacnet-stack\tGHSA-x6pp-3pf3-f87r", "description": "bacnet-stack/bacnet-stack repository advisory GHSA-x6pp-3pf3-f87r", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 94, "clock_known": true, "hours_public": 2256, "clock_origin": "advisory", "advisory_date": "2026-07-05", "advisory_days_public": 94, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-x6pp-3pf3-f87r" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-45265", "state": "RESERVED", "public_date": "2026-07-05", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-05" }, "refs": "ghsa-repos:bacnet-stack/bacnet-stack\tGHSA-v3gx-mwrp-xvh5", "description": "bacnet-stack/bacnet-stack repository advisory GHSA-v3gx-mwrp-xvh5", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 94, "clock_known": true, "hours_public": 2256, "clock_origin": "advisory", "advisory_date": "2026-07-05", "advisory_days_public": 94, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-v3gx-mwrp-xvh5" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-45341", "state": "RESERVED", "public_date": "2026-07-05", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-05" }, "refs": "ghsa-repos:bacnet-stack/bacnet-stack\tGHSA-fv2r-c2m2-7qhh", "description": "bacnet-stack/bacnet-stack repository advisory GHSA-fv2r-c2m2-7qhh", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 94, "clock_known": true, "hours_public": 2256, "clock_origin": "advisory", "advisory_date": "2026-07-05", "advisory_days_public": 94, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-fv2r-c2m2-7qhh" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-46674", "state": "RESERVED", "public_date": "2026-07-05", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-05" }, "refs": "ghsa-repos:bacnet-stack/bacnet-stack\tGHSA-8384-pwhh-cxjh", "description": "bacnet-stack/bacnet-stack repository advisory GHSA-8384-pwhh-cxjh", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 94, "clock_known": true, "hours_public": 2256, "clock_origin": "advisory", "advisory_date": "2026-07-05", "advisory_days_public": 94, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-8384-pwhh-cxjh" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-46676", "state": "RESERVED", "public_date": "2026-07-05", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-05" }, "refs": "ghsa-repos:bacnet-stack/bacnet-stack\tGHSA-2fwp-32cj-g3x4", "description": "bacnet-stack/bacnet-stack repository advisory GHSA-2fwp-32cj-g3x4", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 94, "clock_known": true, "hours_public": 2256, "clock_origin": "advisory", "advisory_date": "2026-07-05", "advisory_days_public": 94, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-2fwp-32cj-g3x4" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-46677", "state": "RESERVED", "public_date": "2026-07-05", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-05" }, "refs": "ghsa-repos:bacnet-stack/bacnet-stack\tGHSA-rv5h-cxwq-q3mh", "description": "bacnet-stack/bacnet-stack repository advisory GHSA-rv5h-cxwq-q3mh", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 94, "clock_known": true, "hours_public": 2256, "clock_origin": "advisory", "advisory_date": "2026-07-05", "advisory_days_public": 94, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-rv5h-cxwq-q3mh" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-47217", "state": "RESERVED", "public_date": "2026-07-05", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-05" }, "refs": "ghsa-repos:bacnet-stack/bacnet-stack\tGHSA-wjw5-q9g6-2764", "description": "bacnet-stack/bacnet-stack repository advisory GHSA-wjw5-q9g6-2764", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 94, "clock_known": true, "hours_public": 2256, "clock_origin": "advisory", "advisory_date": "2026-07-05", "advisory_days_public": 94, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-wjw5-q9g6-2764" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-49341", "state": "RESERVED", "public_date": "2026-07-05", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-05" }, "refs": "ghsa-repos:bacnet-stack/bacnet-stack\tGHSA-7r8r-2rj2-5wvr", "description": "bacnet-stack/bacnet-stack repository advisory GHSA-7r8r-2rj2-5wvr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 94, "clock_known": true, "hours_public": 2256, "clock_origin": "advisory", "advisory_date": "2026-07-05", "advisory_days_public": 94, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-7r8r-2rj2-5wvr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-68908", "state": "RESERVED", "public_date": "2026-07-05", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-05" }, "refs": "ghsa-repos:mz-automation/libiec61850\tGHSA-7qg8-hm25-rv5v", "description": "mz-automation/libiec61850 repository advisory GHSA-7qg8-hm25-rv5v", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 94, "clock_known": true, "hours_public": 2256, "clock_origin": "advisory", "advisory_date": "2026-07-05", "advisory_days_public": 94, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/mz-automation/libiec61850/security/advisories/GHSA-7qg8-hm25-rv5v" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-68907", "state": "RESERVED", "public_date": "2026-07-05", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-05" }, "refs": "ghsa-repos:mz-automation/libiec61850\tGHSA-7v2x-39mw-2979", "description": "mz-automation/libiec61850 repository advisory GHSA-7v2x-39mw-2979", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 94, "clock_known": true, "hours_public": 2256, "clock_origin": "advisory", "advisory_date": "2026-07-05", "advisory_days_public": 94, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/mz-automation/libiec61850/security/advisories/GHSA-7v2x-39mw-2979" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-68906", "state": "RESERVED", "public_date": "2026-07-05", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-05" }, "refs": "ghsa-repos:mz-automation/libiec61850\tGHSA-f7xm-q62q-22cx", "description": "mz-automation/libiec61850 repository advisory GHSA-f7xm-q62q-22cx", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 94, "clock_known": true, "hours_public": 2256, "clock_origin": "advisory", "advisory_date": "2026-07-05", "advisory_days_public": 94, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/mz-automation/libiec61850/security/advisories/GHSA-f7xm-q62q-22cx" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57446", "state": "RESERVED", "public_date": "2026-07-05", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-05" }, "refs": "ghsa-repos:mz-automation/libiec61850\tGHSA-cxgr-7v9h-fj9p", "description": "mz-automation/libiec61850 repository advisory GHSA-cxgr-7v9h-fj9p", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 94, "clock_known": true, "hours_public": 2256, "clock_origin": "advisory", "advisory_date": "2026-07-05", "advisory_days_public": 94, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/mz-automation/libiec61850/security/advisories/GHSA-cxgr-7v9h-fj9p" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-66366", "state": "RESERVED", "public_date": "2026-07-05", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-07-05" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2210\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2210.json", "description": "CVE-2025-66366", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 94, "clock_known": true, "hours_public": 2256, "clock_origin": "advisory", "advisory_date": "2026-07-05", "advisory_days_public": 94, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2210.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-66367", "state": "RESERVED", "public_date": "2026-07-05", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-07-05" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2210\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2210.json", "description": "CVE-2025-66367", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 94, "clock_known": true, "hours_public": 2256, "clock_origin": "advisory", "advisory_date": "2026-07-05", "advisory_days_public": 94, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2210.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-54640", "state": "RESERVED", "public_date": "2026-07-06", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-07-06", "osv": "2026-07-06" }, "refs": "ghsa:GHSA-7v6w-c3f4-9wpq;osv:Maven:io.openremote:openremote-agent", "description": "OpenRemote has an incomplete fix for CVE-2026-40882: XXE in KNXProtocol.startAssetImport() allows arbitrary file read via unprotected XMLInputFactory", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 93, "clock_known": true, "hours_public": 2232, "clock_origin": "advisory", "advisory_date": "2026-07-06", "advisory_days_public": 93, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "io.openremote", "ecosystem": "Maven", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-7v6w-c3f4-9wpq", "osv": "https://osv.dev/list?q=CVE-2026-54640" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-54641", "state": "RESERVED", "public_date": "2026-07-06", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-07-06", "osv": "2026-07-06" }, "refs": "ghsa:GHSA-xqr9-4wvv-gvch;osv:Maven:io.openremote:openremote-manager", "description": "OpenRemote has Cross-Realm User Information Disclosure in UserResourceImpl", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 93, "clock_known": true, "hours_public": 2232, "clock_origin": "advisory", "advisory_date": "2026-07-06", "advisory_days_public": 93, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "io.openremote", "ecosystem": "Maven", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-xqr9-4wvv-gvch", "osv": "https://osv.dev/list?q=CVE-2026-54641" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55786", "state": "RESERVED", "public_date": "2026-07-06", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-07-06", "osv": "2026-07-06" }, "refs": "ghsa:GHSA-h9f9-h6gm-wc85;osv:PyPI:flyto-core", "description": "flyto-core has Unauthenticated Command Execution via HTTP MCP `execute_module`", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 93, "clock_known": true, "hours_public": 2232, "clock_origin": "advisory", "advisory_date": "2026-07-06", "advisory_days_public": 93, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "flyto-core", "ecosystem": "PyPI", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-h9f9-h6gm-wc85", "osv": "https://osv.dev/list?q=CVE-2026-55786" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55787", "state": "RESERVED", "public_date": "2026-07-06", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-07-06", "osv": "2026-07-06" }, "refs": "ghsa:GHSA-794r-5rp2-fpg8;osv:PyPI:flyto-core", "description": "flyto-core has SSRF guard bypass via IPv6 transition addresses (IPv4-mapped / 6to4 / NAT64) in validate_url_ssrf", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 93, "clock_known": true, "hours_public": 2232, "clock_origin": "advisory", "advisory_date": "2026-07-06", "advisory_days_public": 93, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "flyto-core", "ecosystem": "PyPI", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-794r-5rp2-fpg8", "osv": "https://osv.dev/list?q=CVE-2026-55787" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-69187", "state": "RESERVED", "public_date": "2026-07-06", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-06" }, "refs": "ghsa-repos:LabRedesCefetRJ/WeGIA\tGHSA-27h8-4v64-8v85", "description": "LabRedesCefetRJ/WeGIA repository advisory GHSA-27h8-4v64-8v85", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 93, "clock_known": true, "hours_public": 2232, "clock_origin": "advisory", "advisory_date": "2026-07-06", "advisory_days_public": 93, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-27h8-4v64-8v85" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-69188", "state": "RESERVED", "public_date": "2026-07-06", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-06" }, "refs": "ghsa-repos:LabRedesCefetRJ/WeGIA\tGHSA-vxf4-mrgm-vp43", "description": "LabRedesCefetRJ/WeGIA repository advisory GHSA-vxf4-mrgm-vp43", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 93, "clock_known": true, "hours_public": 2232, "clock_origin": "advisory", "advisory_date": "2026-07-06", "advisory_days_public": 93, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-vxf4-mrgm-vp43" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61675", "state": "RESERVED", "public_date": "2026-07-06", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-06" }, "refs": "ghsa-repos:LabRedesCefetRJ/WeGIA\tGHSA-c6vj-372g-m3cw", "description": "LabRedesCefetRJ/WeGIA repository advisory GHSA-c6vj-372g-m3cw", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 93, "clock_known": true, "hours_public": 2232, "clock_origin": "advisory", "advisory_date": "2026-07-06", "advisory_days_public": 93, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-c6vj-372g-m3cw" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61676", "state": "RESERVED", "public_date": "2026-07-06", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-06" }, "refs": "ghsa-repos:LabRedesCefetRJ/WeGIA\tGHSA-f732-866c-g3hc", "description": "LabRedesCefetRJ/WeGIA repository advisory GHSA-f732-866c-g3hc", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 93, "clock_known": true, "hours_public": 2232, "clock_origin": "advisory", "advisory_date": "2026-07-06", "advisory_days_public": 93, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-f732-866c-g3hc" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61680", "state": "RESERVED", "public_date": "2026-07-06", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-06" }, "refs": "ghsa-repos:LabRedesCefetRJ/WeGIA\tGHSA-fjwm-mmjp-c6vm", "description": "LabRedesCefetRJ/WeGIA repository advisory GHSA-fjwm-mmjp-c6vm", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 93, "clock_known": true, "hours_public": 2232, "clock_origin": "advisory", "advisory_date": "2026-07-06", "advisory_days_public": 93, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-fjwm-mmjp-c6vm" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61677", "state": "RESERVED", "public_date": "2026-07-06", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-06" }, "refs": "ghsa-repos:LabRedesCefetRJ/WeGIA\tGHSA-pvhq-2cf3-xmch", "description": "LabRedesCefetRJ/WeGIA repository advisory GHSA-pvhq-2cf3-xmch", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 93, "clock_known": true, "hours_public": 2232, "clock_origin": "advisory", "advisory_date": "2026-07-06", "advisory_days_public": 93, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-pvhq-2cf3-xmch" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-54589", "state": "RESERVED", "public_date": "2026-07-06", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-06" }, "refs": "ghsa-repos:chartbrew/chartbrew\tGHSA-6m7q-jmp7-3vw8", "description": "chartbrew/chartbrew repository advisory GHSA-6m7q-jmp7-3vw8", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 93, "clock_known": true, "hours_public": 2232, "clock_origin": "advisory", "advisory_date": "2026-07-06", "advisory_days_public": 93, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chartbrew/chartbrew/security/advisories/GHSA-6m7q-jmp7-3vw8" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-54349", "state": "RESERVED", "public_date": "2026-07-06", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-06" }, "refs": "ghsa-repos:chartbrew/chartbrew\tGHSA-4wj7-9gq7-mrr2", "description": "chartbrew/chartbrew repository advisory GHSA-4wj7-9gq7-mrr2", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 93, "clock_known": true, "hours_public": 2232, "clock_origin": "advisory", "advisory_date": "2026-07-06", "advisory_days_public": 93, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chartbrew/chartbrew/security/advisories/GHSA-4wj7-9gq7-mrr2" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62267", "state": "RESERVED", "public_date": "2026-07-06", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-06" }, "refs": "ghsa-repos:matrix-org/matrix-hookshot\tGHSA-j286-3cjc-8f39", "description": "matrix-org/matrix-hookshot repository advisory GHSA-j286-3cjc-8f39", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 93, "clock_known": true, "hours_public": 2232, "clock_origin": "advisory", "advisory_date": "2026-07-06", "advisory_days_public": 93, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/matrix-org/matrix-hookshot/security/advisories/GHSA-j286-3cjc-8f39" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-65963", "state": "RESERVED", "public_date": "2026-07-06", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-06" }, "refs": "ghsa-repos:pi-hole/FTL\tGHSA-8j7w-m3cr-6q6x", "description": "pi-hole/FTL repository advisory GHSA-8j7w-m3cr-6q6x", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 93, "clock_known": true, "hours_public": 2232, "clock_origin": "advisory", "advisory_date": "2026-07-06", "advisory_days_public": 93, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/pi-hole/FTL/security/advisories/GHSA-8j7w-m3cr-6q6x" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-65964", "state": "RESERVED", "public_date": "2026-07-06", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-06" }, "refs": "ghsa-repos:pi-hole/FTL\tGHSA-g7v8-8q8f-hprp", "description": "pi-hole/FTL repository advisory GHSA-g7v8-8q8f-hprp", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 93, "clock_known": true, "hours_public": 2232, "clock_origin": "advisory", "advisory_date": "2026-07-06", "advisory_days_public": 93, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/pi-hole/FTL/security/advisories/GHSA-g7v8-8q8f-hprp" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-71304", "state": "RESERVED", "public_date": "2026-07-06", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-06" }, "refs": "ghsa-repos:pi-hole/FTL\tGHSA-w8cr-2cwg-92cg", "description": "pi-hole/FTL repository advisory GHSA-w8cr-2cwg-92cg", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 93, "clock_known": true, "hours_public": 2232, "clock_origin": "advisory", "advisory_date": "2026-07-06", "advisory_days_public": 93, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/pi-hole/FTL/security/advisories/GHSA-w8cr-2cwg-92cg" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-65966", "state": "RESERVED", "public_date": "2026-07-06", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-06" }, "refs": "ghsa-repos:pi-hole/FTL\tGHSA-r5vh-5q82-jg7q", "description": "pi-hole/FTL repository advisory GHSA-r5vh-5q82-jg7q", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 93, "clock_known": true, "hours_public": 2232, "clock_origin": "advisory", "advisory_date": "2026-07-06", "advisory_days_public": 93, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/pi-hole/FTL/security/advisories/GHSA-r5vh-5q82-jg7q" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-62165", "state": "RESERVED", "public_date": "2026-07-06", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-06" }, "refs": "ghsa-repos:pi-hole/FTL\tGHSA-q6fm-xwxf-37r5", "description": "pi-hole/FTL repository advisory GHSA-q6fm-xwxf-37r5", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 93, "clock_known": true, "hours_public": 2232, "clock_origin": "advisory", "advisory_date": "2026-07-06", "advisory_days_public": 93, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/pi-hole/FTL/security/advisories/GHSA-q6fm-xwxf-37r5" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-45016", "state": "RESERVED", "public_date": "2026-07-07", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-07-07", "osv": "2026-07-07" }, "refs": "ghsa:GHSA-c8m7-r2jv-rw63;osv:Packagist:egroupware/egroupware", "description": "EGroupware Vulnerable to Local File Inclusion via file:// URI in Mail Compose", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 92, "clock_known": true, "hours_public": 2208, "clock_origin": "advisory", "advisory_date": "2026-07-07", "advisory_days_public": 92, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "egroupware/egroupware", "ecosystem": "Packagist", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-c8m7-r2jv-rw63", "osv": "https://osv.dev/list?q=CVE-2026-45016" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61581", "state": "RESERVED", "public_date": "2026-07-07", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-07" }, "refs": "ghsa-repos:DataDog/datadog-agent\tGHSA-h8qx-4jh5-pf43", "description": "DataDog/datadog-agent repository advisory GHSA-h8qx-4jh5-pf43", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 92, "clock_known": true, "hours_public": 2208, "clock_origin": "advisory", "advisory_date": "2026-07-07", "advisory_days_public": 92, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/DataDog/datadog-agent/security/advisories/GHSA-h8qx-4jh5-pf43" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55169", "state": "RESERVED", "public_date": "2026-07-07", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-07" }, "refs": "ghsa-repos:OSC/ondemand\tGHSA-pj66-qf5q-g7g5", "description": "OSC/ondemand repository advisory GHSA-pj66-qf5q-g7g5", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 92, "clock_known": true, "hours_public": 2208, "clock_origin": "advisory", "advisory_date": "2026-07-07", "advisory_days_public": 92, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/OSC/ondemand/security/advisories/GHSA-pj66-qf5q-g7g5" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55172", "state": "RESERVED", "public_date": "2026-07-07", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-07" }, "refs": "ghsa-repos:OSC/ondemand\tGHSA-wqv4-4vj3-rgh5", "description": "OSC/ondemand repository advisory GHSA-wqv4-4vj3-rgh5", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 92, "clock_known": true, "hours_public": 2208, "clock_origin": "advisory", "advisory_date": "2026-07-07", "advisory_days_public": 92, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/OSC/ondemand/security/advisories/GHSA-wqv4-4vj3-rgh5" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55171", "state": "RESERVED", "public_date": "2026-07-07", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-07" }, "refs": "ghsa-repos:OSC/ondemand\tGHSA-3wm4-r2jj-43pp", "description": "OSC/ondemand repository advisory GHSA-3wm4-r2jj-43pp", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 92, "clock_known": true, "hours_public": 2208, "clock_origin": "advisory", "advisory_date": "2026-07-07", "advisory_days_public": 92, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/OSC/ondemand/security/advisories/GHSA-3wm4-r2jj-43pp" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61528", "state": "RESERVED", "public_date": "2026-07-07", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-07" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-7fhg-337c-qvf7", "description": "chamilo/chamilo-lms repository advisory GHSA-7fhg-337c-qvf7", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 92, "clock_known": true, "hours_public": 2208, "clock_origin": "advisory", "advisory_date": "2026-07-07", "advisory_days_public": 92, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-7fhg-337c-qvf7" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61532", "state": "RESERVED", "public_date": "2026-07-07", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-07" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-97gp-5f3j-vwqr", "description": "chamilo/chamilo-lms repository advisory GHSA-97gp-5f3j-vwqr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 92, "clock_known": true, "hours_public": 2208, "clock_origin": "advisory", "advisory_date": "2026-07-07", "advisory_days_public": 92, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-97gp-5f3j-vwqr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55503", "state": "RESERVED", "public_date": "2026-07-07", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-07" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-xfhv-qg8r-rc7w", "description": "chamilo/chamilo-lms repository advisory GHSA-xfhv-qg8r-rc7w", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 92, "clock_known": true, "hours_public": 2208, "clock_origin": "advisory", "advisory_date": "2026-07-07", "advisory_days_public": 92, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-xfhv-qg8r-rc7w" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61583", "state": "RESERVED", "public_date": "2026-07-07", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-07" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-853c-q5q4-jm2c", "description": "chamilo/chamilo-lms repository advisory GHSA-853c-q5q4-jm2c", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 92, "clock_known": true, "hours_public": 2208, "clock_origin": "advisory", "advisory_date": "2026-07-07", "advisory_days_public": 92, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-853c-q5q4-jm2c" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61582", "state": "RESERVED", "public_date": "2026-07-07", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-07" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-qqwp-55vx-w4gp", "description": "chamilo/chamilo-lms repository advisory GHSA-qqwp-55vx-w4gp", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 92, "clock_known": true, "hours_public": 2208, "clock_origin": "advisory", "advisory_date": "2026-07-07", "advisory_days_public": 92, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-qqwp-55vx-w4gp" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61578", "state": "RESERVED", "public_date": "2026-07-07", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-07" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-39qq-f7xc-9w6q", "description": "chamilo/chamilo-lms repository advisory GHSA-39qq-f7xc-9w6q", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 92, "clock_known": true, "hours_public": 2208, "clock_origin": "advisory", "advisory_date": "2026-07-07", "advisory_days_public": 92, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-39qq-f7xc-9w6q" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-45142", "state": "RESERVED", "public_date": "2026-07-07", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-07" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-wjxh-pvwh-h84p", "description": "chamilo/chamilo-lms repository advisory GHSA-wjxh-pvwh-h84p", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 92, "clock_known": true, "hours_public": 2208, "clock_origin": "advisory", "advisory_date": "2026-07-07", "advisory_days_public": 92, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-wjxh-pvwh-h84p" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-8408", "state": "RESERVED", "public_date": "2026-07-07", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-07-07" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2232\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2232.json", "description": "CVE-2026-8408", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 92, "clock_known": true, "hours_public": 2208, "clock_origin": "advisory", "advisory_date": "2026-07-07", "advisory_days_public": 92, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2232.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-49300", "state": "RESERVED", "public_date": "2026-07-08", "sources": "alpine,csaf,debian", "feed_count": 3, "dates": { "csaf": "2026-07-08" }, "refs": "alpine:mbedtls;csaf:SUSE Product Security Team\topenSUSE-SU-2026:11215-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11215-1.json;debian:mbedtls", "description": "CVE-2026-49300", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 91, "clock_known": true, "hours_public": 2184, "clock_origin": "advisory", "advisory_date": "2026-07-08", "advisory_days_public": 91, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "mbedtls", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-49300", "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11215-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-49300" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-50579", "state": "RESERVED", "public_date": "2026-07-08", "sources": "alpine,csaf,debian", "feed_count": 3, "dates": { "csaf": "2026-07-08" }, "refs": "alpine:mbedtls;csaf:SUSE Product Security Team\topenSUSE-SU-2026:11215-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11215-1.json;debian:mbedtls", "description": "CVE-2026-50579", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 91, "clock_known": true, "hours_public": 2184, "clock_origin": "advisory", "advisory_date": "2026-07-08", "advisory_days_public": 91, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "mbedtls", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-50579", "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11215-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-50579" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-50580", "state": "RESERVED", "public_date": "2026-07-08", "sources": "alpine,csaf,debian", "feed_count": 3, "dates": { "csaf": "2026-07-08" }, "refs": "alpine:mbedtls;csaf:SUSE Product Security Team\topenSUSE-SU-2026:11215-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11215-1.json;debian:mbedtls", "description": "CVE-2026-50580", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 91, "clock_known": true, "hours_public": 2184, "clock_origin": "advisory", "advisory_date": "2026-07-08", "advisory_days_public": 91, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "mbedtls", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-50580", "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11215-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-50580" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-50581", "state": "RESERVED", "public_date": "2026-07-08", "sources": "alpine,csaf,debian", "feed_count": 3, "dates": { "csaf": "2026-07-08" }, "refs": "alpine:mbedtls;csaf:SUSE Product Security Team\topenSUSE-SU-2026:11215-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11215-1.json;debian:mbedtls", "description": "CVE-2026-50581", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 91, "clock_known": true, "hours_public": 2184, "clock_origin": "advisory", "advisory_date": "2026-07-08", "advisory_days_public": 91, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "mbedtls", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-50581", "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11215-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-50581" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-50585", "state": "RESERVED", "public_date": "2026-07-08", "sources": "alpine,csaf,debian", "feed_count": 3, "dates": { "csaf": "2026-07-08" }, "refs": "alpine:mbedtls;csaf:SUSE Product Security Team\topenSUSE-SU-2026:11215-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11215-1.json;debian:mbedtls", "description": "CVE-2026-50585", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 91, "clock_known": true, "hours_public": 2184, "clock_origin": "advisory", "advisory_date": "2026-07-08", "advisory_days_public": 91, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "mbedtls", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-50585", "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11215-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-50585" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-50586", "state": "RESERVED", "public_date": "2026-07-08", "sources": "alpine,csaf,debian", "feed_count": 3, "dates": { "csaf": "2026-07-08" }, "refs": "alpine:mbedtls;csaf:SUSE Product Security Team\topenSUSE-SU-2026:11215-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11215-1.json;debian:mbedtls", "description": "CVE-2026-50586", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 91, "clock_known": true, "hours_public": 2184, "clock_origin": "advisory", "advisory_date": "2026-07-08", "advisory_days_public": 91, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "mbedtls", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-50586", "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11215-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-50586" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-50588", "state": "RESERVED", "public_date": "2026-07-08", "sources": "alpine,csaf,debian", "feed_count": 3, "dates": { "csaf": "2026-07-08" }, "refs": "alpine:mbedtls;csaf:SUSE Product Security Team\topenSUSE-SU-2026:11215-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11215-1.json;debian:mbedtls", "description": "CVE-2026-50588", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 91, "clock_known": true, "hours_public": 2184, "clock_origin": "advisory", "advisory_date": "2026-07-08", "advisory_days_public": 91, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "mbedtls", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-50588", "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11215-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-50588" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-50640", "state": "RESERVED", "public_date": "2026-07-08", "sources": "alpine,csaf,debian", "feed_count": 3, "dates": { "csaf": "2026-07-08" }, "refs": "alpine:mbedtls;csaf:SUSE Product Security Team\topenSUSE-SU-2026:11215-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11215-1.json;debian:mbedtls", "description": "CVE-2026-50640", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 91, "clock_known": true, "hours_public": 2184, "clock_origin": "advisory", "advisory_date": "2026-07-08", "advisory_days_public": 91, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "mbedtls", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-50640", "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11215-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-50640" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-54441", "state": "RESERVED", "public_date": "2026-07-08", "sources": "alpine,csaf,debian", "feed_count": 3, "dates": { "csaf": "2026-07-08" }, "refs": "alpine:mbedtls;csaf:SUSE Product Security Team\topenSUSE-SU-2026:11215-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11215-1.json;debian:mbedtls", "description": "CVE-2026-54441", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 91, "clock_known": true, "hours_public": 2184, "clock_origin": "advisory", "advisory_date": "2026-07-08", "advisory_days_public": 91, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "mbedtls", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-54441", "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11215-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-54441" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-75506", "state": "RESERVED", "public_date": "2026-07-08", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-08" }, "refs": "ghsa-repos:OliveTin/OliveTin\tGHSA-vc6p-m6vx-6cwq", "description": "OliveTin/OliveTin repository advisory GHSA-vc6p-m6vx-6cwq", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 91, "clock_known": true, "hours_public": 2184, "clock_origin": "advisory", "advisory_date": "2026-07-08", "advisory_days_public": 91, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/OliveTin/OliveTin/security/advisories/GHSA-vc6p-m6vx-6cwq" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61584", "state": "RESERVED", "public_date": "2026-07-08", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-08" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-6qwh-9m43-gx3q", "description": "chamilo/chamilo-lms repository advisory GHSA-6qwh-9m43-gx3q", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 91, "clock_known": true, "hours_public": 2184, "clock_origin": "advisory", "advisory_date": "2026-07-08", "advisory_days_public": 91, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-6qwh-9m43-gx3q" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55504", "state": "RESERVED", "public_date": "2026-07-08", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-08" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-ppw9-gf4r-5c39", "description": "chamilo/chamilo-lms repository advisory GHSA-ppw9-gf4r-5c39", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 91, "clock_known": true, "hours_public": 2184, "clock_origin": "advisory", "advisory_date": "2026-07-08", "advisory_days_public": 91, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-ppw9-gf4r-5c39" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-54747", "state": "RESERVED", "public_date": "2026-07-08", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-08" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-jv7g-9ff9-6cc5", "description": "chamilo/chamilo-lms repository advisory GHSA-jv7g-9ff9-6cc5", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 91, "clock_known": true, "hours_public": 2184, "clock_origin": "advisory", "advisory_date": "2026-07-08", "advisory_days_public": 91, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-jv7g-9ff9-6cc5" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-69131", "state": "RESERVED", "public_date": "2026-07-08", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-08" }, "refs": "ghsa-repos:django-cms/django-filer\tGHSA-vf85-8ff2-3r9w", "description": "django-cms/django-filer repository advisory GHSA-vf85-8ff2-3r9w", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 91, "clock_known": true, "hours_public": 2184, "clock_origin": "advisory", "advisory_date": "2026-07-08", "advisory_days_public": 91, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/django-cms/django-filer/security/advisories/GHSA-vf85-8ff2-3r9w" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-69138", "state": "RESERVED", "public_date": "2026-07-08", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-08" }, "refs": "ghsa-repos:django-cms/djangocms-versioning\tGHSA-5g9x-qwh5-33x4", "description": "django-cms/djangocms-versioning repository advisory GHSA-5g9x-qwh5-33x4", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 91, "clock_known": true, "hours_public": 2184, "clock_origin": "advisory", "advisory_date": "2026-07-08", "advisory_days_public": 91, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/django-cms/djangocms-versioning/security/advisories/GHSA-5g9x-qwh5-33x4" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-71863", "state": "RESERVED", "public_date": "2026-07-08", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-08" }, "refs": "ghsa-repos:freedomofpress/securedrop\tGHSA-rqwh-4873-322p", "description": "freedomofpress/securedrop repository advisory GHSA-rqwh-4873-322p", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 91, "clock_known": true, "hours_public": 2184, "clock_origin": "advisory", "advisory_date": "2026-07-08", "advisory_days_public": 91, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/freedomofpress/securedrop/security/advisories/GHSA-rqwh-4873-322p" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-73971", "state": "RESERVED", "public_date": "2026-07-08", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-08" }, "refs": "ghsa-repos:music-assistant/server\tGHSA-cjp7-8r57-vc8f", "description": "music-assistant/server repository advisory GHSA-cjp7-8r57-vc8f", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 91, "clock_known": true, "hours_public": 2184, "clock_origin": "advisory", "advisory_date": "2026-07-08", "advisory_days_public": 91, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/music-assistant/server/security/advisories/GHSA-cjp7-8r57-vc8f" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61657", "state": "RESERVED", "public_date": "2026-07-08", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-08" }, "refs": "ghsa-repos:ndsev/zserio\tGHSA-m257-f4fp-gr9f", "description": "ndsev/zserio repository advisory GHSA-m257-f4fp-gr9f", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 91, "clock_known": true, "hours_public": 2184, "clock_origin": "advisory", "advisory_date": "2026-07-08", "advisory_days_public": 91, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ndsev/zserio/security/advisories/GHSA-m257-f4fp-gr9f" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-75524", "state": "RESERVED", "public_date": "2026-07-08", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-08" }, "refs": "ghsa-repos:open-reception/appointment-booking-software\tGHSA-q452-m9pf-qj9j", "description": "open-reception/appointment-booking-software repository advisory GHSA-q452-m9pf-qj9j", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 91, "clock_known": true, "hours_public": 2184, "clock_origin": "advisory", "advisory_date": "2026-07-08", "advisory_days_public": 91, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/open-reception/appointment-booking-software/security/advisories/GHSA-q452-m9pf-qj9j" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-75525", "state": "RESERVED", "public_date": "2026-07-08", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-08" }, "refs": "ghsa-repos:open-reception/appointment-booking-software\tGHSA-qc72-9fg9-h66h", "description": "open-reception/appointment-booking-software repository advisory GHSA-qc72-9fg9-h66h", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 91, "clock_known": true, "hours_public": 2184, "clock_origin": "advisory", "advisory_date": "2026-07-08", "advisory_days_public": 91, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/open-reception/appointment-booking-software/security/advisories/GHSA-qc72-9fg9-h66h" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-75597", "state": "RESERVED", "public_date": "2026-07-08", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-08" }, "refs": "ghsa-repos:pyload/pyload\tGHSA-j92p-c242-7hfx", "description": "pyload/pyload repository advisory GHSA-j92p-c242-7hfx", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 91, "clock_known": true, "hours_public": 2184, "clock_origin": "advisory", "advisory_date": "2026-07-08", "advisory_days_public": 91, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/pyload/pyload/security/advisories/GHSA-j92p-c242-7hfx" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-76099", "state": "RESERVED", "public_date": "2026-07-09", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-09" }, "refs": "ghsa-repos:docker/mcp-gateway\tGHSA-mqq5-qh4g-2g8g", "description": "docker/mcp-gateway repository advisory GHSA-mqq5-qh4g-2g8g", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 90, "clock_known": true, "hours_public": 2160, "clock_origin": "advisory", "advisory_date": "2026-07-09", "advisory_days_public": 90, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/docker/mcp-gateway/security/advisories/GHSA-mqq5-qh4g-2g8g" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-76097", "state": "RESERVED", "public_date": "2026-07-09", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-09" }, "refs": "ghsa-repos:docker/mcp-gateway\tGHSA-m5m2-mrxf-7j7q", "description": "docker/mcp-gateway repository advisory GHSA-m5m2-mrxf-7j7q", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 90, "clock_known": true, "hours_public": 2160, "clock_origin": "advisory", "advisory_date": "2026-07-09", "advisory_days_public": 90, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/docker/mcp-gateway/security/advisories/GHSA-m5m2-mrxf-7j7q" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-76095", "state": "RESERVED", "public_date": "2026-07-09", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-09" }, "refs": "ghsa-repos:docker/mcp-gateway\tGHSA-6pq5-p7fc-7xhq", "description": "docker/mcp-gateway repository advisory GHSA-6pq5-p7fc-7xhq", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 90, "clock_known": true, "hours_public": 2160, "clock_origin": "advisory", "advisory_date": "2026-07-09", "advisory_days_public": 90, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/docker/mcp-gateway/security/advisories/GHSA-6pq5-p7fc-7xhq" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-76094", "state": "RESERVED", "public_date": "2026-07-09", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-09" }, "refs": "ghsa-repos:docker/mcp-gateway\tGHSA-6m8f-w97w-99h7", "description": "docker/mcp-gateway repository advisory GHSA-6m8f-w97w-99h7", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 90, "clock_known": true, "hours_public": 2160, "clock_origin": "advisory", "advisory_date": "2026-07-09", "advisory_days_public": 90, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/docker/mcp-gateway/security/advisories/GHSA-6m8f-w97w-99h7" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-76093", "state": "RESERVED", "public_date": "2026-07-09", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-09" }, "refs": "ghsa-repos:docker/mcp-gateway\tGHSA-625j-rw87-4ghr", "description": "docker/mcp-gateway repository advisory GHSA-625j-rw87-4ghr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 90, "clock_known": true, "hours_public": 2160, "clock_origin": "advisory", "advisory_date": "2026-07-09", "advisory_days_public": 90, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/docker/mcp-gateway/security/advisories/GHSA-625j-rw87-4ghr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-76092", "state": "RESERVED", "public_date": "2026-07-09", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-09" }, "refs": "ghsa-repos:docker/mcp-gateway\tGHSA-g879-4j4f-6vj7", "description": "docker/mcp-gateway repository advisory GHSA-g879-4j4f-6vj7", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 90, "clock_known": true, "hours_public": 2160, "clock_origin": "advisory", "advisory_date": "2026-07-09", "advisory_days_public": 90, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/docker/mcp-gateway/security/advisories/GHSA-g879-4j4f-6vj7" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-48728", "state": "RESERVED", "public_date": "2026-07-09", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-09" }, "refs": "ghsa-repos:glpi-project/glpi-inventory-plugin\tGHSA-xj72-9f7x-f4hm", "description": "glpi-project/glpi-inventory-plugin repository advisory GHSA-xj72-9f7x-f4hm", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 90, "clock_known": true, "hours_public": 2160, "clock_origin": "advisory", "advisory_date": "2026-07-09", "advisory_days_public": 90, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/glpi-project/glpi-inventory-plugin/security/advisories/GHSA-xj72-9f7x-f4hm" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-76812", "state": "RESERVED", "public_date": "2026-07-09", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-09" }, "refs": "ghsa-repos:ondata/ckan-mcp-server\tGHSA-vmrr-v4xp-42cx", "description": "ondata/ckan-mcp-server repository advisory GHSA-vmrr-v4xp-42cx", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 90, "clock_known": true, "hours_public": 2160, "clock_origin": "advisory", "advisory_date": "2026-07-09", "advisory_days_public": 90, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ondata/ckan-mcp-server/security/advisories/GHSA-vmrr-v4xp-42cx" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-76896", "state": "RESERVED", "public_date": "2026-07-09", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-09" }, "refs": "ghsa-repos:ondata/ckan-mcp-server\tGHSA-3369-fmrv-vh4j", "description": "ondata/ckan-mcp-server repository advisory GHSA-3369-fmrv-vh4j", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 90, "clock_known": true, "hours_public": 2160, "clock_origin": "advisory", "advisory_date": "2026-07-09", "advisory_days_public": 90, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ondata/ckan-mcp-server/security/advisories/GHSA-3369-fmrv-vh4j" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-76894", "state": "RESERVED", "public_date": "2026-07-09", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-09" }, "refs": "ghsa-repos:ondata/ckan-mcp-server\tGHSA-vqff-r82h-9crc", "description": "ondata/ckan-mcp-server repository advisory GHSA-vqff-r82h-9crc", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 90, "clock_known": true, "hours_public": 2160, "clock_origin": "advisory", "advisory_date": "2026-07-09", "advisory_days_public": 90, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ondata/ckan-mcp-server/security/advisories/GHSA-vqff-r82h-9crc" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-76811", "state": "RESERVED", "public_date": "2026-07-09", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-09" }, "refs": "ghsa-repos:ondata/ckan-mcp-server\tGHSA-38f8-m897-jm7w", "description": "ondata/ckan-mcp-server repository advisory GHSA-38f8-m897-jm7w", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 90, "clock_known": true, "hours_public": 2160, "clock_origin": "advisory", "advisory_date": "2026-07-09", "advisory_days_public": 90, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ondata/ckan-mcp-server/security/advisories/GHSA-38f8-m897-jm7w" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-76895", "state": "RESERVED", "public_date": "2026-07-09", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-09" }, "refs": "ghsa-repos:ondata/ckan-mcp-server\tGHSA-c499-9f77-93m8", "description": "ondata/ckan-mcp-server repository advisory GHSA-c499-9f77-93m8", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 90, "clock_known": true, "hours_public": 2160, "clock_origin": "advisory", "advisory_date": "2026-07-09", "advisory_days_public": 90, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ondata/ckan-mcp-server/security/advisories/GHSA-c499-9f77-93m8" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-76897", "state": "RESERVED", "public_date": "2026-07-09", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-09" }, "refs": "ghsa-repos:ondata/ckan-mcp-server\tGHSA-v3j5-c4v8-4pjr", "description": "ondata/ckan-mcp-server repository advisory GHSA-v3j5-c4v8-4pjr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 90, "clock_known": true, "hours_public": 2160, "clock_origin": "advisory", "advisory_date": "2026-07-09", "advisory_days_public": 90, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ondata/ckan-mcp-server/security/advisories/GHSA-v3j5-c4v8-4pjr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-76813", "state": "RESERVED", "public_date": "2026-07-09", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-09" }, "refs": "ghsa-repos:ondata/ckan-mcp-server\tGHSA-q5gv-wppg-53fv", "description": "ondata/ckan-mcp-server repository advisory GHSA-q5gv-wppg-53fv", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 90, "clock_known": true, "hours_public": 2160, "clock_origin": "advisory", "advisory_date": "2026-07-09", "advisory_days_public": 90, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ondata/ckan-mcp-server/security/advisories/GHSA-q5gv-wppg-53fv" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62260", "state": "RESERVED", "public_date": "2026-07-09", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-09" }, "refs": "ghsa-repos:samtools/htslib\tGHSA-rjqv-xg3q-g423", "description": "samtools/htslib repository advisory GHSA-rjqv-xg3q-g423", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 90, "clock_known": true, "hours_public": 2160, "clock_origin": "advisory", "advisory_date": "2026-07-09", "advisory_days_public": 90, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/samtools/htslib/security/advisories/GHSA-rjqv-xg3q-g423" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62259", "state": "RESERVED", "public_date": "2026-07-09", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-09" }, "refs": "ghsa-repos:samtools/htslib\tGHSA-hg3g-v57p-459q", "description": "samtools/htslib repository advisory GHSA-hg3g-v57p-459q", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 90, "clock_known": true, "hours_public": 2160, "clock_origin": "advisory", "advisory_date": "2026-07-09", "advisory_days_public": 90, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/samtools/htslib/security/advisories/GHSA-hg3g-v57p-459q" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62258", "state": "RESERVED", "public_date": "2026-07-09", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-09" }, "refs": "ghsa-repos:samtools/htslib\tGHSA-2jx2-wm7f-rv9m", "description": "samtools/htslib repository advisory GHSA-2jx2-wm7f-rv9m", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 90, "clock_known": true, "hours_public": 2160, "clock_origin": "advisory", "advisory_date": "2026-07-09", "advisory_days_public": 90, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/samtools/htslib/security/advisories/GHSA-2jx2-wm7f-rv9m" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62257", "state": "RESERVED", "public_date": "2026-07-09", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-09" }, "refs": "ghsa-repos:samtools/htslib\tGHSA-6q7c-m967-9v37", "description": "samtools/htslib repository advisory GHSA-6q7c-m967-9v37", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 90, "clock_known": true, "hours_public": 2160, "clock_origin": "advisory", "advisory_date": "2026-07-09", "advisory_days_public": 90, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/samtools/htslib/security/advisories/GHSA-6q7c-m967-9v37" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62256", "state": "RESERVED", "public_date": "2026-07-09", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-09" }, "refs": "ghsa-repos:samtools/htslib\tGHSA-4hjq-r829-8c8v", "description": "samtools/htslib repository advisory GHSA-4hjq-r829-8c8v", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 90, "clock_known": true, "hours_public": 2160, "clock_origin": "advisory", "advisory_date": "2026-07-09", "advisory_days_public": 90, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/samtools/htslib/security/advisories/GHSA-4hjq-r829-8c8v" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62255", "state": "RESERVED", "public_date": "2026-07-09", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-09" }, "refs": "ghsa-repos:samtools/htslib\tGHSA-28r7-prwc-hf5c", "description": "samtools/htslib repository advisory GHSA-28r7-prwc-hf5c", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 90, "clock_known": true, "hours_public": 2160, "clock_origin": "advisory", "advisory_date": "2026-07-09", "advisory_days_public": 90, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/samtools/htslib/security/advisories/GHSA-28r7-prwc-hf5c" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63390", "state": "RESERVED", "public_date": "2026-07-09", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-09" }, "refs": "ghsa-repos:samtools/htslib\tGHSA-2wm6-8hgm-7g92", "description": "samtools/htslib repository advisory GHSA-2wm6-8hgm-7g92", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 90, "clock_known": true, "hours_public": 2160, "clock_origin": "advisory", "advisory_date": "2026-07-09", "advisory_days_public": 90, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/samtools/htslib/security/advisories/GHSA-2wm6-8hgm-7g92" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-76806", "state": "RESERVED", "public_date": "2026-07-09", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-09" }, "refs": "ghsa-repos:solidtime-io/solidtime\tGHSA-cj49-589g-wp6j", "description": "solidtime-io/solidtime repository advisory GHSA-cj49-589g-wp6j", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 90, "clock_known": true, "hours_public": 2160, "clock_origin": "advisory", "advisory_date": "2026-07-09", "advisory_days_public": 90, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/solidtime-io/solidtime/security/advisories/GHSA-cj49-589g-wp6j" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61702", "state": "RESERVED", "public_date": "2026-07-10", "sources": "alpine,csaf,debian,ghsa-repos", "feed_count": 4, "dates": { "ghsa-repos": "2026-07-10", "csaf": "2026-10-07" }, "refs": "alpine:cups;csaf:SUSE Product Security Team\tCVE-2026-61702\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-61702.json;debian:cups;ghsa-repos:OpenPrinting/cups\tGHSA-gq9p-4w7m-2f5g", "description": "OpenPrinting/cups repository advisory GHSA-gq9p-4w7m-2f5g", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 89, "clock_known": true, "hours_public": 2136, "clock_origin": "advisory", "advisory_date": "2026-07-10", "advisory_days_public": 89, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "cups", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-61702", "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-61702.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-61702", "ghsa-repos": "https://github.com/OpenPrinting/cups/security/advisories/GHSA-gq9p-4w7m-2f5g" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-52054", "state": "RESERVED", "public_date": "2026-07-10", "sources": "debian,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-07-10" }, "refs": "debian:mongoose;ghsa-repos:cesanta/mongoose\tGHSA-w626-q3p2-8762", "description": "cesanta/mongoose repository advisory GHSA-w626-q3p2-8762", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 89, "clock_known": true, "hours_public": 2136, "clock_origin": "advisory", "advisory_date": "2026-07-10", "advisory_days_public": 89, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "mongoose", "ecosystem": "", "source_urls": { "debian": "https://security-tracker.debian.org/tracker/CVE-2026-52054", "ghsa-repos": "https://github.com/cesanta/mongoose/security/advisories/GHSA-w626-q3p2-8762" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77292", "state": "RESERVED", "public_date": "2026-07-10", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-10" }, "refs": "ghsa-repos:JanssenProject/jans\tGHSA-8gmm-83qv-w67g", "description": "JanssenProject/jans repository advisory GHSA-8gmm-83qv-w67g", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 89, "clock_known": true, "hours_public": 2136, "clock_origin": "advisory", "advisory_date": "2026-07-10", "advisory_days_public": 89, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/JanssenProject/jans/security/advisories/GHSA-8gmm-83qv-w67g" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77291", "state": "RESERVED", "public_date": "2026-07-10", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-10" }, "refs": "ghsa-repos:JanssenProject/jans\tGHSA-vxgw-mxhf-2m6f", "description": "JanssenProject/jans repository advisory GHSA-vxgw-mxhf-2m6f", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 89, "clock_known": true, "hours_public": 2136, "clock_origin": "advisory", "advisory_date": "2026-07-10", "advisory_days_public": 89, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/JanssenProject/jans/security/advisories/GHSA-vxgw-mxhf-2m6f" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77290", "state": "RESERVED", "public_date": "2026-07-10", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-10" }, "refs": "ghsa-repos:JanssenProject/jans\tGHSA-9qw4-gwgf-3q27", "description": "JanssenProject/jans repository advisory GHSA-9qw4-gwgf-3q27", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 89, "clock_known": true, "hours_public": 2136, "clock_origin": "advisory", "advisory_date": "2026-07-10", "advisory_days_public": 89, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/JanssenProject/jans/security/advisories/GHSA-9qw4-gwgf-3q27" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77328", "state": "RESERVED", "public_date": "2026-07-10", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-10" }, "refs": "ghsa-repos:MapServer/MapServer\tGHSA-m3xh-ccmh-x8rw", "description": "MapServer/MapServer repository advisory GHSA-m3xh-ccmh-x8rw", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 89, "clock_known": true, "hours_public": 2136, "clock_origin": "advisory", "advisory_date": "2026-07-10", "advisory_days_public": 89, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/MapServer/MapServer/security/advisories/GHSA-m3xh-ccmh-x8rw" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77327", "state": "RESERVED", "public_date": "2026-07-10", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-10" }, "refs": "ghsa-repos:MapServer/MapServer\tGHSA-7624-4mwh-9cxr", "description": "MapServer/MapServer repository advisory GHSA-7624-4mwh-9cxr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 89, "clock_known": true, "hours_public": 2136, "clock_origin": "advisory", "advisory_date": "2026-07-10", "advisory_days_public": 89, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/MapServer/MapServer/security/advisories/GHSA-7624-4mwh-9cxr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77326", "state": "RESERVED", "public_date": "2026-07-10", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-10" }, "refs": "ghsa-repos:MapServer/MapServer\tGHSA-4mwc-qc95-5959", "description": "MapServer/MapServer repository advisory GHSA-4mwc-qc95-5959", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 89, "clock_known": true, "hours_public": 2136, "clock_origin": "advisory", "advisory_date": "2026-07-10", "advisory_days_public": 89, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/MapServer/MapServer/security/advisories/GHSA-4mwc-qc95-5959" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77325", "state": "RESERVED", "public_date": "2026-07-10", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-10" }, "refs": "ghsa-repos:MapServer/MapServer\tGHSA-52rr-p4x5-2x6x", "description": "MapServer/MapServer repository advisory GHSA-52rr-p4x5-2x6x", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 89, "clock_known": true, "hours_public": 2136, "clock_origin": "advisory", "advisory_date": "2026-07-10", "advisory_days_public": 89, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/MapServer/MapServer/security/advisories/GHSA-52rr-p4x5-2x6x" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77323", "state": "RESERVED", "public_date": "2026-07-10", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-10" }, "refs": "ghsa-repos:MapServer/MapServer\tGHSA-288j-mhpj-gmmr", "description": "MapServer/MapServer repository advisory GHSA-288j-mhpj-gmmr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 89, "clock_known": true, "hours_public": 2136, "clock_origin": "advisory", "advisory_date": "2026-07-10", "advisory_days_public": 89, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/MapServer/MapServer/security/advisories/GHSA-288j-mhpj-gmmr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77324", "state": "RESERVED", "public_date": "2026-07-10", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-10" }, "refs": "ghsa-repos:MapServer/MapServer\tGHSA-35qh-49hm-5rcx", "description": "MapServer/MapServer repository advisory GHSA-35qh-49hm-5rcx", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 89, "clock_known": true, "hours_public": 2136, "clock_origin": "advisory", "advisory_date": "2026-07-10", "advisory_days_public": 89, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/MapServer/MapServer/security/advisories/GHSA-35qh-49hm-5rcx" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-68522", "state": "RESERVED", "public_date": "2026-07-10", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-10" }, "refs": "ghsa-repos:codidact/qpixel\tGHSA-9mhx-jr3h-2cvf", "description": "codidact/qpixel repository advisory GHSA-9mhx-jr3h-2cvf", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 89, "clock_known": true, "hours_public": 2136, "clock_origin": "advisory", "advisory_date": "2026-07-10", "advisory_days_public": 89, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/codidact/qpixel/security/advisories/GHSA-9mhx-jr3h-2cvf" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77300", "state": "RESERVED", "public_date": "2026-07-10", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-10" }, "refs": "ghsa-repos:itflow-org/itflow\tGHSA-5g5j-37c8-hm7m", "description": "itflow-org/itflow repository advisory GHSA-5g5j-37c8-hm7m", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 89, "clock_known": true, "hours_public": 2136, "clock_origin": "advisory", "advisory_date": "2026-07-10", "advisory_days_public": 89, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/itflow-org/itflow/security/advisories/GHSA-5g5j-37c8-hm7m" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-59961", "state": "RESERVED", "public_date": "2026-07-10", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-10" }, "refs": "ghsa-repos:troglobit/mini-snmpd\tGHSA-c9g2-5ghh-8g8c", "description": "troglobit/mini-snmpd repository advisory GHSA-c9g2-5ghh-8g8c", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 89, "clock_known": true, "hours_public": 2136, "clock_origin": "advisory", "advisory_date": "2026-07-10", "advisory_days_public": 89, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/troglobit/mini-snmpd/security/advisories/GHSA-c9g2-5ghh-8g8c" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-59964", "state": "RESERVED", "public_date": "2026-07-10", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-10" }, "refs": "ghsa-repos:troglobit/uftpd\tGHSA-vqhc-mmjf-972h", "description": "troglobit/uftpd repository advisory GHSA-vqhc-mmjf-972h", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 89, "clock_known": true, "hours_public": 2136, "clock_origin": "advisory", "advisory_date": "2026-07-10", "advisory_days_public": 89, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/troglobit/uftpd/security/advisories/GHSA-vqhc-mmjf-972h" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-15181", "state": "RESERVED", "public_date": "2026-07-10", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-07-10" }, "refs": "csaf:SUSE Product Security Team\topenSUSE-SU-2026:11247-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11247-1.json", "description": "CVE-2026-15181", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 89, "clock_known": true, "hours_public": 2136, "clock_origin": "advisory", "advisory_date": "2026-07-10", "advisory_days_public": 89, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11247-1.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-59968", "state": "RESERVED", "public_date": "2026-07-11", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-11" }, "refs": "ghsa-repos:Kovah/LinkAce\tGHSA-568c-jrfp-ffjg", "description": "Kovah/LinkAce repository advisory GHSA-568c-jrfp-ffjg", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 88, "clock_known": true, "hours_public": 2112, "clock_origin": "advisory", "advisory_date": "2026-07-11", "advisory_days_public": 88, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Kovah/LinkAce/security/advisories/GHSA-568c-jrfp-ffjg" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77336", "state": "RESERVED", "public_date": "2026-07-11", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-11" }, "refs": "ghsa-repos:Zeecka/AperiSolve\tGHSA-f7j8-f987-jw98", "description": "Zeecka/AperiSolve repository advisory GHSA-f7j8-f987-jw98", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 88, "clock_known": true, "hours_public": 2112, "clock_origin": "advisory", "advisory_date": "2026-07-11", "advisory_days_public": 88, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Zeecka/AperiSolve/security/advisories/GHSA-f7j8-f987-jw98" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-58406", "state": "RESERVED", "public_date": "2026-07-11", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-07-11", "csaf": "2026-07-12" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2281\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2281.json;ghsa-repos:avahi/avahi\tGHSA-8pmv-23p5-92mw", "description": "avahi/avahi repository advisory GHSA-8pmv-23p5-92mw", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 88, "clock_known": true, "hours_public": 2112, "clock_origin": "advisory", "advisory_date": "2026-07-11", "advisory_days_public": 88, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2281.json", "ghsa-repos": "https://github.com/avahi/avahi/security/advisories/GHSA-8pmv-23p5-92mw" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-59987", "state": "RESERVED", "public_date": "2026-07-11", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-07-11", "csaf": "2026-07-12" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2281\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2281.json;ghsa-repos:avahi/avahi\tGHSA-4v6h-9g73-wm5j", "description": "avahi/avahi repository advisory GHSA-4v6h-9g73-wm5j", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 88, "clock_known": true, "hours_public": 2112, "clock_origin": "advisory", "advisory_date": "2026-07-11", "advisory_days_public": 88, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2281.json", "ghsa-repos": "https://github.com/avahi/avahi/security/advisories/GHSA-4v6h-9g73-wm5j" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-45354", "state": "RESERVED", "public_date": "2026-07-12", "sources": "alpine,debian,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-07-12" }, "refs": "alpine:netatalk;debian:netatalk;ghsa-repos:Netatalk/netatalk\tGHSA-x7mm-865g-6jp3", "description": "Netatalk/netatalk repository advisory GHSA-x7mm-865g-6jp3", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 87, "clock_known": true, "hours_public": 2088, "clock_origin": "advisory", "advisory_date": "2026-07-12", "advisory_days_public": 87, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "netatalk", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-45354", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-45354", "ghsa-repos": "https://github.com/Netatalk/netatalk/security/advisories/GHSA-x7mm-865g-6jp3" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-45355", "state": "RESERVED", "public_date": "2026-07-12", "sources": "alpine,debian,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-07-12" }, "refs": "alpine:netatalk;debian:netatalk;ghsa-repos:Netatalk/netatalk\tGHSA-r72w-vfv6-52wg", "description": "Netatalk/netatalk repository advisory GHSA-r72w-vfv6-52wg", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 87, "clock_known": true, "hours_public": 2088, "clock_origin": "advisory", "advisory_date": "2026-07-12", "advisory_days_public": 87, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "netatalk", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-45355", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-45355", "ghsa-repos": "https://github.com/Netatalk/netatalk/security/advisories/GHSA-r72w-vfv6-52wg" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-45356", "state": "RESERVED", "public_date": "2026-07-12", "sources": "alpine,debian,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-07-12" }, "refs": "alpine:netatalk;debian:netatalk;ghsa-repos:Netatalk/netatalk\tGHSA-9963-q595-wm2x", "description": "Netatalk/netatalk repository advisory GHSA-9963-q595-wm2x", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 87, "clock_known": true, "hours_public": 2088, "clock_origin": "advisory", "advisory_date": "2026-07-12", "advisory_days_public": 87, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "netatalk", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-45356", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-45356", "ghsa-repos": "https://github.com/Netatalk/netatalk/security/advisories/GHSA-9963-q595-wm2x" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-103928", "state": "RESERVED", "public_date": "2026-07-12", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-12" }, "refs": "ghsa-repos:metabase/metabase\tGHSA-cwxq-fmxq-jv8h", "description": "metabase/metabase repository advisory GHSA-cwxq-fmxq-jv8h", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 87, "clock_known": true, "hours_public": 2088, "clock_origin": "advisory", "advisory_date": "2026-07-12", "advisory_days_public": 87, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/metabase/metabase/security/advisories/GHSA-cwxq-fmxq-jv8h" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-73145", "state": "RESERVED", "public_date": "2026-07-13", "sources": "csaf,debian,redhat", "feed_count": 3, "dates": { "redhat": "2026-07-13", "csaf": "2026-07-13" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-73145\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-73145.json;debian:svxlink;redhat:CVE-2026-73145", "description": "svxlink: svxlink: Memory exhaustion via unbounded HTTP request accumulation", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 86, "clock_known": true, "hours_public": 2064, "clock_origin": "advisory", "advisory_date": "2026-07-13", "advisory_days_public": 86, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "svxlink", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-73145.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-73145", "redhat": "https://access.redhat.com/security/cve/CVE-2026-73145" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-73146", "state": "RESERVED", "public_date": "2026-07-13", "sources": "csaf,debian,redhat", "feed_count": 3, "dates": { "redhat": "2026-07-13", "csaf": "2026-07-13" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-73146\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-73146.json;debian:svxlink;redhat:CVE-2026-73146", "description": "svxlink: svxlink: Use-after-free via reentrant client deletion in svxreflector", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 86, "clock_known": true, "hours_public": 2064, "clock_origin": "advisory", "advisory_date": "2026-07-13", "advisory_days_public": 86, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "svxlink", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-73146.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-73146", "redhat": "https://access.redhat.com/security/cve/CVE-2026-73146" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-73148", "state": "RESERVED", "public_date": "2026-07-13", "sources": "csaf,debian,redhat", "feed_count": 3, "dates": { "redhat": "2026-07-13", "csaf": "2026-07-13" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-73148\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-73148.json;debian:svxlink;redhat:CVE-2026-73148", "description": "svxlink: svxlink: Use-after-free write via dangling JSON reference in svxreflector", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 86, "clock_known": true, "hours_public": 2064, "clock_origin": "advisory", "advisory_date": "2026-07-13", "advisory_days_public": 86, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "svxlink", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-73148.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-73148", "redhat": "https://access.redhat.com/security/cve/CVE-2026-73148" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-73150", "state": "RESERVED", "public_date": "2026-07-13", "sources": "csaf,debian,redhat", "feed_count": 3, "dates": { "redhat": "2026-07-13", "csaf": "2026-07-13" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-73150\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-73150.json;debian:svxlink;redhat:CVE-2026-73150", "description": "svxlink: svxlink: Buffer overflow in APRS message construction", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 86, "clock_known": true, "hours_public": 2064, "clock_origin": "advisory", "advisory_date": "2026-07-13", "advisory_days_public": 86, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "svxlink", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-73150.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-73150", "redhat": "https://access.redhat.com/security/cve/CVE-2026-73150" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-73151", "state": "RESERVED", "public_date": "2026-07-13", "sources": "csaf,debian,redhat", "feed_count": 3, "dates": { "redhat": "2026-07-13", "csaf": "2026-07-13" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-73151\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-73151.json;debian:svxlink;redhat:CVE-2026-73151", "description": "svxlink: svxlink: Unvalidated audio length and exposed transceiver control in remotetrx", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 86, "clock_known": true, "hours_public": 2064, "clock_origin": "advisory", "advisory_date": "2026-07-13", "advisory_days_public": 86, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "svxlink", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-73151.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-73151", "redhat": "https://access.redhat.com/security/cve/CVE-2026-73151" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-73152", "state": "RESERVED", "public_date": "2026-07-13", "sources": "csaf,debian,redhat", "feed_count": 3, "dates": { "redhat": "2026-07-13", "csaf": "2026-07-13" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-73152\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-73152.json;debian:svxlink;redhat:CVE-2026-73152", "description": "svxlink: svxlink: Integer truncation in EchoLink proxy message length", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 86, "clock_known": true, "hours_public": 2064, "clock_origin": "advisory", "advisory_date": "2026-07-13", "advisory_days_public": 86, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "svxlink", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-73152.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-73152", "redhat": "https://access.redhat.com/security/cve/CVE-2026-73152" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-73153", "state": "RESERVED", "public_date": "2026-07-13", "sources": "csaf,debian,redhat", "feed_count": 3, "dates": { "redhat": "2026-07-13", "csaf": "2026-07-13" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-73153\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-73153.json;debian:svxlink;redhat:CVE-2026-73153", "description": "svxlink: svxlink: Out-of-bounds read in EchoLink RTCP/SDES handling", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 86, "clock_known": true, "hours_public": 2064, "clock_origin": "advisory", "advisory_date": "2026-07-13", "advisory_days_public": 86, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "svxlink", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-73153.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-73153", "redhat": "https://access.redhat.com/security/cve/CVE-2026-73153" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-73154", "state": "RESERVED", "public_date": "2026-07-13", "sources": "csaf,debian,redhat", "feed_count": 3, "dates": { "redhat": "2026-07-13", "csaf": "2026-07-13" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-73154\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-73154.json;debian:svxlink;redhat:CVE-2026-73154", "description": "svxlink: svxlink: Stack overflow in StationData::setData", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 86, "clock_known": true, "hours_public": 2064, "clock_origin": "advisory", "advisory_date": "2026-07-13", "advisory_days_public": 86, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "svxlink", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-73154.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-73154", "redhat": "https://access.redhat.com/security/cve/CVE-2026-73154" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-59766", "state": "RESERVED", "public_date": "2026-07-13", "sources": "ghsa,ghsa-repos,osv", "feed_count": 3, "dates": { "ghsa": "2026-07-21", "ghsa-repos": "2026-07-13", "osv": "2026-07-21" }, "refs": "ghsa-repos:go-gitea/gitea\tGHSA-qf2f-qh6p-7v89;ghsa:GHSA-qf2f-qh6p-7v89;osv:Go:code.gitea.io/gitea", "description": "Gitea CVE-2026-20800 sibling endpoints not covered: revoked user still reads private repo objects via `/api/v1/user/starred` and private issue titles via `/api/v1/user/times`", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 86, "clock_known": true, "hours_public": 2064, "clock_origin": "advisory", "advisory_date": "2026-07-13", "advisory_days_public": 86, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "code.gitea.io/gitea", "ecosystem": "Go", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-qf2f-qh6p-7v89", "ghsa-repos": "https://github.com/go-gitea/gitea/security/advisories/GHSA-qf2f-qh6p-7v89", "osv": "https://osv.dev/list?q=CVE-2026-59766" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-47677", "state": "RESERVED", "public_date": "2026-07-13", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-07-13", "osv": "2026-07-13" }, "refs": "ghsa:GHSA-c67f-gmxw-mj93;osv:Packagist:facturascripts/facturascripts", "description": "FacturaScripts: Account takeover of any 2FA-enabled user", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 86, "clock_known": true, "hours_public": 2064, "clock_origin": "advisory", "advisory_date": "2026-07-13", "advisory_days_public": 86, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "facturascripts/facturascripts", "ecosystem": "Packagist", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-c67f-gmxw-mj93", "osv": "https://osv.dev/list?q=CVE-2026-47677" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55372", "state": "RESERVED", "public_date": "2026-07-13", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-07-13", "osv": "2026-07-13" }, "refs": "ghsa:GHSA-4chg-4752-w88r;osv:Packagist:nukeviet/nukeviet", "description": "NukeViet: Pre-authentication SSRF via X-Forwarded-Host", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 86, "clock_known": true, "hours_public": 2064, "clock_origin": "advisory", "advisory_date": "2026-07-13", "advisory_days_public": 86, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "nukeviet/nukeviet", "ecosystem": "Packagist", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-4chg-4752-w88r", "osv": "https://osv.dev/list?q=CVE-2026-55372" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-54065", "state": "RESERVED", "public_date": "2026-07-13", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-07-13", "osv": "2026-07-13" }, "refs": "ghsa:GHSA-c9xg-64p9-f2jj;osv:Packagist:nukeviet/nukeviet", "description": "NukeViet: Path Traversal to Arbitrary File Deletion in Edit Comment Function", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 86, "clock_known": true, "hours_public": 2064, "clock_origin": "advisory", "advisory_date": "2026-07-13", "advisory_days_public": 86, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "nukeviet/nukeviet", "ecosystem": "Packagist", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-c9xg-64p9-f2jj", "osv": "https://osv.dev/list?q=CVE-2026-54065" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-54064", "state": "RESERVED", "public_date": "2026-07-13", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-07-13", "osv": "2026-07-13" }, "refs": "ghsa:GHSA-465g-4q99-5x86;osv:Packagist:nukeviet/nukeviet", "description": "NukeViet: Multiple Anti-XSS Filter Bypasses Leading to Stored XSS in News Module", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 86, "clock_known": true, "hours_public": 2064, "clock_origin": "advisory", "advisory_date": "2026-07-13", "advisory_days_public": 86, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "nukeviet/nukeviet", "ecosystem": "Packagist", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-465g-4q99-5x86", "osv": "https://osv.dev/list?q=CVE-2026-54064" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-49259", "state": "RESERVED", "public_date": "2026-07-13", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-07-13", "osv": "2026-07-13" }, "refs": "ghsa:GHSA-w2w5-w2pw-r929;osv:Packagist:nukeviet/nukeviet", "description": "NukeViet: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 86, "clock_known": true, "hours_public": 2064, "clock_origin": "advisory", "advisory_date": "2026-07-13", "advisory_days_public": 86, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "nukeviet/nukeviet", "ecosystem": "Packagist", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-w2w5-w2pw-r929", "osv": "https://osv.dev/list?q=CVE-2026-49259" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-48118", "state": "RESERVED", "public_date": "2026-07-13", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-07-13", "osv": "2026-07-13" }, "refs": "ghsa:GHSA-mxpf-qgg6-v3ff;osv:Packagist:nukeviet/nukeviet", "description": "NukeViet: Unauthenticated Reflected XSS in Comment Module", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 86, "clock_known": true, "hours_public": 2064, "clock_origin": "advisory", "advisory_date": "2026-07-13", "advisory_days_public": 86, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "nukeviet/nukeviet", "ecosystem": "Packagist", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-mxpf-qgg6-v3ff", "osv": "https://osv.dev/list?q=CVE-2026-48118" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77470", "state": "RESERVED", "public_date": "2026-07-13", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-13" }, "refs": "ghsa-repos:LycheeOrg/Lychee\tGHSA-476v-jr53-8rxc", "description": "LycheeOrg/Lychee repository advisory GHSA-476v-jr53-8rxc", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 86, "clock_known": true, "hours_public": 2064, "clock_origin": "advisory", "advisory_date": "2026-07-13", "advisory_days_public": 86, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/LycheeOrg/Lychee/security/advisories/GHSA-476v-jr53-8rxc" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77468", "state": "RESERVED", "public_date": "2026-07-13", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-13" }, "refs": "ghsa-repos:LycheeOrg/Lychee\tGHSA-xg8r-4pm3-2h4f", "description": "LycheeOrg/Lychee repository advisory GHSA-xg8r-4pm3-2h4f", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 86, "clock_known": true, "hours_public": 2064, "clock_origin": "advisory", "advisory_date": "2026-07-13", "advisory_days_public": 86, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/LycheeOrg/Lychee/security/advisories/GHSA-xg8r-4pm3-2h4f" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77467", "state": "RESERVED", "public_date": "2026-07-13", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-13" }, "refs": "ghsa-repos:LycheeOrg/Lychee\tGHSA-6736-fhxv-3p79", "description": "LycheeOrg/Lychee repository advisory GHSA-6736-fhxv-3p79", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 86, "clock_known": true, "hours_public": 2064, "clock_origin": "advisory", "advisory_date": "2026-07-13", "advisory_days_public": 86, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/LycheeOrg/Lychee/security/advisories/GHSA-6736-fhxv-3p79" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77466", "state": "RESERVED", "public_date": "2026-07-13", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-13" }, "refs": "ghsa-repos:LycheeOrg/Lychee\tGHSA-5wh2-hg7q-6hv3", "description": "LycheeOrg/Lychee repository advisory GHSA-5wh2-hg7q-6hv3", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 86, "clock_known": true, "hours_public": 2064, "clock_origin": "advisory", "advisory_date": "2026-07-13", "advisory_days_public": 86, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/LycheeOrg/Lychee/security/advisories/GHSA-5wh2-hg7q-6hv3" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-53574", "state": "RESERVED", "public_date": "2026-07-13", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-13" }, "refs": "ghsa-repos:espocrm/espocrm\tGHSA-qgm7-fc9g-fj75", "description": "espocrm/espocrm repository advisory GHSA-qgm7-fc9g-fj75", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 86, "clock_known": true, "hours_public": 2064, "clock_origin": "advisory", "advisory_date": "2026-07-13", "advisory_days_public": 86, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/espocrm/espocrm/security/advisories/GHSA-qgm7-fc9g-fj75" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61706", "state": "RESERVED", "public_date": "2026-07-13", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-13" }, "refs": "ghsa-repos:infracost/actions\tGHSA-whm3-8375-8m8j", "description": "infracost/actions repository advisory GHSA-whm3-8375-8m8j", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 86, "clock_known": true, "hours_public": 2064, "clock_origin": "advisory", "advisory_date": "2026-07-13", "advisory_days_public": 86, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/infracost/actions/security/advisories/GHSA-whm3-8375-8m8j" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62662", "state": "RESERVED", "public_date": "2026-07-13", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-13" }, "refs": "ghsa-repos:pocket-id/pocket-id\tGHSA-q4xm-p75h-h9p3", "description": "pocket-id/pocket-id repository advisory GHSA-q4xm-p75h-h9p3", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 86, "clock_known": true, "hours_public": 2064, "clock_origin": "advisory", "advisory_date": "2026-07-13", "advisory_days_public": 86, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/pocket-id/pocket-id/security/advisories/GHSA-q4xm-p75h-h9p3" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61830", "state": "RESERVED", "public_date": "2026-07-13", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-13" }, "refs": "ghsa-repos:rabbitmq/cluster-operator\tGHSA-c7f3-92gv-rj3w", "description": "rabbitmq/cluster-operator repository advisory GHSA-c7f3-92gv-rj3w", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 86, "clock_known": true, "hours_public": 2064, "clock_origin": "advisory", "advisory_date": "2026-07-13", "advisory_days_public": 86, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/rabbitmq/cluster-operator/security/advisories/GHSA-c7f3-92gv-rj3w" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-35336", "state": "RESERVED", "public_date": "2026-07-14", "sources": "alpine,csaf,debian", "feed_count": 3, "dates": { "csaf": "2026-07-14" }, "refs": "alpine:mbedtls;csaf:SUSE Product Security Team\topenSUSE-SU-2026:11267-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11267-1.json;debian:mbedtls", "description": "CVE-2026-35336", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 85, "clock_known": true, "hours_public": 2040, "clock_origin": "advisory", "advisory_date": "2026-07-14", "advisory_days_public": 85, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "mbedtls", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-35336", "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11267-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-35336" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-50583", "state": "RESERVED", "public_date": "2026-07-14", "sources": "alpine,csaf,debian", "feed_count": 3, "dates": { "csaf": "2026-07-14" }, "refs": "alpine:mbedtls;csaf:SUSE Product Security Team\topenSUSE-SU-2026:11267-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11267-1.json;debian:mbedtls", "description": "CVE-2026-50583", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 85, "clock_known": true, "hours_public": 2040, "clock_origin": "advisory", "advisory_date": "2026-07-14", "advisory_days_public": 85, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "mbedtls", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-50583", "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11267-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-50583" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-50584", "state": "RESERVED", "public_date": "2026-07-14", "sources": "alpine,csaf,debian", "feed_count": 3, "dates": { "csaf": "2026-07-14" }, "refs": "alpine:mbedtls;csaf:SUSE Product Security Team\topenSUSE-SU-2026:11267-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11267-1.json;debian:mbedtls", "description": "CVE-2026-50584", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 85, "clock_known": true, "hours_public": 2040, "clock_origin": "advisory", "advisory_date": "2026-07-14", "advisory_days_public": 85, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "mbedtls", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-50584", "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11267-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-50584" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-50587", "state": "RESERVED", "public_date": "2026-07-14", "sources": "alpine,csaf,debian", "feed_count": 3, "dates": { "csaf": "2026-07-14" }, "refs": "alpine:mbedtls;csaf:SUSE Product Security Team\topenSUSE-SU-2026:11267-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11267-1.json;debian:mbedtls", "description": "CVE-2026-50587", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 85, "clock_known": true, "hours_public": 2040, "clock_origin": "advisory", "advisory_date": "2026-07-14", "advisory_days_public": 85, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "mbedtls", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-50587", "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11267-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-50587" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-50713", "state": "RESERVED", "public_date": "2026-07-14", "sources": "alpine,csaf,debian", "feed_count": 3, "dates": { "csaf": "2026-07-14" }, "refs": "alpine:mbedtls;csaf:SUSE Product Security Team\topenSUSE-SU-2026:11267-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11267-1.json;debian:mbedtls", "description": "CVE-2026-50713", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 85, "clock_known": true, "hours_public": 2040, "clock_origin": "advisory", "advisory_date": "2026-07-14", "advisory_days_public": 85, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "mbedtls", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-50713", "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11267-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-50713" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-54435", "state": "RESERVED", "public_date": "2026-07-14", "sources": "alpine,csaf,debian", "feed_count": 3, "dates": { "csaf": "2026-07-14" }, "refs": "alpine:mbedtls;csaf:SUSE Product Security Team\topenSUSE-SU-2026:11267-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11267-1.json;debian:mbedtls", "description": "CVE-2026-54435", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 85, "clock_known": true, "hours_public": 2040, "clock_origin": "advisory", "advisory_date": "2026-07-14", "advisory_days_public": 85, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "mbedtls", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-54435", "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11267-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-54435" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-45710", "state": "RESERVED", "public_date": "2026-07-14", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-07-14", "osv": "2026-07-14" }, "refs": "ghsa:GHSA-3x7p-v8hj-xh5m;osv:Packagist:facturascripts/facturascripts", "description": "FacturaScripts: Stored XSS in WidgetVariante and WidgetSubcuenta modal lists via HTML-attribute decoding of `Tools::noHtml`-escaped quotes inside `onclick=`", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 85, "clock_known": true, "hours_public": 2040, "clock_origin": "advisory", "advisory_date": "2026-07-14", "advisory_days_public": 85, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "facturascripts/facturascripts", "ecosystem": "Packagist", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-3x7p-v8hj-xh5m", "osv": "https://osv.dev/list?q=CVE-2026-45710" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-45263", "state": "RESERVED", "public_date": "2026-07-14", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-07-14", "osv": "2026-07-14" }, "refs": "ghsa:GHSA-2p5x-4jr6-x5jg;osv:Packagist:facturascripts/facturascripts", "description": "FacturaScripts: CSV formula injection in CSVExport allows authenticated low-priv users to plant payloads that execute when an admin opens the export", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 85, "clock_known": true, "hours_public": 2040, "clock_origin": "advisory", "advisory_date": "2026-07-14", "advisory_days_public": 85, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "facturascripts/facturascripts", "ecosystem": "Packagist", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-2p5x-4jr6-x5jg", "osv": "https://osv.dev/list?q=CVE-2026-45263" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-45693", "state": "RESERVED", "public_date": "2026-07-14", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-07-14", "osv": "2026-07-14" }, "refs": "ghsa:GHSA-cv65-7cg8-r623;osv:Packagist:facturascripts/facturascripts", "description": "FacturaScripts: Unauthenticated Path Traversal in Static File Controllers Reads Private MyFiles Documents", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 85, "clock_known": true, "hours_public": 2040, "clock_origin": "advisory", "advisory_date": "2026-07-14", "advisory_days_public": 85, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "facturascripts/facturascripts", "ecosystem": "Packagist", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-cv65-7cg8-r623", "osv": "https://osv.dev/list?q=CVE-2026-45693" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-45262", "state": "RESERVED", "public_date": "2026-07-14", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-07-14", "osv": "2026-07-14" }, "refs": "ghsa:GHSA-5qmh-x653-g8qj;osv:Packagist:facturascripts/facturascripts", "description": "FacturaScripts: Authenticated SQL injection in the FacturaScripts REST API filter parameter via parenthesis bypass in `Where::sqlColumn`", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 85, "clock_known": true, "hours_public": 2040, "clock_origin": "advisory", "advisory_date": "2026-07-14", "advisory_days_public": 85, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "facturascripts/facturascripts", "ecosystem": "Packagist", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-5qmh-x653-g8qj", "osv": "https://osv.dev/list?q=CVE-2026-45262" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77511", "state": "RESERVED", "public_date": "2026-07-14", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-14" }, "refs": "ghsa-repos:Taskosaur/Taskosaur\tGHSA-m586-9w8m-j724", "description": "Taskosaur/Taskosaur repository advisory GHSA-m586-9w8m-j724", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 85, "clock_known": true, "hours_public": 2040, "clock_origin": "advisory", "advisory_date": "2026-07-14", "advisory_days_public": 85, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Taskosaur/Taskosaur/security/advisories/GHSA-m586-9w8m-j724" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77512", "state": "RESERVED", "public_date": "2026-07-14", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-14" }, "refs": "ghsa-repos:Taskosaur/Taskosaur\tGHSA-c6m7-2c78-p2m5", "description": "Taskosaur/Taskosaur repository advisory GHSA-c6m7-2c78-p2m5", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 85, "clock_known": true, "hours_public": 2040, "clock_origin": "advisory", "advisory_date": "2026-07-14", "advisory_days_public": 85, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Taskosaur/Taskosaur/security/advisories/GHSA-c6m7-2c78-p2m5" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77510", "state": "RESERVED", "public_date": "2026-07-14", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-14" }, "refs": "ghsa-repos:Taskosaur/Taskosaur\tGHSA-97m3-fcc5-v5r2", "description": "Taskosaur/Taskosaur repository advisory GHSA-97m3-fcc5-v5r2", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 85, "clock_known": true, "hours_public": 2040, "clock_origin": "advisory", "advisory_date": "2026-07-14", "advisory_days_public": 85, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Taskosaur/Taskosaur/security/advisories/GHSA-97m3-fcc5-v5r2" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77513", "state": "RESERVED", "public_date": "2026-07-14", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-14" }, "refs": "ghsa-repos:Taskosaur/Taskosaur\tGHSA-fjwc-33jp-r5xr", "description": "Taskosaur/Taskosaur repository advisory GHSA-fjwc-33jp-r5xr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 85, "clock_known": true, "hours_public": 2040, "clock_origin": "advisory", "advisory_date": "2026-07-14", "advisory_days_public": 85, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Taskosaur/Taskosaur/security/advisories/GHSA-fjwc-33jp-r5xr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77514", "state": "RESERVED", "public_date": "2026-07-14", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-14" }, "refs": "ghsa-repos:Taskosaur/Taskosaur\tGHSA-2653-wx6f-7xv9", "description": "Taskosaur/Taskosaur repository advisory GHSA-2653-wx6f-7xv9", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 85, "clock_known": true, "hours_public": 2040, "clock_origin": "advisory", "advisory_date": "2026-07-14", "advisory_days_public": 85, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Taskosaur/Taskosaur/security/advisories/GHSA-2653-wx6f-7xv9" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77509", "state": "RESERVED", "public_date": "2026-07-14", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-14" }, "refs": "ghsa-repos:Taskosaur/Taskosaur\tGHSA-48c6-42cv-7fqx", "description": "Taskosaur/Taskosaur repository advisory GHSA-48c6-42cv-7fqx", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 85, "clock_known": true, "hours_public": 2040, "clock_origin": "advisory", "advisory_date": "2026-07-14", "advisory_days_public": 85, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Taskosaur/Taskosaur/security/advisories/GHSA-48c6-42cv-7fqx" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77475", "state": "RESERVED", "public_date": "2026-07-14", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-14" }, "refs": "ghsa-repos:dromara/MaxKey\tGHSA-2w2v-jphx-727v", "description": "dromara/MaxKey repository advisory GHSA-2w2v-jphx-727v", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 85, "clock_known": true, "hours_public": 2040, "clock_origin": "advisory", "advisory_date": "2026-07-14", "advisory_days_public": 85, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/dromara/MaxKey/security/advisories/GHSA-2w2v-jphx-727v" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62664", "state": "RESERVED", "public_date": "2026-07-14", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-14" }, "refs": "ghsa-repos:error311/FileRise\tGHSA-p7vh-cjpm-rmrq", "description": "error311/FileRise repository advisory GHSA-p7vh-cjpm-rmrq", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 85, "clock_known": true, "hours_public": 2040, "clock_origin": "advisory", "advisory_date": "2026-07-14", "advisory_days_public": 85, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/error311/FileRise/security/advisories/GHSA-p7vh-cjpm-rmrq" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61844", "state": "RESERVED", "public_date": "2026-07-14", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-14" }, "refs": "ghsa-repos:error311/FileRise\tGHSA-qpm8-pgmq-wxmh", "description": "error311/FileRise repository advisory GHSA-qpm8-pgmq-wxmh", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 85, "clock_known": true, "hours_public": 2040, "clock_origin": "advisory", "advisory_date": "2026-07-14", "advisory_days_public": 85, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/error311/FileRise/security/advisories/GHSA-qpm8-pgmq-wxmh" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61843", "state": "RESERVED", "public_date": "2026-07-14", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-14" }, "refs": "ghsa-repos:error311/FileRise\tGHSA-r787-5hp3-4874", "description": "error311/FileRise repository advisory GHSA-r787-5hp3-4874", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 85, "clock_known": true, "hours_public": 2040, "clock_origin": "advisory", "advisory_date": "2026-07-14", "advisory_days_public": 85, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/error311/FileRise/security/advisories/GHSA-r787-5hp3-4874" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55184", "state": "RESERVED", "public_date": "2026-07-14", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-14" }, "refs": "ghsa-repos:espocrm/espocrm\tGHSA-x5p5-8mxj-9wv6", "description": "espocrm/espocrm repository advisory GHSA-x5p5-8mxj-9wv6", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 85, "clock_known": true, "hours_public": 2040, "clock_origin": "advisory", "advisory_date": "2026-07-14", "advisory_days_public": 85, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/espocrm/espocrm/security/advisories/GHSA-x5p5-8mxj-9wv6" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55154", "state": "RESERVED", "public_date": "2026-07-14", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-14" }, "refs": "ghsa-repos:espocrm/espocrm\tGHSA-xrwp-2gph-985x", "description": "espocrm/espocrm repository advisory GHSA-xrwp-2gph-985x", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 85, "clock_known": true, "hours_public": 2040, "clock_origin": "advisory", "advisory_date": "2026-07-14", "advisory_days_public": 85, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/espocrm/espocrm/security/advisories/GHSA-xrwp-2gph-985x" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-53575", "state": "RESERVED", "public_date": "2026-07-14", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-14" }, "refs": "ghsa-repos:espocrm/espocrm\tGHSA-f34h-xxmv-j9xp", "description": "espocrm/espocrm repository advisory GHSA-f34h-xxmv-j9xp", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 85, "clock_known": true, "hours_public": 2040, "clock_origin": "advisory", "advisory_date": "2026-07-14", "advisory_days_public": 85, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/espocrm/espocrm/security/advisories/GHSA-f34h-xxmv-j9xp" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-59994", "state": "RESERVED", "public_date": "2026-07-14", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-14" }, "refs": "ghsa-repos:espocrm/espocrm\tGHSA-3rh4-9hcq-g79m", "description": "espocrm/espocrm repository advisory GHSA-3rh4-9hcq-g79m", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 85, "clock_known": true, "hours_public": 2040, "clock_origin": "advisory", "advisory_date": "2026-07-14", "advisory_days_public": 85, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/espocrm/espocrm/security/advisories/GHSA-3rh4-9hcq-g79m" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-97373", "state": "RESERVED", "public_date": "2026-07-14", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-14" }, "refs": "ghsa-repos:jgraph/drawio\tGHSA-xc39-mcq4-fr4q", "description": "jgraph/drawio repository advisory GHSA-xc39-mcq4-fr4q", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 85, "clock_known": true, "hours_public": 2040, "clock_origin": "advisory", "advisory_date": "2026-07-14", "advisory_days_public": 85, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/jgraph/drawio/security/advisories/GHSA-xc39-mcq4-fr4q" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77613", "state": "RESERVED", "public_date": "2026-07-14", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-14" }, "refs": "ghsa-repos:opensearch-project/OpenSearch-Dashboards\tGHSA-wjg9-wg2q-394h", "description": "opensearch-project/OpenSearch-Dashboards repository advisory GHSA-wjg9-wg2q-394h", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 85, "clock_known": true, "hours_public": 2040, "clock_origin": "advisory", "advisory_date": "2026-07-14", "advisory_days_public": 85, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/opensearch-project/OpenSearch-Dashboards/security/advisories/GHSA-wjg9-wg2q-394h" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77571", "state": "RESERVED", "public_date": "2026-07-14", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-14" }, "refs": "ghsa-repos:orangehrm/orangehrm\tGHSA-qr4m-m725-637v", "description": "orangehrm/orangehrm repository advisory GHSA-qr4m-m725-637v", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 85, "clock_known": true, "hours_public": 2040, "clock_origin": "advisory", "advisory_date": "2026-07-14", "advisory_days_public": 85, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/orangehrm/orangehrm/security/advisories/GHSA-qr4m-m725-637v" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77570", "state": "RESERVED", "public_date": "2026-07-14", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-14" }, "refs": "ghsa-repos:orangehrm/orangehrm\tGHSA-wqfp-gjm9-mwcp", "description": "orangehrm/orangehrm repository advisory GHSA-wqfp-gjm9-mwcp", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 85, "clock_known": true, "hours_public": 2040, "clock_origin": "advisory", "advisory_date": "2026-07-14", "advisory_days_public": 85, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/orangehrm/orangehrm/security/advisories/GHSA-wqfp-gjm9-mwcp" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77569", "state": "RESERVED", "public_date": "2026-07-14", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-14" }, "refs": "ghsa-repos:orangehrm/orangehrm\tGHSA-p6vw-r6rx-pcc3", "description": "orangehrm/orangehrm repository advisory GHSA-p6vw-r6rx-pcc3", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 85, "clock_known": true, "hours_public": 2040, "clock_origin": "advisory", "advisory_date": "2026-07-14", "advisory_days_public": 85, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/orangehrm/orangehrm/security/advisories/GHSA-p6vw-r6rx-pcc3" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77572", "state": "RESERVED", "public_date": "2026-07-14", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-14" }, "refs": "ghsa-repos:veracrypt/VeraCrypt\tGHSA-9mgv-w2fw-3m78", "description": "veracrypt/VeraCrypt repository advisory GHSA-9mgv-w2fw-3m78", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 85, "clock_known": true, "hours_public": 2040, "clock_origin": "advisory", "advisory_date": "2026-07-14", "advisory_days_public": 85, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/veracrypt/VeraCrypt/security/advisories/GHSA-9mgv-w2fw-3m78" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-42491", "state": "RESERVED", "public_date": "2026-07-14", "sources": "alpine,csaf", "feed_count": 2, "dates": { "csaf": "2026-07-14" }, "refs": "alpine:xen;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2359\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2359.json", "description": "CVE-2026-42491", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 85, "clock_known": true, "hours_public": 2040, "clock_origin": "advisory", "advisory_date": "2026-07-14", "advisory_days_public": 85, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "xen", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-42491", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2359.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-73141", "state": "RESERVED", "public_date": "2026-07-15", "sources": "csaf,debian,redhat", "feed_count": 3, "dates": { "redhat": "2026-07-15", "csaf": "2026-07-15" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-73141\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-73141.json;debian:svxlink;redhat:CVE-2026-73141", "description": "svxlink: svxlink: Stack exhaustion via attacker-sized VLA in audio decoders", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 84, "clock_known": true, "hours_public": 2016, "clock_origin": "advisory", "advisory_date": "2026-07-15", "advisory_days_public": 84, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "svxlink", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-73141.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-73141", "redhat": "https://access.redhat.com/security/cve/CVE-2026-73141" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-73147", "state": "RESERVED", "public_date": "2026-07-15", "sources": "csaf,debian,redhat", "feed_count": 3, "dates": { "redhat": "2026-07-15", "csaf": "2026-07-15" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-73147\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-73147.json;debian:svxlink;redhat:CVE-2026-73147", "description": "svxlink: svxlink: Remote code execution via TCL command injection in reflector client", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 84, "clock_known": true, "hours_public": 2016, "clock_origin": "advisory", "advisory_date": "2026-07-15", "advisory_days_public": 84, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "svxlink", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-73147.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-73147", "redhat": "https://access.redhat.com/security/cve/CVE-2026-73147" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62944", "state": "RESERVED", "public_date": "2026-07-15", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-07-15", "osv": "2026-07-15" }, "refs": "ghsa:GHSA-h2wf-967x-gxvw;osv:Packagist:mantisbt/mantisbt", "description": "MantisBT: Stored XSS in print_all_bug_page_word.php", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 84, "clock_known": true, "hours_public": 2016, "clock_origin": "advisory", "advisory_date": "2026-07-15", "advisory_days_public": 84, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "mantisbt/mantisbt", "ecosystem": "Packagist", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-h2wf-967x-gxvw", "osv": "https://osv.dev/list?q=CVE-2026-62944" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-52883", "state": "RESERVED", "public_date": "2026-07-15", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-07-15", "osv": "2026-07-15" }, "refs": "ghsa:GHSA-4vpf-w7qv-5h3q;osv:Packagist:mantisbt/mantisbt", "description": "MantisBT: Injection of TIME_TRACKING and REMINDER Notes via REST and SOAP APIs", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 84, "clock_known": true, "hours_public": 2016, "clock_origin": "advisory", "advisory_date": "2026-07-15", "advisory_days_public": 84, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "mantisbt/mantisbt", "ecosystem": "Packagist", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-4vpf-w7qv-5h3q", "osv": "https://osv.dev/list?q=CVE-2026-52883" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-52882", "state": "RESERVED", "public_date": "2026-07-15", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-07-15", "osv": "2026-07-15" }, "refs": "ghsa:GHSA-3v2j-6fw9-f57c;osv:Packagist:mantisbt/mantisbt", "description": "MantisBT: REST and SOAP API Issue Update Accepts Unreleased Product Versions From Updaters", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 84, "clock_known": true, "hours_public": 2016, "clock_origin": "advisory", "advisory_date": "2026-07-15", "advisory_days_public": 84, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "mantisbt/mantisbt", "ecosystem": "Packagist", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-3v2j-6fw9-f57c", "osv": "https://osv.dev/list?q=CVE-2026-52882" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-52881", "state": "RESERVED", "public_date": "2026-07-15", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-07-15", "osv": "2026-07-15" }, "refs": "ghsa:GHSA-vcrw-4xvv-jh49;osv:Packagist:mantisbt/mantisbt", "description": "MantisBT: Reflected XSS in admin/install.php via unescaped printf", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 84, "clock_known": true, "hours_public": 2016, "clock_origin": "advisory", "advisory_date": "2026-07-15", "advisory_days_public": 84, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "mantisbt/mantisbt", "ecosystem": "Packagist", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-vcrw-4xvv-jh49", "osv": "https://osv.dev/list?q=CVE-2026-52881" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-52847", "state": "RESERVED", "public_date": "2026-07-15", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-07-15", "osv": "2026-07-15" }, "refs": "ghsa:GHSA-77x8-3v3h-hrhv;osv:Packagist:mantisbt/mantisbt", "description": "MantisBT: Reflected XSS in admin/install.php", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 84, "clock_known": true, "hours_public": 2016, "clock_origin": "advisory", "advisory_date": "2026-07-15", "advisory_days_public": 84, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "mantisbt/mantisbt", "ecosystem": "Packagist", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-77x8-3v3h-hrhv", "osv": "https://osv.dev/list?q=CVE-2026-52847" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-49280", "state": "RESERVED", "public_date": "2026-07-15", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-07-15", "osv": "2026-07-15" }, "refs": "ghsa:GHSA-m7ph-9558-mrx3;osv:Packagist:mantisbt/mantisbt", "description": "MantisBT: REST API unauthorized Issue status change", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 84, "clock_known": true, "hours_public": 2016, "clock_origin": "advisory", "advisory_date": "2026-07-15", "advisory_days_public": 84, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "mantisbt/mantisbt", "ecosystem": "Packagist", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-m7ph-9558-mrx3", "osv": "https://osv.dev/list?q=CVE-2026-49280" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-49273", "state": "RESERVED", "public_date": "2026-07-15", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-07-15", "osv": "2026-07-15" }, "refs": "ghsa:GHSA-v84x-qvhg-f36r;osv:Packagist:mantisbt/mantisbt", "description": "MantisBT: Remote Code Execution via eval() Class Hoisting in adm_config_set.php", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 84, "clock_known": true, "hours_public": 2016, "clock_origin": "advisory", "advisory_date": "2026-07-15", "advisory_days_public": 84, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "mantisbt/mantisbt", "ecosystem": "Packagist", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-v84x-qvhg-f36r", "osv": "https://osv.dev/list?q=CVE-2026-49273" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-47142", "state": "RESERVED", "public_date": "2026-07-15", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-07-15", "osv": "2026-07-15" }, "refs": "ghsa:GHSA-mw6p-33vw-46cc;osv:Packagist:mantisbt/mantisbt", "description": "MantisBT: SQL Injection via history_order Configuration Value", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 84, "clock_known": true, "hours_public": 2016, "clock_origin": "advisory", "advisory_date": "2026-07-15", "advisory_days_public": 84, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "mantisbt/mantisbt", "ecosystem": "Packagist", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-mw6p-33vw-46cc", "osv": "https://osv.dev/list?q=CVE-2026-47142" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-41582", "state": "RESERVED", "public_date": "2026-07-15", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-15" }, "refs": "ghsa-repos:Countly/countly-server\tGHSA-fqgp-6rm9-8696", "description": "Countly/countly-server repository advisory GHSA-fqgp-6rm9-8696", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 84, "clock_known": true, "hours_public": 2016, "clock_origin": "advisory", "advisory_date": "2026-07-15", "advisory_days_public": 84, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Countly/countly-server/security/advisories/GHSA-fqgp-6rm9-8696" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-42270", "state": "RESERVED", "public_date": "2026-07-15", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-15" }, "refs": "ghsa-repos:Countly/countly-server\tGHSA-86cv-qwp9-jwp3", "description": "Countly/countly-server repository advisory GHSA-86cv-qwp9-jwp3", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 84, "clock_known": true, "hours_public": 2016, "clock_origin": "advisory", "advisory_date": "2026-07-15", "advisory_days_public": 84, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Countly/countly-server/security/advisories/GHSA-86cv-qwp9-jwp3" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-42269", "state": "RESERVED", "public_date": "2026-07-15", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-15" }, "refs": "ghsa-repos:Countly/countly-server\tGHSA-5pmc-54j6-jcgq", "description": "Countly/countly-server repository advisory GHSA-5pmc-54j6-jcgq", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 84, "clock_known": true, "hours_public": 2016, "clock_origin": "advisory", "advisory_date": "2026-07-15", "advisory_days_public": 84, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Countly/countly-server/security/advisories/GHSA-5pmc-54j6-jcgq" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-44977", "state": "RESERVED", "public_date": "2026-07-15", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-15" }, "refs": "ghsa-repos:Countly/countly-server\tGHSA-jqp4-p86c-phxc", "description": "Countly/countly-server repository advisory GHSA-jqp4-p86c-phxc", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 84, "clock_known": true, "hours_public": 2016, "clock_origin": "advisory", "advisory_date": "2026-07-15", "advisory_days_public": 84, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Countly/countly-server/security/advisories/GHSA-jqp4-p86c-phxc" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-81502", "state": "RESERVED", "public_date": "2026-07-15", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-15" }, "refs": "ghsa-repos:RARgames/4gaBoards\tGHSA-jmxf-h386-fm2h", "description": "RARgames/4gaBoards repository advisory GHSA-jmxf-h386-fm2h", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 84, "clock_known": true, "hours_public": 2016, "clock_origin": "advisory", "advisory_date": "2026-07-15", "advisory_days_public": 84, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/RARgames/4gaBoards/security/advisories/GHSA-jmxf-h386-fm2h" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77624", "state": "RESERVED", "public_date": "2026-07-15", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-15" }, "refs": "ghsa-repos:akuity/kargo\tGHSA-xx8h-gw9m-m95p", "description": "akuity/kargo repository advisory GHSA-xx8h-gw9m-m95p", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 84, "clock_known": true, "hours_public": 2016, "clock_origin": "advisory", "advisory_date": "2026-07-15", "advisory_days_public": 84, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/akuity/kargo/security/advisories/GHSA-xx8h-gw9m-m95p" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77623", "state": "RESERVED", "public_date": "2026-07-15", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-15" }, "refs": "ghsa-repos:akuity/kargo\tGHSA-f72x-6fm6-94rq", "description": "akuity/kargo repository advisory GHSA-f72x-6fm6-94rq", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 84, "clock_known": true, "hours_public": 2016, "clock_origin": "advisory", "advisory_date": "2026-07-15", "advisory_days_public": 84, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/akuity/kargo/security/advisories/GHSA-f72x-6fm6-94rq" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63348", "state": "RESERVED", "public_date": "2026-07-15", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-15" }, "refs": "ghsa-repos:conda/menuinst\tGHSA-fqh4-w37r-x339", "description": "conda/menuinst repository advisory GHSA-fqh4-w37r-x339", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 84, "clock_known": true, "hours_public": 2016, "clock_origin": "advisory", "advisory_date": "2026-07-15", "advisory_days_public": 84, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/conda/menuinst/security/advisories/GHSA-fqh4-w37r-x339" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55080", "state": "RESERVED", "public_date": "2026-07-15", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-15" }, "refs": "ghsa-repos:element-hq/element-x-android\tGHSA-r4f9-46vw-v7g3", "description": "element-hq/element-x-android repository advisory GHSA-r4f9-46vw-v7g3", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 84, "clock_known": true, "hours_public": 2016, "clock_origin": "advisory", "advisory_date": "2026-07-15", "advisory_days_public": 84, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/element-hq/element-x-android/security/advisories/GHSA-r4f9-46vw-v7g3" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62856", "state": "RESERVED", "public_date": "2026-07-15", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-15" }, "refs": "ghsa-repos:freescout-help-desk/freescout\tGHSA-gh3r-jh6q-wrvj", "description": "freescout-help-desk/freescout repository advisory GHSA-gh3r-jh6q-wrvj", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 84, "clock_known": true, "hours_public": 2016, "clock_origin": "advisory", "advisory_date": "2026-07-15", "advisory_days_public": 84, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-gh3r-jh6q-wrvj" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62855", "state": "RESERVED", "public_date": "2026-07-15", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-15" }, "refs": "ghsa-repos:freescout-help-desk/freescout\tGHSA-9ph7-f3hc-95gg", "description": "freescout-help-desk/freescout repository advisory GHSA-9ph7-f3hc-95gg", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 84, "clock_known": true, "hours_public": 2016, "clock_origin": "advisory", "advisory_date": "2026-07-15", "advisory_days_public": 84, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-9ph7-f3hc-95gg" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62854", "state": "RESERVED", "public_date": "2026-07-15", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-15" }, "refs": "ghsa-repos:freescout-help-desk/freescout\tGHSA-jpq8-j69f-mj98", "description": "freescout-help-desk/freescout repository advisory GHSA-jpq8-j69f-mj98", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 84, "clock_known": true, "hours_public": 2016, "clock_origin": "advisory", "advisory_date": "2026-07-15", "advisory_days_public": 84, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-jpq8-j69f-mj98" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62852", "state": "RESERVED", "public_date": "2026-07-15", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-15" }, "refs": "ghsa-repos:freescout-help-desk/freescout\tGHSA-w668-wq26-6c94", "description": "freescout-help-desk/freescout repository advisory GHSA-w668-wq26-6c94", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 84, "clock_known": true, "hours_public": 2016, "clock_origin": "advisory", "advisory_date": "2026-07-15", "advisory_days_public": 84, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-w668-wq26-6c94" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62851", "state": "RESERVED", "public_date": "2026-07-15", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-15" }, "refs": "ghsa-repos:freescout-help-desk/freescout\tGHSA-wqq7-4q7m-273v", "description": "freescout-help-desk/freescout repository advisory GHSA-wqq7-4q7m-273v", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 84, "clock_known": true, "hours_public": 2016, "clock_origin": "advisory", "advisory_date": "2026-07-15", "advisory_days_public": 84, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-wqq7-4q7m-273v" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62850", "state": "RESERVED", "public_date": "2026-07-15", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-15" }, "refs": "ghsa-repos:freescout-help-desk/freescout\tGHSA-w2p9-3666-vw9j", "description": "freescout-help-desk/freescout repository advisory GHSA-w2p9-3666-vw9j", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 84, "clock_known": true, "hours_public": 2016, "clock_origin": "advisory", "advisory_date": "2026-07-15", "advisory_days_public": 84, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-w2p9-3666-vw9j" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-81173", "state": "RESERVED", "public_date": "2026-07-15", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-15" }, "refs": "ghsa-repos:matrix-org/matrix-hookshot\tGHSA-77cp-42c4-85vm", "description": "matrix-org/matrix-hookshot repository advisory GHSA-77cp-42c4-85vm", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 84, "clock_known": true, "hours_public": 2016, "clock_origin": "advisory", "advisory_date": "2026-07-15", "advisory_days_public": 84, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/matrix-org/matrix-hookshot/security/advisories/GHSA-77cp-42c4-85vm" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63659", "state": "RESERVED", "public_date": "2026-07-15", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-15" }, "refs": "ghsa-repos:mz-automation/lib60870\tGHSA-fc2j-39h7-c7v9", "description": "mz-automation/lib60870 repository advisory GHSA-fc2j-39h7-c7v9", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 84, "clock_known": true, "hours_public": 2016, "clock_origin": "advisory", "advisory_date": "2026-07-15", "advisory_days_public": 84, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/mz-automation/lib60870/security/advisories/GHSA-fc2j-39h7-c7v9" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-65983", "state": "RESERVED", "public_date": "2026-07-15", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-15" }, "refs": "ghsa-repos:openemr/openemr\tGHSA-vv5j-6gjw-ffx9", "description": "openemr/openemr repository advisory GHSA-vv5j-6gjw-ffx9", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 84, "clock_known": true, "hours_public": 2016, "clock_origin": "advisory", "advisory_date": "2026-07-15", "advisory_days_public": 84, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/openemr/openemr/security/advisories/GHSA-vv5j-6gjw-ffx9" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77630", "state": "RESERVED", "public_date": "2026-07-15", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-15" }, "refs": "ghsa-repos:pupnp/pupnp\tGHSA-46ph-jff5-5h77", "description": "pupnp/pupnp repository advisory GHSA-46ph-jff5-5h77", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 84, "clock_known": true, "hours_public": 2016, "clock_origin": "advisory", "advisory_date": "2026-07-15", "advisory_days_public": 84, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/pupnp/pupnp/security/advisories/GHSA-46ph-jff5-5h77" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-58273", "state": "RESERVED", "public_date": "2026-07-15", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-15" }, "refs": "ghsa-repos:rucio/rucio\tGHSA-5j9r-fx4x-rpvg", "description": "rucio/rucio repository advisory GHSA-5j9r-fx4x-rpvg", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 84, "clock_known": true, "hours_public": 2016, "clock_origin": "advisory", "advisory_date": "2026-07-15", "advisory_days_public": 84, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/rucio/rucio/security/advisories/GHSA-5j9r-fx4x-rpvg" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-73149", "state": "RESERVED", "public_date": "2026-07-16", "sources": "csaf,debian,redhat", "feed_count": 3, "dates": { "redhat": "2026-07-16", "csaf": "2026-07-16" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-73149\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-73149.json;debian:svxlink;redhat:CVE-2026-73149", "description": "svxlink: svxlink: Out-of-bounds read via unvalidated MsgAudio length in NetRx", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 83, "clock_known": true, "hours_public": 1992, "clock_origin": "advisory", "advisory_date": "2026-07-16", "advisory_days_public": 83, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "svxlink", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-73149.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-73149", "redhat": "https://access.redhat.com/security/cve/CVE-2026-73149" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61540", "state": "RESERVED", "public_date": "2026-07-16", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-16" }, "refs": "ghsa-repos:EVerest/EVerest\tGHSA-cvj4-wrx6-rrff", "description": "EVerest/EVerest repository advisory GHSA-cvj4-wrx6-rrff", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 83, "clock_known": true, "hours_public": 1992, "clock_origin": "advisory", "advisory_date": "2026-07-16", "advisory_days_public": 83, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/EVerest/EVerest/security/advisories/GHSA-cvj4-wrx6-rrff" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63507", "state": "RESERVED", "public_date": "2026-07-16", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-16" }, "refs": "ghsa-repos:EVerest/EVerest\tGHSA-mwr9-98r5-gcqr", "description": "EVerest/EVerest repository advisory GHSA-mwr9-98r5-gcqr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 83, "clock_known": true, "hours_public": 1992, "clock_origin": "advisory", "advisory_date": "2026-07-16", "advisory_days_public": 83, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/EVerest/EVerest/security/advisories/GHSA-mwr9-98r5-gcqr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-54170", "state": "RESERVED", "public_date": "2026-07-16", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-16" }, "refs": "ghsa-repos:EVerest/EVerest\tGHSA-pr66-c6c8-pc5v", "description": "EVerest/EVerest repository advisory GHSA-pr66-c6c8-pc5v", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 83, "clock_known": true, "hours_public": 1992, "clock_origin": "advisory", "advisory_date": "2026-07-16", "advisory_days_public": 83, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/EVerest/EVerest/security/advisories/GHSA-pr66-c6c8-pc5v" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63624", "state": "RESERVED", "public_date": "2026-07-16", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-16" }, "refs": "ghsa-repos:EVerest/EVerest\tGHSA-855p-r2x5-fv5q", "description": "EVerest/EVerest repository advisory GHSA-855p-r2x5-fv5q", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 83, "clock_known": true, "hours_public": 1992, "clock_origin": "advisory", "advisory_date": "2026-07-16", "advisory_days_public": 83, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/EVerest/EVerest/security/advisories/GHSA-855p-r2x5-fv5q" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-54169", "state": "RESERVED", "public_date": "2026-07-16", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-16" }, "refs": "ghsa-repos:EVerest/EVerest\tGHSA-gggc-vwmj-53wp", "description": "EVerest/EVerest repository advisory GHSA-gggc-vwmj-53wp", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 83, "clock_known": true, "hours_public": 1992, "clock_origin": "advisory", "advisory_date": "2026-07-16", "advisory_days_public": 83, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/EVerest/EVerest/security/advisories/GHSA-gggc-vwmj-53wp" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-40932", "state": "RESERVED", "public_date": "2026-07-16", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-16" }, "refs": "ghsa-repos:EVerest/EVerest\tGHSA-5c2x-34h2-3v55", "description": "EVerest/EVerest repository advisory GHSA-5c2x-34h2-3v55", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 83, "clock_known": true, "hours_public": 1992, "clock_origin": "advisory", "advisory_date": "2026-07-16", "advisory_days_public": 83, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/EVerest/EVerest/security/advisories/GHSA-5c2x-34h2-3v55" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-42292", "state": "RESERVED", "public_date": "2026-07-16", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-16" }, "refs": "ghsa-repos:EVerest/EVerest\tGHSA-6rx6-q6r6-mmj5", "description": "EVerest/EVerest repository advisory GHSA-6rx6-q6r6-mmj5", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 83, "clock_known": true, "hours_public": 1992, "clock_origin": "advisory", "advisory_date": "2026-07-16", "advisory_days_public": 83, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/EVerest/EVerest/security/advisories/GHSA-6rx6-q6r6-mmj5" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63013", "state": "RESERVED", "public_date": "2026-07-16", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-16" }, "refs": "ghsa-repos:NationalSecurityAgency/skills-service\tGHSA-67x3-r85f-822r", "description": "NationalSecurityAgency/skills-service repository advisory GHSA-67x3-r85f-822r", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 83, "clock_known": true, "hours_public": 1992, "clock_origin": "advisory", "advisory_date": "2026-07-16", "advisory_days_public": 83, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/NationalSecurityAgency/skills-service/security/advisories/GHSA-67x3-r85f-822r" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63014", "state": "RESERVED", "public_date": "2026-07-16", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-16" }, "refs": "ghsa-repos:NationalSecurityAgency/skills-service\tGHSA-p527-vjfp-c43p", "description": "NationalSecurityAgency/skills-service repository advisory GHSA-p527-vjfp-c43p", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 83, "clock_known": true, "hours_public": 1992, "clock_origin": "advisory", "advisory_date": "2026-07-16", "advisory_days_public": 83, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/NationalSecurityAgency/skills-service/security/advisories/GHSA-p527-vjfp-c43p" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-49868", "state": "RESERVED", "public_date": "2026-07-16", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-16" }, "refs": "ghsa-repos:RIOT-OS/RIOT\tGHSA-p3fx-9qcg-jmcf", "description": "RIOT-OS/RIOT repository advisory GHSA-p3fx-9qcg-jmcf", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 83, "clock_known": true, "hours_public": 1992, "clock_origin": "advisory", "advisory_date": "2026-07-16", "advisory_days_public": 83, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-p3fx-9qcg-jmcf" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62972", "state": "RESERVED", "public_date": "2026-07-16", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-16" }, "refs": "ghsa-repos:bacnet-stack/bacnet-stack\tGHSA-9hq3-w3pc-8385", "description": "bacnet-stack/bacnet-stack repository advisory GHSA-9hq3-w3pc-8385", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 83, "clock_known": true, "hours_public": 1992, "clock_origin": "advisory", "advisory_date": "2026-07-16", "advisory_days_public": 83, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-9hq3-w3pc-8385" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62977", "state": "RESERVED", "public_date": "2026-07-16", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-16" }, "refs": "ghsa-repos:bacnet-stack/bacnet-stack\tGHSA-mwj7-2v5r-v934", "description": "bacnet-stack/bacnet-stack repository advisory GHSA-mwj7-2v5r-v934", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 83, "clock_known": true, "hours_public": 1992, "clock_origin": "advisory", "advisory_date": "2026-07-16", "advisory_days_public": 83, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-mwj7-2v5r-v934" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62975", "state": "RESERVED", "public_date": "2026-07-16", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-16" }, "refs": "ghsa-repos:bacnet-stack/bacnet-stack\tGHSA-cf8g-hp9m-9fvv", "description": "bacnet-stack/bacnet-stack repository advisory GHSA-cf8g-hp9m-9fvv", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 83, "clock_known": true, "hours_public": 1992, "clock_origin": "advisory", "advisory_date": "2026-07-16", "advisory_days_public": 83, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-cf8g-hp9m-9fvv" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62976", "state": "RESERVED", "public_date": "2026-07-16", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-16" }, "refs": "ghsa-repos:bacnet-stack/bacnet-stack\tGHSA-32jj-x86x-w98w", "description": "bacnet-stack/bacnet-stack repository advisory GHSA-32jj-x86x-w98w", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 83, "clock_known": true, "hours_public": 1992, "clock_origin": "advisory", "advisory_date": "2026-07-16", "advisory_days_public": 83, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-32jj-x86x-w98w" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62974", "state": "RESERVED", "public_date": "2026-07-16", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-16" }, "refs": "ghsa-repos:bacnet-stack/bacnet-stack\tGHSA-2c8x-f46r-8phh", "description": "bacnet-stack/bacnet-stack repository advisory GHSA-2c8x-f46r-8phh", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 83, "clock_known": true, "hours_public": 1992, "clock_origin": "advisory", "advisory_date": "2026-07-16", "advisory_days_public": 83, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-2c8x-f46r-8phh" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62973", "state": "RESERVED", "public_date": "2026-07-16", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-16" }, "refs": "ghsa-repos:bacnet-stack/bacnet-stack\tGHSA-3xxw-jfwm-rq9c", "description": "bacnet-stack/bacnet-stack repository advisory GHSA-3xxw-jfwm-rq9c", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 83, "clock_known": true, "hours_public": 1992, "clock_origin": "advisory", "advisory_date": "2026-07-16", "advisory_days_public": 83, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/bacnet-stack/bacnet-stack/security/advisories/GHSA-3xxw-jfwm-rq9c" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-64683", "state": "RESERVED", "public_date": "2026-07-16", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-16" }, "refs": "ghsa-repos:cryptomator/hub\tGHSA-hq3g-4c59-cgg7", "description": "cryptomator/hub repository advisory GHSA-hq3g-4c59-cgg7", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 83, "clock_known": true, "hours_public": 1992, "clock_origin": "advisory", "advisory_date": "2026-07-16", "advisory_days_public": 83, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/cryptomator/hub/security/advisories/GHSA-hq3g-4c59-cgg7" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-64681", "state": "RESERVED", "public_date": "2026-07-16", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-16" }, "refs": "ghsa-repos:cryptomator/hub\tGHSA-p94x-9592-5r73", "description": "cryptomator/hub repository advisory GHSA-p94x-9592-5r73", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 83, "clock_known": true, "hours_public": 1992, "clock_origin": "advisory", "advisory_date": "2026-07-16", "advisory_days_public": 83, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/cryptomator/hub/security/advisories/GHSA-p94x-9592-5r73" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-64674", "state": "RESERVED", "public_date": "2026-07-16", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-16" }, "refs": "ghsa-repos:cryptomator/hub\tGHSA-99p9-vhhj-2x98", "description": "cryptomator/hub repository advisory GHSA-99p9-vhhj-2x98", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 83, "clock_known": true, "hours_public": 1992, "clock_origin": "advisory", "advisory_date": "2026-07-16", "advisory_days_public": 83, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/cryptomator/hub/security/advisories/GHSA-99p9-vhhj-2x98" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84360", "state": "RESERVED", "public_date": "2026-07-17", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-17" }, "refs": "ghsa-repos:0xJacky/nginx-ui\tGHSA-vc32-4gwf-77xp", "description": "0xJacky/nginx-ui repository advisory GHSA-vc32-4gwf-77xp", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 82, "clock_known": true, "hours_public": 1968, "clock_origin": "advisory", "advisory_date": "2026-07-17", "advisory_days_public": 82, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-vc32-4gwf-77xp" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84321", "state": "RESERVED", "public_date": "2026-07-17", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-17" }, "refs": "ghsa-repos:0xJacky/nginx-ui\tGHSA-wq4w-vwvq-q3x9", "description": "0xJacky/nginx-ui repository advisory GHSA-wq4w-vwvq-q3x9", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 82, "clock_known": true, "hours_public": 1968, "clock_origin": "advisory", "advisory_date": "2026-07-17", "advisory_days_public": 82, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-wq4w-vwvq-q3x9" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84320", "state": "RESERVED", "public_date": "2026-07-17", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-17" }, "refs": "ghsa-repos:0xJacky/nginx-ui\tGHSA-jrq7-xrjx-pcfw", "description": "0xJacky/nginx-ui repository advisory GHSA-jrq7-xrjx-pcfw", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 82, "clock_known": true, "hours_public": 1968, "clock_origin": "advisory", "advisory_date": "2026-07-17", "advisory_days_public": 82, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-jrq7-xrjx-pcfw" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84318", "state": "RESERVED", "public_date": "2026-07-17", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-17" }, "refs": "ghsa-repos:0xJacky/nginx-ui\tGHSA-9jww-cxg5-rj9m", "description": "0xJacky/nginx-ui repository advisory GHSA-9jww-cxg5-rj9m", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 82, "clock_known": true, "hours_public": 1968, "clock_origin": "advisory", "advisory_date": "2026-07-17", "advisory_days_public": 82, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-9jww-cxg5-rj9m" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84319", "state": "RESERVED", "public_date": "2026-07-17", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-17" }, "refs": "ghsa-repos:0xJacky/nginx-ui\tGHSA-5r62-gj48-897x", "description": "0xJacky/nginx-ui repository advisory GHSA-5r62-gj48-897x", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 82, "clock_known": true, "hours_public": 1968, "clock_origin": "advisory", "advisory_date": "2026-07-17", "advisory_days_public": 82, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-5r62-gj48-897x" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84317", "state": "RESERVED", "public_date": "2026-07-17", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-17" }, "refs": "ghsa-repos:0xJacky/nginx-ui\tGHSA-76pm-mq2q-9gcr", "description": "0xJacky/nginx-ui repository advisory GHSA-76pm-mq2q-9gcr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 82, "clock_known": true, "hours_public": 1968, "clock_origin": "advisory", "advisory_date": "2026-07-17", "advisory_days_public": 82, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-76pm-mq2q-9gcr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84316", "state": "RESERVED", "public_date": "2026-07-17", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-17" }, "refs": "ghsa-repos:0xJacky/nginx-ui\tGHSA-cf23-7qxj-xmhr", "description": "0xJacky/nginx-ui repository advisory GHSA-cf23-7qxj-xmhr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 82, "clock_known": true, "hours_public": 1968, "clock_origin": "advisory", "advisory_date": "2026-07-17", "advisory_days_public": 82, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-cf23-7qxj-xmhr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84313", "state": "RESERVED", "public_date": "2026-07-17", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-17" }, "refs": "ghsa-repos:0xJacky/nginx-ui\tGHSA-gfrc-g87h-7h5w", "description": "0xJacky/nginx-ui repository advisory GHSA-gfrc-g87h-7h5w", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 82, "clock_known": true, "hours_public": 1968, "clock_origin": "advisory", "advisory_date": "2026-07-17", "advisory_days_public": 82, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-gfrc-g87h-7h5w" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84315", "state": "RESERVED", "public_date": "2026-07-17", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-17" }, "refs": "ghsa-repos:0xJacky/nginx-ui\tGHSA-5v7c-xpfp-p65m", "description": "0xJacky/nginx-ui repository advisory GHSA-5v7c-xpfp-p65m", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 82, "clock_known": true, "hours_public": 1968, "clock_origin": "advisory", "advisory_date": "2026-07-17", "advisory_days_public": 82, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-5v7c-xpfp-p65m" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84314", "state": "RESERVED", "public_date": "2026-07-17", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-17" }, "refs": "ghsa-repos:0xJacky/nginx-ui\tGHSA-2gc7-j998-5xx6", "description": "0xJacky/nginx-ui repository advisory GHSA-2gc7-j998-5xx6", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 82, "clock_known": true, "hours_public": 1968, "clock_origin": "advisory", "advisory_date": "2026-07-17", "advisory_days_public": 82, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-2gc7-j998-5xx6" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84312", "state": "RESERVED", "public_date": "2026-07-17", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-17" }, "refs": "ghsa-repos:0xJacky/nginx-ui\tGHSA-44xr-mrhh-qm78", "description": "0xJacky/nginx-ui repository advisory GHSA-44xr-mrhh-qm78", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 82, "clock_known": true, "hours_public": 1968, "clock_origin": "advisory", "advisory_date": "2026-07-17", "advisory_days_public": 82, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-44xr-mrhh-qm78" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62678", "state": "RESERVED", "public_date": "2026-07-17", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-17" }, "refs": "ghsa-repos:cline/kanban\tGHSA-33x2-jv8j-4cxv", "description": "cline/kanban repository advisory GHSA-33x2-jv8j-4cxv", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 82, "clock_known": true, "hours_public": 1968, "clock_origin": "advisory", "advisory_date": "2026-07-17", "advisory_days_public": 82, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/cline/kanban/security/advisories/GHSA-33x2-jv8j-4cxv" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77375", "state": "RESERVED", "public_date": "2026-07-17", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-17" }, "refs": "ghsa-repos:drakkan/sftpgo\tGHSA-q7pc-356p-hggc", "description": "drakkan/sftpgo repository advisory GHSA-q7pc-356p-hggc", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 82, "clock_known": true, "hours_public": 1968, "clock_origin": "advisory", "advisory_date": "2026-07-17", "advisory_days_public": 82, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/drakkan/sftpgo/security/advisories/GHSA-q7pc-356p-hggc" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63340", "state": "RESERVED", "public_date": "2026-07-17", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-17" }, "refs": "ghsa-repos:eProsima/Fast-DDS\tGHSA-wv5q-wgv8-qh6v", "description": "eProsima/Fast-DDS repository advisory GHSA-wv5q-wgv8-qh6v", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 82, "clock_known": true, "hours_public": 1968, "clock_origin": "advisory", "advisory_date": "2026-07-17", "advisory_days_public": 82, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-wv5q-wgv8-qh6v" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-71860", "state": "RESERVED", "public_date": "2026-07-17", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-17" }, "refs": "ghsa-repos:kubeflow/hub\tGHSA-f85g-49hf-cp5c", "description": "kubeflow/hub repository advisory GHSA-f85g-49hf-cp5c", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 82, "clock_known": true, "hours_public": 1968, "clock_origin": "advisory", "advisory_date": "2026-07-17", "advisory_days_public": 82, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kubeflow/hub/security/advisories/GHSA-f85g-49hf-cp5c" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63631", "state": "RESERVED", "public_date": "2026-07-17", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-17" }, "refs": "ghsa-repos:kubeflow/hub\tGHSA-r7g8-78wq-m666", "description": "kubeflow/hub repository advisory GHSA-r7g8-78wq-m666", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 82, "clock_known": true, "hours_public": 1968, "clock_origin": "advisory", "advisory_date": "2026-07-17", "advisory_days_public": 82, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kubeflow/hub/security/advisories/GHSA-r7g8-78wq-m666" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-13412", "state": "RESERVED", "public_date": "2026-07-17", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-07-17" }, "refs": "csaf:SUSE Product Security Team\topenSUSE-SU-2026:11293-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11293-1.json", "description": "CVE-2026-13412", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 82, "clock_known": true, "hours_public": 1968, "clock_origin": "advisory", "advisory_date": "2026-07-17", "advisory_days_public": 82, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11293-1.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-94466", "state": "RESERVED", "public_date": "2026-07-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-18" }, "refs": "ghsa-repos:ChurchCRM/CRM\tGHSA-5cx4-48mf-h5c3", "description": "ChurchCRM/CRM repository advisory GHSA-5cx4-48mf-h5c3", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 81, "clock_known": true, "hours_public": 1944, "clock_origin": "advisory", "advisory_date": "2026-07-18", "advisory_days_public": 81, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ChurchCRM/CRM/security/advisories/GHSA-5cx4-48mf-h5c3" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-94468", "state": "RESERVED", "public_date": "2026-07-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-18" }, "refs": "ghsa-repos:ChurchCRM/CRM\tGHSA-5g9h-6xrp-gpqq", "description": "ChurchCRM/CRM repository advisory GHSA-5g9h-6xrp-gpqq", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 81, "clock_known": true, "hours_public": 1944, "clock_origin": "advisory", "advisory_date": "2026-07-18", "advisory_days_public": 81, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ChurchCRM/CRM/security/advisories/GHSA-5g9h-6xrp-gpqq" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-94469", "state": "RESERVED", "public_date": "2026-07-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-18" }, "refs": "ghsa-repos:ChurchCRM/CRM\tGHSA-369j-c5w2-48m4", "description": "ChurchCRM/CRM repository advisory GHSA-369j-c5w2-48m4", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 81, "clock_known": true, "hours_public": 1944, "clock_origin": "advisory", "advisory_date": "2026-07-18", "advisory_days_public": 81, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ChurchCRM/CRM/security/advisories/GHSA-369j-c5w2-48m4" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-94465", "state": "RESERVED", "public_date": "2026-07-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-18" }, "refs": "ghsa-repos:ChurchCRM/CRM\tGHSA-jx45-q5vj-h2wm", "description": "ChurchCRM/CRM repository advisory GHSA-jx45-q5vj-h2wm", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 81, "clock_known": true, "hours_public": 1944, "clock_origin": "advisory", "advisory_date": "2026-07-18", "advisory_days_public": 81, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ChurchCRM/CRM/security/advisories/GHSA-jx45-q5vj-h2wm" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-94467", "state": "RESERVED", "public_date": "2026-07-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-18" }, "refs": "ghsa-repos:ChurchCRM/CRM\tGHSA-mrr9-jxqx-xv62", "description": "ChurchCRM/CRM repository advisory GHSA-mrr9-jxqx-xv62", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 81, "clock_known": true, "hours_public": 1944, "clock_origin": "advisory", "advisory_date": "2026-07-18", "advisory_days_public": 81, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ChurchCRM/CRM/security/advisories/GHSA-mrr9-jxqx-xv62" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-94464", "state": "RESERVED", "public_date": "2026-07-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-18" }, "refs": "ghsa-repos:ChurchCRM/CRM\tGHSA-jmq9-v75g-63vr", "description": "ChurchCRM/CRM repository advisory GHSA-jmq9-v75g-63vr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 81, "clock_known": true, "hours_public": 1944, "clock_origin": "advisory", "advisory_date": "2026-07-18", "advisory_days_public": 81, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ChurchCRM/CRM/security/advisories/GHSA-jmq9-v75g-63vr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-94463", "state": "RESERVED", "public_date": "2026-07-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-18" }, "refs": "ghsa-repos:ChurchCRM/CRM\tGHSA-frj8-mpcx-44g9", "description": "ChurchCRM/CRM repository advisory GHSA-frj8-mpcx-44g9", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 81, "clock_known": true, "hours_public": 1944, "clock_origin": "advisory", "advisory_date": "2026-07-18", "advisory_days_public": 81, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ChurchCRM/CRM/security/advisories/GHSA-frj8-mpcx-44g9" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-85990", "state": "RESERVED", "public_date": "2026-07-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-18" }, "refs": "ghsa-repos:Leantime/leantime\tGHSA-54mm-6729-r5wp", "description": "Leantime/leantime repository advisory GHSA-54mm-6729-r5wp", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 81, "clock_known": true, "hours_public": 1944, "clock_origin": "advisory", "advisory_date": "2026-07-18", "advisory_days_public": 81, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Leantime/leantime/security/advisories/GHSA-54mm-6729-r5wp" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-67532", "state": "RESERVED", "public_date": "2026-07-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-18" }, "refs": "ghsa-repos:agentfront/frontmcp\tGHSA-hvvp-67p3-j379", "description": "agentfront/frontmcp repository advisory GHSA-hvvp-67p3-j379", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 81, "clock_known": true, "hours_public": 1944, "clock_origin": "advisory", "advisory_date": "2026-07-18", "advisory_days_public": 81, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/agentfront/frontmcp/security/advisories/GHSA-hvvp-67p3-j379" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-85727", "state": "RESERVED", "public_date": "2026-07-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-18" }, "refs": "ghsa-repos:maximmasiutin/TinyWeb\tGHSA-56x3-254q-j68q", "description": "maximmasiutin/TinyWeb repository advisory GHSA-56x3-254q-j68q", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 81, "clock_known": true, "hours_public": 1944, "clock_origin": "advisory", "advisory_date": "2026-07-18", "advisory_days_public": 81, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/maximmasiutin/TinyWeb/security/advisories/GHSA-56x3-254q-j68q" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-85728", "state": "RESERVED", "public_date": "2026-07-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-18" }, "refs": "ghsa-repos:maximmasiutin/TinyWeb\tGHSA-wxxh-8845-3c89", "description": "maximmasiutin/TinyWeb repository advisory GHSA-wxxh-8845-3c89", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 81, "clock_known": true, "hours_public": 1944, "clock_origin": "advisory", "advisory_date": "2026-07-18", "advisory_days_public": 81, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/maximmasiutin/TinyWeb/security/advisories/GHSA-wxxh-8845-3c89" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-85729", "state": "RESERVED", "public_date": "2026-07-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-18" }, "refs": "ghsa-repos:maximmasiutin/TinyWeb\tGHSA-rprm-fpv2-mwwf", "description": "maximmasiutin/TinyWeb repository advisory GHSA-rprm-fpv2-mwwf", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 81, "clock_known": true, "hours_public": 1944, "clock_origin": "advisory", "advisory_date": "2026-07-18", "advisory_days_public": 81, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/maximmasiutin/TinyWeb/security/advisories/GHSA-rprm-fpv2-mwwf" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-86020", "state": "RESERVED", "public_date": "2026-07-19", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-19" }, "refs": "ghsa-repos:Part-DB/Part-DB-server\tGHSA-hxw4-frfg-f8jw", "description": "Part-DB/Part-DB-server repository advisory GHSA-hxw4-frfg-f8jw", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 80, "clock_known": true, "hours_public": 1920, "clock_origin": "advisory", "advisory_date": "2026-07-19", "advisory_days_public": 80, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Part-DB/Part-DB-server/security/advisories/GHSA-hxw4-frfg-f8jw" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-86019", "state": "RESERVED", "public_date": "2026-07-19", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-19" }, "refs": "ghsa-repos:Part-DB/Part-DB-server\tGHSA-8fvw-xrgv-jq4w", "description": "Part-DB/Part-DB-server repository advisory GHSA-8fvw-xrgv-jq4w", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 80, "clock_known": true, "hours_public": 1920, "clock_origin": "advisory", "advisory_date": "2026-07-19", "advisory_days_public": 80, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Part-DB/Part-DB-server/security/advisories/GHSA-8fvw-xrgv-jq4w" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-86018", "state": "RESERVED", "public_date": "2026-07-19", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-19" }, "refs": "ghsa-repos:Part-DB/Part-DB-server\tGHSA-2whx-2cx7-qvq6", "description": "Part-DB/Part-DB-server repository advisory GHSA-2whx-2cx7-qvq6", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 80, "clock_known": true, "hours_public": 1920, "clock_origin": "advisory", "advisory_date": "2026-07-19", "advisory_days_public": 80, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Part-DB/Part-DB-server/security/advisories/GHSA-2whx-2cx7-qvq6" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-59188", "state": "RESERVED", "public_date": "2026-07-19", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-19" }, "refs": "ghsa-repos:Part-DB/Part-DB-server\tGHSA-2vhp-c958-m47j", "description": "Part-DB/Part-DB-server repository advisory GHSA-2vhp-c958-m47j", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 80, "clock_known": true, "hours_public": 1920, "clock_origin": "advisory", "advisory_date": "2026-07-19", "advisory_days_public": 80, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Part-DB/Part-DB-server/security/advisories/GHSA-2vhp-c958-m47j" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57458", "state": "RESERVED", "public_date": "2026-07-19", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-19" }, "refs": "ghsa-repos:go-vikunja/vikunja\tGHSA-v3p6-34mc-hj7v", "description": "go-vikunja/vikunja repository advisory GHSA-v3p6-34mc-hj7v", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 80, "clock_known": true, "hours_public": 1920, "clock_origin": "advisory", "advisory_date": "2026-07-19", "advisory_days_public": 80, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/go-vikunja/vikunja/security/advisories/GHSA-v3p6-34mc-hj7v" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62376", "state": "RESERVED", "public_date": "2026-07-19", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-19" }, "refs": "ghsa-repos:go-vikunja/vikunja\tGHSA-r6w9-259g-gwrv", "description": "go-vikunja/vikunja repository advisory GHSA-r6w9-259g-gwrv", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 80, "clock_known": true, "hours_public": 1920, "clock_origin": "advisory", "advisory_date": "2026-07-19", "advisory_days_public": 80, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/go-vikunja/vikunja/security/advisories/GHSA-r6w9-259g-gwrv" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62367", "state": "RESERVED", "public_date": "2026-07-19", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-19" }, "refs": "ghsa-repos:go-vikunja/vikunja\tGHSA-xv7q-fvmc-jx96", "description": "go-vikunja/vikunja repository advisory GHSA-xv7q-fvmc-jx96", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 80, "clock_known": true, "hours_public": 1920, "clock_origin": "advisory", "advisory_date": "2026-07-19", "advisory_days_public": 80, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/go-vikunja/vikunja/security/advisories/GHSA-xv7q-fvmc-jx96" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-86016", "state": "RESERVED", "public_date": "2026-07-19", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-19" }, "refs": "ghsa-repos:vnotex/vnote\tGHSA-vfhj-c636-h59x", "description": "vnotex/vnote repository advisory GHSA-vfhj-c636-h59x", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 80, "clock_known": true, "hours_public": 1920, "clock_origin": "advisory", "advisory_date": "2026-07-19", "advisory_days_public": 80, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/vnotex/vnote/security/advisories/GHSA-vfhj-c636-h59x" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-68543", "state": "RESERVED", "public_date": "2026-07-20", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-20" }, "refs": "ghsa-repos:FOSSBilling/FOSSBilling\tGHSA-fx78-6vx2-v4mr", "description": "FOSSBilling/FOSSBilling repository advisory GHSA-fx78-6vx2-v4mr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 79, "clock_known": true, "hours_public": 1896, "clock_origin": "advisory", "advisory_date": "2026-07-20", "advisory_days_public": 79, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/FOSSBilling/FOSSBilling/security/advisories/GHSA-fx78-6vx2-v4mr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-68542", "state": "RESERVED", "public_date": "2026-07-20", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-20" }, "refs": "ghsa-repos:FOSSBilling/FOSSBilling\tGHSA-6w49-4398-7rw5", "description": "FOSSBilling/FOSSBilling repository advisory GHSA-6w49-4398-7rw5", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 79, "clock_known": true, "hours_public": 1896, "clock_origin": "advisory", "advisory_date": "2026-07-20", "advisory_days_public": 79, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/FOSSBilling/FOSSBilling/security/advisories/GHSA-6w49-4398-7rw5" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-93407", "state": "RESERVED", "public_date": "2026-07-20", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-20" }, "refs": "ghsa-repos:Shelf-nu/shelf.nu\tGHSA-w7hm-pwcf-64rc", "description": "Shelf-nu/shelf.nu repository advisory GHSA-w7hm-pwcf-64rc", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 79, "clock_known": true, "hours_public": 1896, "clock_origin": "advisory", "advisory_date": "2026-07-20", "advisory_days_public": 79, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Shelf-nu/shelf.nu/security/advisories/GHSA-w7hm-pwcf-64rc" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96781", "state": "RESERVED", "public_date": "2026-07-20", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-20" }, "refs": "ghsa-repos:dromara/MaxKey\tGHSA-frgp-wv26-8g4m", "description": "dromara/MaxKey repository advisory GHSA-frgp-wv26-8g4m", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 79, "clock_known": true, "hours_public": 1896, "clock_origin": "advisory", "advisory_date": "2026-07-20", "advisory_days_public": 79, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/dromara/MaxKey/security/advisories/GHSA-frgp-wv26-8g4m" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96783", "state": "RESERVED", "public_date": "2026-07-20", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-20" }, "refs": "ghsa-repos:dromara/MaxKey\tGHSA-98j5-7h45-7gj9", "description": "dromara/MaxKey repository advisory GHSA-98j5-7h45-7gj9", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 79, "clock_known": true, "hours_public": 1896, "clock_origin": "advisory", "advisory_date": "2026-07-20", "advisory_days_public": 79, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/dromara/MaxKey/security/advisories/GHSA-98j5-7h45-7gj9" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96782", "state": "RESERVED", "public_date": "2026-07-20", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-20" }, "refs": "ghsa-repos:dromara/MaxKey\tGHSA-h822-h3qf-x45g", "description": "dromara/MaxKey repository advisory GHSA-h822-h3qf-x45g", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 79, "clock_known": true, "hours_public": 1896, "clock_origin": "advisory", "advisory_date": "2026-07-20", "advisory_days_public": 79, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/dromara/MaxKey/security/advisories/GHSA-h822-h3qf-x45g" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96784", "state": "RESERVED", "public_date": "2026-07-20", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-20" }, "refs": "ghsa-repos:dromara/MaxKey\tGHSA-q2xr-792r-2r22", "description": "dromara/MaxKey repository advisory GHSA-q2xr-792r-2r22", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 79, "clock_known": true, "hours_public": 1896, "clock_origin": "advisory", "advisory_date": "2026-07-20", "advisory_days_public": 79, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/dromara/MaxKey/security/advisories/GHSA-q2xr-792r-2r22" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96785", "state": "RESERVED", "public_date": "2026-07-20", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-20" }, "refs": "ghsa-repos:dromara/MaxKey\tGHSA-923q-pfgg-g74r", "description": "dromara/MaxKey repository advisory GHSA-923q-pfgg-g74r", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 79, "clock_known": true, "hours_public": 1896, "clock_origin": "advisory", "advisory_date": "2026-07-20", "advisory_days_public": 79, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/dromara/MaxKey/security/advisories/GHSA-923q-pfgg-g74r" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77476", "state": "RESERVED", "public_date": "2026-07-20", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-20" }, "refs": "ghsa-repos:dromara/MaxKey\tGHSA-rc95-ghv3-whw8", "description": "dromara/MaxKey repository advisory GHSA-rc95-ghv3-whw8", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 79, "clock_known": true, "hours_public": 1896, "clock_origin": "advisory", "advisory_date": "2026-07-20", "advisory_days_public": 79, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/dromara/MaxKey/security/advisories/GHSA-rc95-ghv3-whw8" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96626", "state": "RESERVED", "public_date": "2026-07-20", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-20" }, "refs": "ghsa-repos:getarcaneapp/arcane\tGHSA-9pxc-cxp5-qp54", "description": "getarcaneapp/arcane repository advisory GHSA-9pxc-cxp5-qp54", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 79, "clock_known": true, "hours_public": 1896, "clock_origin": "advisory", "advisory_date": "2026-07-20", "advisory_days_public": 79, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/getarcaneapp/arcane/security/advisories/GHSA-9pxc-cxp5-qp54" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-86022", "state": "RESERVED", "public_date": "2026-07-20", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-20" }, "refs": "ghsa-repos:vnotex/vnote\tGHSA-6m2r-wm6v-c8qp", "description": "vnotex/vnote repository advisory GHSA-6m2r-wm6v-c8qp", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 79, "clock_known": true, "hours_public": 1896, "clock_origin": "advisory", "advisory_date": "2026-07-20", "advisory_days_public": 79, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/vnotex/vnote/security/advisories/GHSA-6m2r-wm6v-c8qp" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-10631", "state": "RESERVED", "public_date": "2026-07-20", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-07-20" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2429\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2429.json", "description": "CVE-2026-10631", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 79, "clock_known": true, "hours_public": 1896, "clock_origin": "advisory", "advisory_date": "2026-07-20", "advisory_days_public": 79, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2429.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-50054", "state": "RESERVED", "public_date": "2026-07-20", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-07-20" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2429\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2429.json", "description": "CVE-2026-50054", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 79, "clock_known": true, "hours_public": 1896, "clock_origin": "advisory", "advisory_date": "2026-07-20", "advisory_days_public": 79, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2429.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-50055", "state": "RESERVED", "public_date": "2026-07-20", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-07-20" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2429\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2429.json", "description": "CVE-2026-50055", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 79, "clock_known": true, "hours_public": 1896, "clock_origin": "advisory", "advisory_date": "2026-07-20", "advisory_days_public": 79, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2429.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63676", "state": "RESERVED", "public_date": "2026-07-21", "sources": "alas,alpine,csaf,debian", "feed_count": 4, "dates": { "alas": "2026-08-26", "csaf": "2026-07-21" }, "refs": "alas:CVE-2026-63676;alpine:perl-yaml;csaf:SUSE Product Security Team\topenSUSE-SU-2026:11321-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11321-1.json;debian:libyaml-perl", "description": "Backtracking leads to exponential load time in libyaml library.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 78, "clock_known": true, "hours_public": 1872, "clock_origin": "advisory", "advisory_date": "2026-07-21", "advisory_days_public": 78, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "perl-yaml", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-63676.html", "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-63676", "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11321-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-63676" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-46569", "state": "RESERVED", "public_date": "2026-07-21", "sources": "alpine,csaf,debian", "feed_count": 3, "dates": { "csaf": "2026-07-21" }, "refs": "alpine:ntfs-3g;csaf:SUSE Product Security Team\tCVE-2026-46569\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-46569.json;debian:ntfs-3g", "description": "CVE-2026-46569", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 78, "clock_known": true, "hours_public": 1872, "clock_origin": "advisory", "advisory_date": "2026-07-21", "advisory_days_public": 78, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "ntfs-3g", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-46569", "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-46569.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-46569" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-46570", "state": "RESERVED", "public_date": "2026-07-21", "sources": "alpine,csaf,debian", "feed_count": 3, "dates": { "csaf": "2026-07-21" }, "refs": "alpine:ntfs-3g;csaf:SUSE Product Security Team\tCVE-2026-46570\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-46570.json;debian:ntfs-3g", "description": "CVE-2026-46570", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 78, "clock_known": true, "hours_public": 1872, "clock_origin": "advisory", "advisory_date": "2026-07-21", "advisory_days_public": 78, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "ntfs-3g", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-46570", "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-46570.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-46570" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-46571", "state": "RESERVED", "public_date": "2026-07-21", "sources": "alpine,csaf,debian", "feed_count": 3, "dates": { "csaf": "2026-07-21" }, "refs": "alpine:ntfs-3g;csaf:SUSE Product Security Team\tCVE-2026-46571\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-46571.json;debian:ntfs-3g", "description": "CVE-2026-46571", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 78, "clock_known": true, "hours_public": 1872, "clock_origin": "advisory", "advisory_date": "2026-07-21", "advisory_days_public": 78, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "ntfs-3g", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-46571", "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-46571.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-46571" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-46572", "state": "RESERVED", "public_date": "2026-07-21", "sources": "alpine,csaf,debian", "feed_count": 3, "dates": { "csaf": "2026-07-21" }, "refs": "alpine:ntfs-3g;csaf:SUSE Product Security Team\tCVE-2026-46572\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-46572.json;debian:ntfs-3g", "description": "CVE-2026-46572", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 78, "clock_known": true, "hours_public": 1872, "clock_origin": "advisory", "advisory_date": "2026-07-21", "advisory_days_public": 78, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "ntfs-3g", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-46572", "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-46572.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-46572" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63347", "state": "RESERVED", "public_date": "2026-07-21", "sources": "debian,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-07-21" }, "refs": "debian:suricata-update;ghsa-repos:OISF/suricata-update\tGHSA-6v4p-4w5x-9fp2", "description": "OISF/suricata-update repository advisory GHSA-6v4p-4w5x-9fp2", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 78, "clock_known": true, "hours_public": 1872, "clock_origin": "advisory", "advisory_date": "2026-07-21", "advisory_days_public": 78, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "suricata-update", "ecosystem": "", "source_urls": { "debian": "https://security-tracker.debian.org/tracker/CVE-2026-63347", "ghsa-repos": "https://github.com/OISF/suricata-update/security/advisories/GHSA-6v4p-4w5x-9fp2" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-73142", "state": "RESERVED", "public_date": "2026-07-21", "sources": "csaf,debian,redhat", "feed_count": 3, "dates": { "redhat": "2026-07-21", "csaf": "2026-07-21" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-73142\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-73142.json;debian:svxlink;redhat:CVE-2026-73142", "description": "svxlink: svxlink: Unbounded resource exhaustion via connection object leak in NetUplink", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 78, "clock_known": true, "hours_public": 1872, "clock_origin": "advisory", "advisory_date": "2026-07-21", "advisory_days_public": 78, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "svxlink", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-73142.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-73142", "redhat": "https://access.redhat.com/security/cve/CVE-2026-73142" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-73143", "state": "RESERVED", "public_date": "2026-07-21", "sources": "csaf,debian,redhat", "feed_count": 3, "dates": { "redhat": "2026-07-21", "csaf": "2026-07-21" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-73143\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-73143.json;debian:svxlink;redhat:CVE-2026-73143", "description": "svxlink: svxlink: Denial of service via malformed rtl_tcp greeting", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 78, "clock_known": true, "hours_public": 1872, "clock_origin": "advisory", "advisory_date": "2026-07-21", "advisory_days_public": 78, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "svxlink", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-73143.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-73143", "redhat": "https://access.redhat.com/security/cve/CVE-2026-73143" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63327", "state": "RESERVED", "public_date": "2026-07-21", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-21" }, "refs": "ghsa-repos:e107inc/e107\tGHSA-wcc5-8jrf-6q26", "description": "e107inc/e107 repository advisory GHSA-wcc5-8jrf-6q26", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 78, "clock_known": true, "hours_public": 1872, "clock_origin": "advisory", "advisory_date": "2026-07-21", "advisory_days_public": 78, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/e107inc/e107/security/advisories/GHSA-wcc5-8jrf-6q26" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-97382", "state": "RESERVED", "public_date": "2026-07-21", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-21" }, "refs": "ghsa-repos:e107inc/e107\tGHSA-fr8h-3vfv-9q98", "description": "e107inc/e107 repository advisory GHSA-fr8h-3vfv-9q98", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 78, "clock_known": true, "hours_public": 1872, "clock_origin": "advisory", "advisory_date": "2026-07-21", "advisory_days_public": 78, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/e107inc/e107/security/advisories/GHSA-fr8h-3vfv-9q98" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-97393", "state": "RESERVED", "public_date": "2026-07-21", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-21" }, "refs": "ghsa-repos:horilla/horilla-hr\tGHSA-vrm5-xwxp-65xr", "description": "horilla/horilla-hr repository advisory GHSA-vrm5-xwxp-65xr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 78, "clock_known": true, "hours_public": 1872, "clock_origin": "advisory", "advisory_date": "2026-07-21", "advisory_days_public": 78, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/horilla/horilla-hr/security/advisories/GHSA-vrm5-xwxp-65xr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96796", "state": "RESERVED", "public_date": "2026-07-21", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-21" }, "refs": "ghsa-repos:horilla/horilla-hr\tGHSA-2h9f-hrmh-gx8r", "description": "horilla/horilla-hr repository advisory GHSA-2h9f-hrmh-gx8r", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 78, "clock_known": true, "hours_public": 1872, "clock_origin": "advisory", "advisory_date": "2026-07-21", "advisory_days_public": 78, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/horilla/horilla-hr/security/advisories/GHSA-2h9f-hrmh-gx8r" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-86072", "state": "RESERVED", "public_date": "2026-07-21", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-21" }, "refs": "ghsa-repos:kata-containers/kata-containers\tGHSA-7fhf-v3p3-rp56", "description": "kata-containers/kata-containers repository advisory GHSA-7fhf-v3p3-rp56", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 78, "clock_known": true, "hours_public": 1872, "clock_origin": "advisory", "advisory_date": "2026-07-21", "advisory_days_public": 78, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kata-containers/kata-containers/security/advisories/GHSA-7fhf-v3p3-rp56" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-93417", "state": "RESERVED", "public_date": "2026-07-21", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-21" }, "refs": "ghsa-repos:kata-containers/kata-containers\tGHSA-fgm4-mv68-h344", "description": "kata-containers/kata-containers repository advisory GHSA-fgm4-mv68-h344", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 78, "clock_known": true, "hours_public": 1872, "clock_origin": "advisory", "advisory_date": "2026-07-21", "advisory_days_public": 78, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kata-containers/kata-containers/security/advisories/GHSA-fgm4-mv68-h344" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-28311", "state": "RESERVED", "public_date": "2026-07-21", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-07-21" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2467\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2467.json", "description": "CVE-2026-28311", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 78, "clock_known": true, "hours_public": 1872, "clock_origin": "advisory", "advisory_date": "2026-07-21", "advisory_days_public": 78, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2467.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62686", "state": "RESERVED", "public_date": "2026-07-21", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-07-21" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2471\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2471.json", "description": "CVE-2026-62686", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 78, "clock_known": true, "hours_public": 1872, "clock_origin": "advisory", "advisory_date": "2026-07-21", "advisory_days_public": 78, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2471.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-16566", "state": "RESERVED", "public_date": "2026-07-22", "sources": "alas,csaf,debian,redhat", "feed_count": 4, "dates": { "alas": "2026-07-27", "redhat": "2026-07-22", "csaf": "2026-07-22" }, "refs": "alas:CVE-2026-16566;csaf:Red Hat Product Security\tCVE-2026-16566\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-16566.json;debian:ansible;redhat:CVE-2026-16566", "description": "A flaw was found in the community.general Ansible collection's jenkins_credential module.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 77, "clock_known": true, "hours_public": 1848, "clock_origin": "advisory", "advisory_date": "2026-07-22", "advisory_days_public": 77, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "ansible", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-16566.html", "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-16566.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-16566", "redhat": "https://access.redhat.com/security/cve/CVE-2026-16566" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-45097", "state": "RESERVED", "public_date": "2026-07-22", "sources": "debian,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-07-22" }, "refs": "debian:fastdds;ghsa-repos:eProsima/Fast-DDS\tGHSA-93m4-rx65-p7rj", "description": "eProsima/Fast-DDS repository advisory GHSA-93m4-rx65-p7rj", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 77, "clock_known": true, "hours_public": 1848, "clock_origin": "advisory", "advisory_date": "2026-07-22", "advisory_days_public": 77, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "fastdds", "ecosystem": "", "source_urls": { "debian": "https://security-tracker.debian.org/tracker/CVE-2026-45097", "ghsa-repos": "https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-93m4-rx65-p7rj" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-42616", "state": "RESERVED", "public_date": "2026-07-22", "sources": "alpine,csaf,debian", "feed_count": 3, "dates": { "csaf": "2026-07-22" }, "refs": "alpine:ntfs-3g;csaf:SUSE Product Security Team\tCVE-2026-42616\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-42616.json;debian:ntfs-3g", "description": "CVE-2026-42616", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 77, "clock_known": true, "hours_public": 1848, "clock_origin": "advisory", "advisory_date": "2026-07-22", "advisory_days_public": 77, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "ntfs-3g", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-42616", "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-42616.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-42616" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-42617", "state": "RESERVED", "public_date": "2026-07-22", "sources": "alpine,csaf,debian", "feed_count": 3, "dates": { "csaf": "2026-07-22" }, "refs": "alpine:ntfs-3g;csaf:SUSE Product Security Team\tCVE-2026-42617\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-42617.json;debian:ntfs-3g", "description": "CVE-2026-42617", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 77, "clock_known": true, "hours_public": 1848, "clock_origin": "advisory", "advisory_date": "2026-07-22", "advisory_days_public": 77, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "ntfs-3g", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-42617", "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-42617.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-42617" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-42618", "state": "RESERVED", "public_date": "2026-07-22", "sources": "alpine,csaf,debian", "feed_count": 3, "dates": { "csaf": "2026-07-22" }, "refs": "alpine:ntfs-3g;csaf:SUSE Product Security Team\tCVE-2026-42618\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-42618.json;debian:ntfs-3g", "description": "CVE-2026-42618", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 77, "clock_known": true, "hours_public": 1848, "clock_origin": "advisory", "advisory_date": "2026-07-22", "advisory_days_public": 77, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "ntfs-3g", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-42618", "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-42618.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-42618" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-73144", "state": "RESERVED", "public_date": "2026-07-22", "sources": "csaf,debian,redhat", "feed_count": 3, "dates": { "redhat": "2026-07-22", "csaf": "2026-07-22" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-73144\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-73144.json;debian:svxlink;redhat:CVE-2026-73144", "description": "svxlink: svxlink: Unbounded memory growth via unvalidated list count in FRN module", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 77, "clock_known": true, "hours_public": 1848, "clock_origin": "advisory", "advisory_date": "2026-07-22", "advisory_days_public": 77, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "svxlink", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-73144.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-73144", "redhat": "https://access.redhat.com/security/cve/CVE-2026-73144" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-102607", "state": "RESERVED", "public_date": "2026-07-22", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-22" }, "refs": "ghsa-repos:ZoneMinder/zoneminder\tGHSA-7j62-cjxp-3cj5", "description": "ZoneMinder/zoneminder repository advisory GHSA-7j62-cjxp-3cj5", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 77, "clock_known": true, "hours_public": 1848, "clock_origin": "advisory", "advisory_date": "2026-07-22", "advisory_days_public": 77, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-7j62-cjxp-3cj5" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-67441", "state": "RESERVED", "public_date": "2026-07-22", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-22" }, "refs": "ghsa-repos:frangoteam/FUXA\tGHSA-8gwj-g6fx-96jr", "description": "frangoteam/FUXA repository advisory GHSA-8gwj-g6fx-96jr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 77, "clock_known": true, "hours_public": 1848, "clock_origin": "advisory", "advisory_date": "2026-07-22", "advisory_days_public": 77, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/frangoteam/FUXA/security/advisories/GHSA-8gwj-g6fx-96jr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77437", "state": "RESERVED", "public_date": "2026-07-22", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-22" }, "refs": "ghsa-repos:kiwitcms/Kiwi\tGHSA-554x-3chh-x3h9", "description": "kiwitcms/Kiwi repository advisory GHSA-554x-3chh-x3h9", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 77, "clock_known": true, "hours_public": 1848, "clock_origin": "advisory", "advisory_date": "2026-07-22", "advisory_days_public": 77, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiwitcms/Kiwi/security/advisories/GHSA-554x-3chh-x3h9" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77435", "state": "RESERVED", "public_date": "2026-07-22", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-22" }, "refs": "ghsa-repos:kiwitcms/Kiwi\tGHSA-3qxv-9j3q-c68v", "description": "kiwitcms/Kiwi repository advisory GHSA-3qxv-9j3q-c68v", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 77, "clock_known": true, "hours_public": 1848, "clock_origin": "advisory", "advisory_date": "2026-07-22", "advisory_days_public": 77, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiwitcms/Kiwi/security/advisories/GHSA-3qxv-9j3q-c68v" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77434", "state": "RESERVED", "public_date": "2026-07-22", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-22" }, "refs": "ghsa-repos:kiwitcms/Kiwi\tGHSA-cjrx-h8r2-jgc7", "description": "kiwitcms/Kiwi repository advisory GHSA-cjrx-h8r2-jgc7", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 77, "clock_known": true, "hours_public": 1848, "clock_origin": "advisory", "advisory_date": "2026-07-22", "advisory_days_public": 77, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiwitcms/Kiwi/security/advisories/GHSA-cjrx-h8r2-jgc7" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77433", "state": "RESERVED", "public_date": "2026-07-22", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-22" }, "refs": "ghsa-repos:kiwitcms/Kiwi\tGHSA-gcwf-c25f-p9rv", "description": "kiwitcms/Kiwi repository advisory GHSA-gcwf-c25f-p9rv", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 77, "clock_known": true, "hours_public": 1848, "clock_origin": "advisory", "advisory_date": "2026-07-22", "advisory_days_public": 77, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiwitcms/Kiwi/security/advisories/GHSA-gcwf-c25f-p9rv" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-102347", "state": "RESERVED", "public_date": "2026-07-22", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-22" }, "refs": "ghsa-repos:pdovhomilja/nextcrm-app\tGHSA-vq6p-3qj5-p666", "description": "pdovhomilja/nextcrm-app repository advisory GHSA-vq6p-3qj5-p666", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 77, "clock_known": true, "hours_public": 1848, "clock_origin": "advisory", "advisory_date": "2026-07-22", "advisory_days_public": 77, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/pdovhomilja/nextcrm-app/security/advisories/GHSA-vq6p-3qj5-p666" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-102348", "state": "RESERVED", "public_date": "2026-07-22", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-22" }, "refs": "ghsa-repos:pdovhomilja/nextcrm-app\tGHSA-f5r5-f2v5-74ww", "description": "pdovhomilja/nextcrm-app repository advisory GHSA-f5r5-f2v5-74ww", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 77, "clock_known": true, "hours_public": 1848, "clock_origin": "advisory", "advisory_date": "2026-07-22", "advisory_days_public": 77, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/pdovhomilja/nextcrm-app/security/advisories/GHSA-f5r5-f2v5-74ww" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62360", "state": "RESERVED", "public_date": "2026-07-22", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-22" }, "refs": "ghsa-repos:rabbitmq/cluster-operator\tGHSA-hvjc-whr9-649f", "description": "rabbitmq/cluster-operator repository advisory GHSA-hvjc-whr9-649f", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 77, "clock_known": true, "hours_public": 1848, "clock_origin": "advisory", "advisory_date": "2026-07-22", "advisory_days_public": 77, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/rabbitmq/cluster-operator/security/advisories/GHSA-hvjc-whr9-649f" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-102539", "state": "RESERVED", "public_date": "2026-07-22", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-22" }, "refs": "ghsa-repos:super-productivity/super-productivity\tGHSA-9v8x-68pf-p5x7", "description": "super-productivity/super-productivity repository advisory GHSA-9v8x-68pf-p5x7", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 77, "clock_known": true, "hours_public": 1848, "clock_origin": "advisory", "advisory_date": "2026-07-22", "advisory_days_public": 77, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/super-productivity/super-productivity/security/advisories/GHSA-9v8x-68pf-p5x7" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-86036", "state": "RESERVED", "public_date": "2026-07-22", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-22" }, "refs": "ghsa-repos:weechat/weechat\tGHSA-68ff-gq39-pqjm", "description": "weechat/weechat repository advisory GHSA-68ff-gq39-pqjm", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 77, "clock_known": true, "hours_public": 1848, "clock_origin": "advisory", "advisory_date": "2026-07-22", "advisory_days_public": 77, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/weechat/weechat/security/advisories/GHSA-68ff-gq39-pqjm" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55868", "state": "RESERVED", "public_date": "2026-07-23", "sources": "csaf,debian", "feed_count": 2, "dates": { "csaf": "2026-07-23" }, "refs": "csaf:SUSE Product Security Team\topenSUSE-SU-2026:11357-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11357-1.json;debian:srt", "description": "CVE-2026-55868", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 76, "clock_known": true, "hours_public": 1824, "clock_origin": "advisory", "advisory_date": "2026-07-23", "advisory_days_public": 76, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "srt", "ecosystem": "", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11357-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-55868" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55869", "state": "RESERVED", "public_date": "2026-07-23", "sources": "csaf,debian", "feed_count": 2, "dates": { "csaf": "2026-07-23" }, "refs": "csaf:SUSE Product Security Team\topenSUSE-SU-2026:11357-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11357-1.json;debian:srt", "description": "CVE-2026-55869", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 76, "clock_known": true, "hours_public": 1824, "clock_origin": "advisory", "advisory_date": "2026-07-23", "advisory_days_public": 76, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "srt", "ecosystem": "", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11357-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-55869" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-102663", "state": "RESERVED", "public_date": "2026-07-23", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-23" }, "refs": "ghsa-repos:OpenListTeam/OpenList\tGHSA-p6ph-3jx2-3337", "description": "OpenListTeam/OpenList repository advisory GHSA-p6ph-3jx2-3337", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 76, "clock_known": true, "hours_public": 1824, "clock_origin": "advisory", "advisory_date": "2026-07-23", "advisory_days_public": 76, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/OpenListTeam/OpenList/security/advisories/GHSA-p6ph-3jx2-3337" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-102692", "state": "RESERVED", "public_date": "2026-07-23", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-23" }, "refs": "ghsa-repos:RIOT-OS/RIOT\tGHSA-8365-gj33-rgpf", "description": "RIOT-OS/RIOT repository advisory GHSA-8365-gj33-rgpf", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 76, "clock_known": true, "hours_public": 1824, "clock_origin": "advisory", "advisory_date": "2026-07-23", "advisory_days_public": 76, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-8365-gj33-rgpf" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-67533", "state": "RESERVED", "public_date": "2026-07-23", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-23" }, "refs": "ghsa-repos:agentfront/frontmcp\tGHSA-8q49-2h5h-434x", "description": "agentfront/frontmcp repository advisory GHSA-8q49-2h5h-434x", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 76, "clock_known": true, "hours_public": 1824, "clock_origin": "advisory", "advisory_date": "2026-07-23", "advisory_days_public": 76, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/agentfront/frontmcp/security/advisories/GHSA-8q49-2h5h-434x" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-64856", "state": "RESERVED", "public_date": "2026-07-23", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-23" }, "refs": "ghsa-repos:error311/FileRise\tGHSA-p4c7-8jm2-m88q", "description": "error311/FileRise repository advisory GHSA-p4c7-8jm2-m88q", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 76, "clock_known": true, "hours_public": 1824, "clock_origin": "advisory", "advisory_date": "2026-07-23", "advisory_days_public": 76, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/error311/FileRise/security/advisories/GHSA-p4c7-8jm2-m88q" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-67416", "state": "RESERVED", "public_date": "2026-07-23", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-23" }, "refs": "ghsa-repos:rabbitmq/rabbitmq-server\tGHSA-p35w-6mx2-q4pc", "description": "rabbitmq/rabbitmq-server repository advisory GHSA-p35w-6mx2-q4pc", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 76, "clock_known": true, "hours_public": 1824, "clock_origin": "advisory", "advisory_date": "2026-07-23", "advisory_days_public": 76, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-p35w-6mx2-q4pc" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-67414", "state": "RESERVED", "public_date": "2026-07-23", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-23" }, "refs": "ghsa-repos:rabbitmq/rabbitmq-server\tGHSA-w6mq-4qpx-v7mh", "description": "rabbitmq/rabbitmq-server repository advisory GHSA-w6mq-4qpx-v7mh", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 76, "clock_known": true, "hours_public": 1824, "clock_origin": "advisory", "advisory_date": "2026-07-23", "advisory_days_public": 76, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-w6mq-4qpx-v7mh" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-19496", "state": "RESERVED", "public_date": "2026-07-23", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2026-07-23", "csaf": "2026-07-23" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-19496\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-19496.json;redhat:CVE-2026-19496", "description": "sources-api-go: SQL injection via sort_by value and raw query-param keys in list filtering", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 76, "clock_known": true, "hours_public": 1824, "clock_origin": "advisory", "advisory_date": "2026-07-23", "advisory_days_public": 76, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2026-19496", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-19496.json", "redhat": "https://access.redhat.com/security/cve/CVE-2026-19496" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-54161", "state": "RESERVED", "public_date": "2026-07-24", "sources": "csaf,debian", "feed_count": 2, "dates": { "csaf": "2026-07-24" }, "refs": "csaf:SUSE Product Security Team\topenSUSE-SU-2026:11367-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11367-1.json;debian:nut", "description": "CVE-2026-54161", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 75, "clock_known": true, "hours_public": 1800, "clock_origin": "advisory", "advisory_date": "2026-07-24", "advisory_days_public": 75, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "nut", "ecosystem": "", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11367-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-54161" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-102892", "state": "RESERVED", "public_date": "2026-07-24", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-24" }, "refs": "ghsa-repos:OpenCTI-Platform/opencti\tGHSA-wv3q-cfcg-crqq", "description": "OpenCTI-Platform/opencti repository advisory GHSA-wv3q-cfcg-crqq", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 75, "clock_known": true, "hours_public": 1800, "clock_origin": "advisory", "advisory_date": "2026-07-24", "advisory_days_public": 75, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/OpenCTI-Platform/opencti/security/advisories/GHSA-wv3q-cfcg-crqq" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-102899", "state": "RESERVED", "public_date": "2026-07-24", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-24" }, "refs": "ghsa-repos:getsentry/sentry\tGHSA-w699-8wff-fqxw", "description": "getsentry/sentry repository advisory GHSA-w699-8wff-fqxw", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 75, "clock_known": true, "hours_public": 1800, "clock_origin": "advisory", "advisory_date": "2026-07-24", "advisory_days_public": 75, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/getsentry/sentry/security/advisories/GHSA-w699-8wff-fqxw" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-48730", "state": "RESERVED", "public_date": "2026-07-24", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-24" }, "refs": "ghsa-repos:glpi-project/glpi-inventory-plugin\tGHSA-97vv-hxvv-9rw8", "description": "glpi-project/glpi-inventory-plugin repository advisory GHSA-97vv-hxvv-9rw8", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 75, "clock_known": true, "hours_public": 1800, "clock_origin": "advisory", "advisory_date": "2026-07-24", "advisory_days_public": 75, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/glpi-project/glpi-inventory-plugin/security/advisories/GHSA-97vv-hxvv-9rw8" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-102927", "state": "RESERVED", "public_date": "2026-07-24", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-24" }, "refs": "ghsa-repos:hedgedoc/hedgedoc\tGHSA-93w7-49m2-cqwg", "description": "hedgedoc/hedgedoc repository advisory GHSA-93w7-49m2-cqwg", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 75, "clock_known": true, "hours_public": 1800, "clock_origin": "advisory", "advisory_date": "2026-07-24", "advisory_days_public": 75, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-93w7-49m2-cqwg" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-102530", "state": "RESERVED", "public_date": "2026-07-24", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-24" }, "refs": "ghsa-repos:jupyterlab/jupyterlab-desktop\tGHSA-vrj4-r4fw-9rfh", "description": "jupyterlab/jupyterlab-desktop repository advisory GHSA-vrj4-r4fw-9rfh", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 75, "clock_known": true, "hours_public": 1800, "clock_origin": "advisory", "advisory_date": "2026-07-24", "advisory_days_public": 75, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/jupyterlab/jupyterlab-desktop/security/advisories/GHSA-vrj4-r4fw-9rfh" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-86044", "state": "RESERVED", "public_date": "2026-07-24", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-24" }, "refs": "ghsa-repos:jupyterlab/jupyterlab-desktop\tGHSA-2mr8-962v-wc67", "description": "jupyterlab/jupyterlab-desktop repository advisory GHSA-2mr8-962v-wc67", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 75, "clock_known": true, "hours_public": 1800, "clock_origin": "advisory", "advisory_date": "2026-07-24", "advisory_days_public": 75, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/jupyterlab/jupyterlab-desktop/security/advisories/GHSA-2mr8-962v-wc67" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-54991", "state": "RESERVED", "public_date": "2026-07-24", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-24" }, "refs": "ghsa-repos:jupyterlab/jupyterlab-desktop\tGHSA-8cvf-4977-r95v", "description": "jupyterlab/jupyterlab-desktop repository advisory GHSA-8cvf-4977-r95v", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 75, "clock_known": true, "hours_public": 1800, "clock_origin": "advisory", "advisory_date": "2026-07-24", "advisory_days_public": 75, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/jupyterlab/jupyterlab-desktop/security/advisories/GHSA-8cvf-4977-r95v" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-55002", "state": "RESERVED", "public_date": "2026-07-24", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-24" }, "refs": "ghsa-repos:jupyterlab/jupyterlab-desktop\tGHSA-5c3f-5gj7-p9xh", "description": "jupyterlab/jupyterlab-desktop repository advisory GHSA-5c3f-5gj7-p9xh", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 75, "clock_known": true, "hours_public": 1800, "clock_origin": "advisory", "advisory_date": "2026-07-24", "advisory_days_public": 75, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/jupyterlab/jupyterlab-desktop/security/advisories/GHSA-5c3f-5gj7-p9xh" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-50531", "state": "RESERVED", "public_date": "2026-07-24", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-24" }, "refs": "ghsa-repos:pluginsGLPI/escalade\tGHSA-wmvj-p56r-vqfv", "description": "pluginsGLPI/escalade repository advisory GHSA-wmvj-p56r-vqfv", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 75, "clock_known": true, "hours_public": 1800, "clock_origin": "advisory", "advisory_date": "2026-07-24", "advisory_days_public": 75, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/pluginsGLPI/escalade/security/advisories/GHSA-wmvj-p56r-vqfv" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-50537", "state": "RESERVED", "public_date": "2026-07-24", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-24" }, "refs": "ghsa-repos:pluginsGLPI/fields\tGHSA-p3pf-5cr4-wrmr", "description": "pluginsGLPI/fields repository advisory GHSA-p3pf-5cr4-wrmr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 75, "clock_known": true, "hours_public": 1800, "clock_origin": "advisory", "advisory_date": "2026-07-24", "advisory_days_public": 75, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/pluginsGLPI/fields/security/advisories/GHSA-p3pf-5cr4-wrmr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-46422", "state": "RESERVED", "public_date": "2026-07-24", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-24" }, "refs": "ghsa-repos:pluginsGLPI/formcreator\tGHSA-vcvr-2r7j-p76h", "description": "pluginsGLPI/formcreator repository advisory GHSA-vcvr-2r7j-p76h", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 75, "clock_known": true, "hours_public": 1800, "clock_origin": "advisory", "advisory_date": "2026-07-24", "advisory_days_public": 75, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/pluginsGLPI/formcreator/security/advisories/GHSA-vcvr-2r7j-p76h" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-52728", "state": "RESERVED", "public_date": "2026-07-24", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-24" }, "refs": "ghsa-repos:pluginsGLPI/genericobject\tGHSA-6r3j-74pf-v7q5", "description": "pluginsGLPI/genericobject repository advisory GHSA-6r3j-74pf-v7q5", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 75, "clock_known": true, "hours_public": 1800, "clock_origin": "advisory", "advisory_date": "2026-07-24", "advisory_days_public": 75, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/pluginsGLPI/genericobject/security/advisories/GHSA-6r3j-74pf-v7q5" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-50534", "state": "RESERVED", "public_date": "2026-07-24", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-24" }, "refs": "ghsa-repos:pluginsGLPI/order\tGHSA-8xvx-g5rv-7mhj", "description": "pluginsGLPI/order repository advisory GHSA-8xvx-g5rv-7mhj", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 75, "clock_known": true, "hours_public": 1800, "clock_origin": "advisory", "advisory_date": "2026-07-24", "advisory_days_public": 75, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/pluginsGLPI/order/security/advisories/GHSA-8xvx-g5rv-7mhj" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-50535", "state": "RESERVED", "public_date": "2026-07-24", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-24" }, "refs": "ghsa-repos:pluginsGLPI/order\tGHSA-3w5w-pp6p-wwjh", "description": "pluginsGLPI/order repository advisory GHSA-3w5w-pp6p-wwjh", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 75, "clock_known": true, "hours_public": 1800, "clock_origin": "advisory", "advisory_date": "2026-07-24", "advisory_days_public": 75, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/pluginsGLPI/order/security/advisories/GHSA-3w5w-pp6p-wwjh" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-50536", "state": "RESERVED", "public_date": "2026-07-24", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-24" }, "refs": "ghsa-repos:pluginsGLPI/order\tGHSA-5wfj-g8vf-8xhq", "description": "pluginsGLPI/order repository advisory GHSA-5wfj-g8vf-8xhq", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 75, "clock_known": true, "hours_public": 1800, "clock_origin": "advisory", "advisory_date": "2026-07-24", "advisory_days_public": 75, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/pluginsGLPI/order/security/advisories/GHSA-5wfj-g8vf-8xhq" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63120", "state": "RESERVED", "public_date": "2026-07-25", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-25" }, "refs": "ghsa-repos:Aiven-Open/pghoard\tGHSA-rh99-q79h-vvx3", "description": "Aiven-Open/pghoard repository advisory GHSA-rh99-q79h-vvx3", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 74, "clock_known": true, "hours_public": 1776, "clock_origin": "advisory", "advisory_date": "2026-07-25", "advisory_days_public": 74, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Aiven-Open/pghoard/security/advisories/GHSA-rh99-q79h-vvx3" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-103031", "state": "RESERVED", "public_date": "2026-07-25", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-25" }, "refs": "ghsa-repos:WeblateOrg/wlc\tGHSA-4cv2-373j-7jw8", "description": "WeblateOrg/wlc repository advisory GHSA-4cv2-373j-7jw8", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 74, "clock_known": true, "hours_public": 1776, "clock_origin": "advisory", "advisory_date": "2026-07-25", "advisory_days_public": 74, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/WeblateOrg/wlc/security/advisories/GHSA-4cv2-373j-7jw8" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-9672", "state": "RESERVED", "public_date": "2026-07-26", "sources": "alas,alpine,csaf,debian,redhat", "feed_count": 5, "dates": { "alas": "2026-07-31", "redhat": "2026-07-26", "csaf": "2026-10-05" }, "refs": "alas:CVE-2026-9672;alpine:php83;csaf:SUSE Product Security Team\tRHSA-2026:75680\thttps://ftp.suse.com/pub/projects/security/csaf/rhsa-2026_75680.json;debian:libgd2;redhat:CVE-2026-9672", "description": "php83", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 73, "clock_known": true, "hours_public": 1752, "clock_origin": "advisory", "advisory_date": "2026-07-26", "advisory_days_public": 73, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "php83", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-9672.html", "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-9672", "csaf": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2026_75680.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-9672", "redhat": "https://access.redhat.com/security/cve/CVE-2026-9672" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-30971", "state": "RESERVED", "public_date": "2026-07-26", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-26" }, "refs": "ghsa-repos:ZoneMinder/zoneminder\tGHSA-g66m-77fq-79v9", "description": "ZoneMinder/zoneminder repository advisory GHSA-g66m-77fq-79v9", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 73, "clock_known": true, "hours_public": 1752, "clock_origin": "advisory", "advisory_date": "2026-07-26", "advisory_days_public": 73, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-g66m-77fq-79v9" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-43361", "state": "RESERVED", "public_date": "2026-07-26", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-26" }, "refs": "ghsa-repos:ZoneMinder/zoneminder\tGHSA-wgqf-6fjf-7gxw", "description": "ZoneMinder/zoneminder repository advisory GHSA-wgqf-6fjf-7gxw", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 73, "clock_known": true, "hours_public": 1752, "clock_origin": "advisory", "advisory_date": "2026-07-26", "advisory_days_public": 73, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-wgqf-6fjf-7gxw" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-28273", "state": "RESERVED", "public_date": "2026-07-26", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-26" }, "refs": "ghsa-repos:ZoneMinder/zoneminder\tGHSA-mvj8-mqqq-2w5f", "description": "ZoneMinder/zoneminder repository advisory GHSA-mvj8-mqqq-2w5f", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 73, "clock_known": true, "hours_public": 1752, "clock_origin": "advisory", "advisory_date": "2026-07-26", "advisory_days_public": 73, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-mvj8-mqqq-2w5f" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104198", "state": "RESERVED", "public_date": "2026-07-26", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-26" }, "refs": "ghsa-repos:ZoneMinder/zoneminder\tGHSA-23fj-frfw-hmcr", "description": "ZoneMinder/zoneminder repository advisory GHSA-23fj-frfw-hmcr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 73, "clock_known": true, "hours_public": 1752, "clock_origin": "advisory", "advisory_date": "2026-07-26", "advisory_days_public": 73, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-23fj-frfw-hmcr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-67534", "state": "RESERVED", "public_date": "2026-07-26", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-26" }, "refs": "ghsa-repos:agentfront/frontmcp\tGHSA-h8wf-g76c-wjwg", "description": "agentfront/frontmcp repository advisory GHSA-h8wf-g76c-wjwg", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 73, "clock_known": true, "hours_public": 1752, "clock_origin": "advisory", "advisory_date": "2026-07-26", "advisory_days_public": 73, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/agentfront/frontmcp/security/advisories/GHSA-h8wf-g76c-wjwg" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-103929", "state": "RESERVED", "public_date": "2026-07-26", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-26" }, "refs": "ghsa-repos:jdx/mise\tGHSA-g74g-rg72-j2p3", "description": "jdx/mise repository advisory GHSA-g74g-rg72-j2p3", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 73, "clock_known": true, "hours_public": 1752, "clock_origin": "advisory", "advisory_date": "2026-07-26", "advisory_days_public": 73, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/jdx/mise/security/advisories/GHSA-g74g-rg72-j2p3" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-49387", "state": "RESERVED", "public_date": "2026-07-27", "sources": "alpine,debian,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-07-27" }, "refs": "alpine:netatalk;debian:netatalk;ghsa-repos:Netatalk/netatalk\tGHSA-32jr-2xqg-gv48", "description": "Netatalk/netatalk repository advisory GHSA-32jr-2xqg-gv48", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 72, "clock_known": true, "hours_public": 1728, "clock_origin": "advisory", "advisory_date": "2026-07-27", "advisory_days_public": 72, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "netatalk", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-49387", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-49387", "ghsa-repos": "https://github.com/Netatalk/netatalk/security/advisories/GHSA-32jr-2xqg-gv48" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-49388", "state": "RESERVED", "public_date": "2026-07-27", "sources": "alpine,debian,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-07-27" }, "refs": "alpine:netatalk;debian:netatalk;ghsa-repos:Netatalk/netatalk\tGHSA-5fvw-g64v-r556", "description": "Netatalk/netatalk repository advisory GHSA-5fvw-g64v-r556", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 72, "clock_known": true, "hours_public": 1728, "clock_origin": "advisory", "advisory_date": "2026-07-27", "advisory_days_public": 72, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "netatalk", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-49388", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-49388", "ghsa-repos": "https://github.com/Netatalk/netatalk/security/advisories/GHSA-5fvw-g64v-r556" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-49389", "state": "RESERVED", "public_date": "2026-07-27", "sources": "alpine,debian,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-07-27" }, "refs": "alpine:netatalk;debian:netatalk;ghsa-repos:Netatalk/netatalk\tGHSA-xxv4-7f4m-g2g9", "description": "Netatalk/netatalk repository advisory GHSA-xxv4-7f4m-g2g9", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 72, "clock_known": true, "hours_public": 1728, "clock_origin": "advisory", "advisory_date": "2026-07-27", "advisory_days_public": 72, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "netatalk", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-49389", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-49389", "ghsa-repos": "https://github.com/Netatalk/netatalk/security/advisories/GHSA-xxv4-7f4m-g2g9" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2023-37465", "state": "RESERVED", "public_date": "2026-07-27", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-07-27", "osv": "2026-07-27" }, "refs": "ghsa:GHSA-4j38-rw27-97gx;osv:Maven:org.xwiki.contrib:discussions-server", "description": "org.xwiki.contrib:discussions-server has Cross-Site Request Forgery (CSRF) issue that makes it possible to delete messages", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 72, "clock_known": true, "hours_public": 1728, "clock_origin": "advisory", "advisory_date": "2026-07-27", "advisory_days_public": 72, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "org.xwiki.contrib", "ecosystem": "Maven", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-4j38-rw27-97gx", "osv": "https://osv.dev/list?q=CVE-2023-37465" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104102", "state": "RESERVED", "public_date": "2026-07-27", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-27" }, "refs": "ghsa-repos:9001/copyparty\tGHSA-phv8-wgjp-g4p9", "description": "9001/copyparty repository advisory GHSA-phv8-wgjp-g4p9", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 72, "clock_known": true, "hours_public": 1728, "clock_origin": "advisory", "advisory_date": "2026-07-27", "advisory_days_public": 72, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/9001/copyparty/security/advisories/GHSA-phv8-wgjp-g4p9" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-65837", "state": "RESERVED", "public_date": "2026-07-27", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-27" }, "refs": "ghsa-repos:CESNET/netopeer2\tGHSA-rf23-r5v9-x2ch", "description": "CESNET/netopeer2 repository advisory GHSA-rf23-r5v9-x2ch", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 72, "clock_known": true, "hours_public": 1728, "clock_origin": "advisory", "advisory_date": "2026-07-27", "advisory_days_public": 72, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/CESNET/netopeer2/security/advisories/GHSA-rf23-r5v9-x2ch" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-79765", "state": "RESERVED", "public_date": "2026-07-27", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-27" }, "refs": "ghsa-repos:Termix-SSH/Termix\tGHSA-vx7c-4gxw-vr2h", "description": "Termix-SSH/Termix repository advisory GHSA-vx7c-4gxw-vr2h", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 72, "clock_known": true, "hours_public": 1728, "clock_origin": "advisory", "advisory_date": "2026-07-27", "advisory_days_public": 72, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Termix-SSH/Termix/security/advisories/GHSA-vx7c-4gxw-vr2h" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104250", "state": "RESERVED", "public_date": "2026-07-27", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-27" }, "refs": "ghsa-repos:Unstructured-IO/unstructured\tGHSA-v5mq-3xhg-98m9", "description": "Unstructured-IO/unstructured repository advisory GHSA-v5mq-3xhg-98m9", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 72, "clock_known": true, "hours_public": 1728, "clock_origin": "advisory", "advisory_date": "2026-07-27", "advisory_days_public": 72, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Unstructured-IO/unstructured/security/advisories/GHSA-v5mq-3xhg-98m9" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-65960", "state": "RESERVED", "public_date": "2026-07-27", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-27" }, "refs": "ghsa-repos:cilium/tetragon\tGHSA-6qqg-3qf7-p3v5", "description": "cilium/tetragon repository advisory GHSA-6qqg-3qf7-p3v5", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 72, "clock_known": true, "hours_public": 1728, "clock_origin": "advisory", "advisory_date": "2026-07-27", "advisory_days_public": 72, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/cilium/tetragon/security/advisories/GHSA-6qqg-3qf7-p3v5" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77427", "state": "RESERVED", "public_date": "2026-07-27", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-27" }, "refs": "ghsa-repos:error311/FileRise\tGHSA-g6p5-9cpq-mp5h", "description": "error311/FileRise repository advisory GHSA-g6p5-9cpq-mp5h", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 72, "clock_known": true, "hours_public": 1728, "clock_origin": "advisory", "advisory_date": "2026-07-27", "advisory_days_public": 72, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/error311/FileRise/security/advisories/GHSA-g6p5-9cpq-mp5h" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-69194", "state": "RESERVED", "public_date": "2026-07-27", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-27" }, "refs": "ghsa-repos:error311/FileRise\tGHSA-rmwm-wq9g-583g", "description": "error311/FileRise repository advisory GHSA-rmwm-wq9g-583g", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 72, "clock_known": true, "hours_public": 1728, "clock_origin": "advisory", "advisory_date": "2026-07-27", "advisory_days_public": 72, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/error311/FileRise/security/advisories/GHSA-rmwm-wq9g-583g" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-69193", "state": "RESERVED", "public_date": "2026-07-27", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-27" }, "refs": "ghsa-repos:error311/FileRise\tGHSA-5m63-83jf-gwx8", "description": "error311/FileRise repository advisory GHSA-5m63-83jf-gwx8", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 72, "clock_known": true, "hours_public": 1728, "clock_origin": "advisory", "advisory_date": "2026-07-27", "advisory_days_public": 72, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/error311/FileRise/security/advisories/GHSA-5m63-83jf-gwx8" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-69191", "state": "RESERVED", "public_date": "2026-07-27", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-27" }, "refs": "ghsa-repos:error311/FileRise\tGHSA-p9qc-2r93-jccq", "description": "error311/FileRise repository advisory GHSA-p9qc-2r93-jccq", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 72, "clock_known": true, "hours_public": 1728, "clock_origin": "advisory", "advisory_date": "2026-07-27", "advisory_days_public": 72, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/error311/FileRise/security/advisories/GHSA-p9qc-2r93-jccq" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104788", "state": "RESERVED", "public_date": "2026-07-27", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-27" }, "refs": "ghsa-repos:frappe/lms\tGHSA-wxrc-h8qf-x3fx", "description": "frappe/lms repository advisory GHSA-wxrc-h8qf-x3fx", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 72, "clock_known": true, "hours_public": 1728, "clock_origin": "advisory", "advisory_date": "2026-07-27", "advisory_days_public": 72, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/frappe/lms/security/advisories/GHSA-wxrc-h8qf-x3fx" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57152", "state": "RESERVED", "public_date": "2026-07-27", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-27" }, "refs": "ghsa-repos:glpi-project/glpi\tGHSA-7v5q-w6f3-2v8p", "description": "glpi-project/glpi repository advisory GHSA-7v5q-w6f3-2v8p", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 72, "clock_known": true, "hours_public": 1728, "clock_origin": "advisory", "advisory_date": "2026-07-27", "advisory_days_public": 72, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/glpi-project/glpi/security/advisories/GHSA-7v5q-w6f3-2v8p" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-52848", "state": "RESERVED", "public_date": "2026-07-27", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-27" }, "refs": "ghsa-repos:glpi-project/glpi\tGHSA-hgr8-qvp5-mhch", "description": "glpi-project/glpi repository advisory GHSA-hgr8-qvp5-mhch", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 72, "clock_known": true, "hours_public": 1728, "clock_origin": "advisory", "advisory_date": "2026-07-27", "advisory_days_public": 72, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/glpi-project/glpi/security/advisories/GHSA-hgr8-qvp5-mhch" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-47678", "state": "RESERVED", "public_date": "2026-07-27", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-27" }, "refs": "ghsa-repos:glpi-project/glpi\tGHSA-v774-5g3p-vxg2", "description": "glpi-project/glpi repository advisory GHSA-v774-5g3p-vxg2", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 72, "clock_known": true, "hours_public": 1728, "clock_origin": "advisory", "advisory_date": "2026-07-27", "advisory_days_public": 72, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/glpi-project/glpi/security/advisories/GHSA-v774-5g3p-vxg2" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-58199", "state": "RESERVED", "public_date": "2026-07-27", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-27" }, "refs": "ghsa-repos:glpi-project/glpi-agent\tGHSA-g2hf-g56v-chfv", "description": "glpi-project/glpi-agent repository advisory GHSA-g2hf-g56v-chfv", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 72, "clock_known": true, "hours_public": 1728, "clock_origin": "advisory", "advisory_date": "2026-07-27", "advisory_days_public": 72, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/glpi-project/glpi-agent/security/advisories/GHSA-g2hf-g56v-chfv" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-52768", "state": "RESERVED", "public_date": "2026-07-27", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-27" }, "refs": "ghsa-repos:glpi-project/glpi-agent\tGHSA-g2f7-8mp5-qw65", "description": "glpi-project/glpi-agent repository advisory GHSA-g2f7-8mp5-qw65", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 72, "clock_known": true, "hours_public": 1728, "clock_origin": "advisory", "advisory_date": "2026-07-27", "advisory_days_public": 72, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/glpi-project/glpi-agent/security/advisories/GHSA-g2f7-8mp5-qw65" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-49285", "state": "RESERVED", "public_date": "2026-07-27", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-27" }, "refs": "ghsa-repos:glpi-project/glpi-agent\tGHSA-3974-4pff-75wp", "description": "glpi-project/glpi-agent repository advisory GHSA-3974-4pff-75wp", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 72, "clock_known": true, "hours_public": 1728, "clock_origin": "advisory", "advisory_date": "2026-07-27", "advisory_days_public": 72, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/glpi-project/glpi-agent/security/advisories/GHSA-3974-4pff-75wp" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-52764", "state": "RESERVED", "public_date": "2026-07-27", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-27" }, "refs": "ghsa-repos:glpi-project/glpi-agent\tGHSA-r9rr-vpw9-p66x", "description": "glpi-project/glpi-agent repository advisory GHSA-r9rr-vpw9-p66x", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 72, "clock_known": true, "hours_public": 1728, "clock_origin": "advisory", "advisory_date": "2026-07-27", "advisory_days_public": 72, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/glpi-project/glpi-agent/security/advisories/GHSA-r9rr-vpw9-p66x" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-52765", "state": "RESERVED", "public_date": "2026-07-27", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-27" }, "refs": "ghsa-repos:glpi-project/glpi-agent\tGHSA-4px8-6x8g-722x", "description": "glpi-project/glpi-agent repository advisory GHSA-4px8-6x8g-722x", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 72, "clock_known": true, "hours_public": 1728, "clock_origin": "advisory", "advisory_date": "2026-07-27", "advisory_days_public": 72, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/glpi-project/glpi-agent/security/advisories/GHSA-4px8-6x8g-722x" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-46615", "state": "RESERVED", "public_date": "2026-07-27", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-27" }, "refs": "ghsa-repos:glpi-project/glpi-agent\tGHSA-fcgf-g6c2-g838", "description": "glpi-project/glpi-agent repository advisory GHSA-fcgf-g6c2-g838", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 72, "clock_known": true, "hours_public": 1728, "clock_origin": "advisory", "advisory_date": "2026-07-27", "advisory_days_public": 72, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/glpi-project/glpi-agent/security/advisories/GHSA-fcgf-g6c2-g838" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-45621", "state": "RESERVED", "public_date": "2026-07-27", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-27" }, "refs": "ghsa-repos:glpi-project/glpi-agent\tGHSA-xqcp-72qc-36p2", "description": "glpi-project/glpi-agent repository advisory GHSA-xqcp-72qc-36p2", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 72, "clock_known": true, "hours_public": 1728, "clock_origin": "advisory", "advisory_date": "2026-07-27", "advisory_days_public": 72, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/glpi-project/glpi-agent/security/advisories/GHSA-xqcp-72qc-36p2" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-42187", "state": "RESERVED", "public_date": "2026-07-27", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-27" }, "refs": "ghsa-repos:glpi-project/glpi-agent\tGHSA-2w23-rj57-xq9c", "description": "glpi-project/glpi-agent repository advisory GHSA-2w23-rj57-xq9c", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 72, "clock_known": true, "hours_public": 1728, "clock_origin": "advisory", "advisory_date": "2026-07-27", "advisory_days_public": 72, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/glpi-project/glpi-agent/security/advisories/GHSA-2w23-rj57-xq9c" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-40936", "state": "RESERVED", "public_date": "2026-07-27", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-27" }, "refs": "ghsa-repos:glpi-project/glpi-agent\tGHSA-5379-v7xc-36m8", "description": "glpi-project/glpi-agent repository advisory GHSA-5379-v7xc-36m8", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 72, "clock_known": true, "hours_public": 1728, "clock_origin": "advisory", "advisory_date": "2026-07-27", "advisory_days_public": 72, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/glpi-project/glpi-agent/security/advisories/GHSA-5379-v7xc-36m8" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-18025", "state": "RESERVED", "public_date": "2026-07-27", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-07-27" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2531\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2531.json", "description": "CVE-2026-18025", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 72, "clock_known": true, "hours_public": 1728, "clock_origin": "advisory", "advisory_date": "2026-07-27", "advisory_days_public": 72, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2531.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-58221", "state": "RESERVED", "public_date": "2026-07-28", "sources": "alas,alpine,csaf,debian,redhat", "feed_count": 5, "dates": { "alas": "2026-07-31", "redhat": "2026-07-28", "csaf": "2026-07-28" }, "refs": "alas:CVE-2026-58221;alpine:samba;csaf:SUSE Product Security Team\tSUSE-SU-2026:3362-1\thttps://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_3362-1.json;debian:samba;redhat:CVE-2026-58221", "description": "Samba AD authenticated LDAP access domain takeover", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 71, "clock_known": true, "hours_public": 1704, "clock_origin": "advisory", "advisory_date": "2026-07-28", "advisory_days_public": 71, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "samba", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-58221.html", "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-58221", "csaf": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_3362-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-58221", "redhat": "https://access.redhat.com/security/cve/CVE-2026-58221" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-6949", "state": "RESERVED", "public_date": "2026-07-28", "sources": "alas,alpine,csaf,debian,redhat", "feed_count": 5, "dates": { "alas": "2026-07-31", "redhat": "2026-07-28", "csaf": "2026-07-28" }, "refs": "alas:CVE-2026-6949;alpine:samba;csaf:SUSE Product Security Team\tCVE-2026-6949\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-6949.json;debian:samba;redhat:CVE-2026-6949", "description": "TSIG packet with name compression can crash DNS", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 71, "clock_known": true, "hours_public": 1704, "clock_origin": "advisory", "advisory_date": "2026-07-28", "advisory_days_public": 71, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "samba", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-6949.html", "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-6949", "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-6949.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-6949", "redhat": "https://access.redhat.com/security/cve/CVE-2026-6949" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-16633", "state": "RESERVED", "public_date": "2026-07-28", "sources": "ghsa,ghsa-repos,osv", "feed_count": 3, "dates": { "ghsa": "2026-08-06", "ghsa-repos": "2026-07-28", "osv": "2026-08-06" }, "refs": "ghsa-repos:mozilla/pdf.js\tGHSA-hq66-cqwq-w95j;ghsa:GHSA-hq66-cqwq-w95j;osv:npm:pdfjs-dist", "description": "PDF.js: Arbitrary JavaScript execution upon opening a malicious PDF", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 71, "clock_known": true, "hours_public": 1704, "clock_origin": "advisory", "advisory_date": "2026-07-28", "advisory_days_public": 71, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "pdfjs-dist", "ecosystem": "npm", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-hq66-cqwq-w95j", "ghsa-repos": "https://github.com/mozilla/pdf.js/security/advisories/GHSA-hq66-cqwq-w95j", "osv": "https://osv.dev/list?q=CVE-2026-16633" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62962", "state": "RESERVED", "public_date": "2026-07-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-28" }, "refs": "ghsa-repos:FOSSBilling/FOSSBilling\tGHSA-7xgv-rh36-hrr5", "description": "FOSSBilling/FOSSBilling repository advisory GHSA-7xgv-rh36-hrr5", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 71, "clock_known": true, "hours_public": 1704, "clock_origin": "advisory", "advisory_date": "2026-07-28", "advisory_days_public": 71, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/FOSSBilling/FOSSBilling/security/advisories/GHSA-7xgv-rh36-hrr5" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-68544", "state": "RESERVED", "public_date": "2026-07-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-28" }, "refs": "ghsa-repos:FOSSBilling/FOSSBilling\tGHSA-rrp7-fvc6-xxrw", "description": "FOSSBilling/FOSSBilling repository advisory GHSA-rrp7-fvc6-xxrw", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 71, "clock_known": true, "hours_public": 1704, "clock_origin": "advisory", "advisory_date": "2026-07-28", "advisory_days_public": 71, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/FOSSBilling/FOSSBilling/security/advisories/GHSA-rrp7-fvc6-xxrw" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-68545", "state": "RESERVED", "public_date": "2026-07-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-28" }, "refs": "ghsa-repos:FOSSBilling/FOSSBilling\tGHSA-pfm5-728g-h32p", "description": "FOSSBilling/FOSSBilling repository advisory GHSA-pfm5-728g-h32p", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 71, "clock_known": true, "hours_public": 1704, "clock_origin": "advisory", "advisory_date": "2026-07-28", "advisory_days_public": 71, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/FOSSBilling/FOSSBilling/security/advisories/GHSA-pfm5-728g-h32p" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104840", "state": "RESERVED", "public_date": "2026-07-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-28" }, "refs": "ghsa-repos:OpenCTI-Platform/opencti\tGHSA-74jw-q47r-q5pv", "description": "OpenCTI-Platform/opencti repository advisory GHSA-74jw-q47r-q5pv", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 71, "clock_known": true, "hours_public": 1704, "clock_origin": "advisory", "advisory_date": "2026-07-28", "advisory_days_public": 71, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/OpenCTI-Platform/opencti/security/advisories/GHSA-74jw-q47r-q5pv" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104862", "state": "RESERVED", "public_date": "2026-07-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-28" }, "refs": "ghsa-repos:ZOO-Project/ZOO-Project\tGHSA-66h7-w4fv-gxcc", "description": "ZOO-Project/ZOO-Project repository advisory GHSA-66h7-w4fv-gxcc", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 71, "clock_known": true, "hours_public": 1704, "clock_origin": "advisory", "advisory_date": "2026-07-28", "advisory_days_public": 71, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ZOO-Project/ZOO-Project/security/advisories/GHSA-66h7-w4fv-gxcc" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104860", "state": "RESERVED", "public_date": "2026-07-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-28" }, "refs": "ghsa-repos:ZOO-Project/ZOO-Project\tGHSA-856c-pf5c-52hv", "description": "ZOO-Project/ZOO-Project repository advisory GHSA-856c-pf5c-52hv", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 71, "clock_known": true, "hours_public": 1704, "clock_origin": "advisory", "advisory_date": "2026-07-28", "advisory_days_public": 71, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ZOO-Project/ZOO-Project/security/advisories/GHSA-856c-pf5c-52hv" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104863", "state": "RESERVED", "public_date": "2026-07-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-28" }, "refs": "ghsa-repos:ZOO-Project/ZOO-Project\tGHSA-f729-f7jg-8vg5", "description": "ZOO-Project/ZOO-Project repository advisory GHSA-f729-f7jg-8vg5", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 71, "clock_known": true, "hours_public": 1704, "clock_origin": "advisory", "advisory_date": "2026-07-28", "advisory_days_public": 71, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ZOO-Project/ZOO-Project/security/advisories/GHSA-f729-f7jg-8vg5" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104875", "state": "RESERVED", "public_date": "2026-07-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-28" }, "refs": "ghsa-repos:ente/ente\tGHSA-2hxj-953x-c2vw", "description": "ente/ente repository advisory GHSA-2hxj-953x-c2vw", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 71, "clock_known": true, "hours_public": 1704, "clock_origin": "advisory", "advisory_date": "2026-07-28", "advisory_days_public": 71, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ente/ente/security/advisories/GHSA-2hxj-953x-c2vw" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63130", "state": "RESERVED", "public_date": "2026-07-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-28" }, "refs": "ghsa-repos:espocrm/espocrm\tGHSA-jr5q-25fw-27f8", "description": "espocrm/espocrm repository advisory GHSA-jr5q-25fw-27f8", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 71, "clock_known": true, "hours_public": 1704, "clock_origin": "advisory", "advisory_date": "2026-07-28", "advisory_days_public": 71, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/espocrm/espocrm/security/advisories/GHSA-jr5q-25fw-27f8" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104857", "state": "RESERVED", "public_date": "2026-07-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-28" }, "refs": "ghsa-repos:gphoto/libgphoto2\tGHSA-838w-xjv9-4w2c", "description": "gphoto/libgphoto2 repository advisory GHSA-838w-xjv9-4w2c", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 71, "clock_known": true, "hours_public": 1704, "clock_origin": "advisory", "advisory_date": "2026-07-28", "advisory_days_public": 71, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/gphoto/libgphoto2/security/advisories/GHSA-838w-xjv9-4w2c" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104856", "state": "RESERVED", "public_date": "2026-07-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-28" }, "refs": "ghsa-repos:gphoto/libgphoto2\tGHSA-pmj5-78hf-8w8r", "description": "gphoto/libgphoto2 repository advisory GHSA-pmj5-78hf-8w8r", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 71, "clock_known": true, "hours_public": 1704, "clock_origin": "advisory", "advisory_date": "2026-07-28", "advisory_days_public": 71, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/gphoto/libgphoto2/security/advisories/GHSA-pmj5-78hf-8w8r" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104821", "state": "RESERVED", "public_date": "2026-07-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-28" }, "refs": "ghsa-repos:pwncollege/dojo\tGHSA-rh74-rrpm-fp8g", "description": "pwncollege/dojo repository advisory GHSA-rh74-rrpm-fp8g", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 71, "clock_known": true, "hours_public": 1704, "clock_origin": "advisory", "advisory_date": "2026-07-28", "advisory_days_public": 71, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/pwncollege/dojo/security/advisories/GHSA-rh74-rrpm-fp8g" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104837", "state": "RESERVED", "public_date": "2026-07-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-28" }, "refs": "ghsa-repos:pwncollege/dojo\tGHSA-965v-m9f8-4x82", "description": "pwncollege/dojo repository advisory GHSA-965v-m9f8-4x82", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 71, "clock_known": true, "hours_public": 1704, "clock_origin": "advisory", "advisory_date": "2026-07-28", "advisory_days_public": 71, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/pwncollege/dojo/security/advisories/GHSA-965v-m9f8-4x82" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104838", "state": "RESERVED", "public_date": "2026-07-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-28" }, "refs": "ghsa-repos:pwncollege/dojo\tGHSA-fp26-m3g3-xch2", "description": "pwncollege/dojo repository advisory GHSA-fp26-m3g3-xch2", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 71, "clock_known": true, "hours_public": 1704, "clock_origin": "advisory", "advisory_date": "2026-07-28", "advisory_days_public": 71, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/pwncollege/dojo/security/advisories/GHSA-fp26-m3g3-xch2" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104822", "state": "RESERVED", "public_date": "2026-07-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-28" }, "refs": "ghsa-repos:pwncollege/dojo\tGHSA-mwfp-whvv-7v5j", "description": "pwncollege/dojo repository advisory GHSA-mwfp-whvv-7v5j", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 71, "clock_known": true, "hours_public": 1704, "clock_origin": "advisory", "advisory_date": "2026-07-28", "advisory_days_public": 71, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/pwncollege/dojo/security/advisories/GHSA-mwfp-whvv-7v5j" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104823", "state": "RESERVED", "public_date": "2026-07-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-28" }, "refs": "ghsa-repos:pwncollege/dojo\tGHSA-hh5r-7mh7-8999", "description": "pwncollege/dojo repository advisory GHSA-hh5r-7mh7-8999", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 71, "clock_known": true, "hours_public": 1704, "clock_origin": "advisory", "advisory_date": "2026-07-28", "advisory_days_public": 71, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/pwncollege/dojo/security/advisories/GHSA-hh5r-7mh7-8999" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104834", "state": "RESERVED", "public_date": "2026-07-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-28" }, "refs": "ghsa-repos:pwncollege/dojo\tGHSA-vx3h-hm5f-cfqq", "description": "pwncollege/dojo repository advisory GHSA-vx3h-hm5f-cfqq", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 71, "clock_known": true, "hours_public": 1704, "clock_origin": "advisory", "advisory_date": "2026-07-28", "advisory_days_public": 71, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/pwncollege/dojo/security/advisories/GHSA-vx3h-hm5f-cfqq" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104833", "state": "RESERVED", "public_date": "2026-07-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-28" }, "refs": "ghsa-repos:pwncollege/dojo\tGHSA-qx75-jcgq-2jjg", "description": "pwncollege/dojo repository advisory GHSA-qx75-jcgq-2jjg", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 71, "clock_known": true, "hours_public": 1704, "clock_origin": "advisory", "advisory_date": "2026-07-28", "advisory_days_public": 71, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/pwncollege/dojo/security/advisories/GHSA-qx75-jcgq-2jjg" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104832", "state": "RESERVED", "public_date": "2026-07-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-28" }, "refs": "ghsa-repos:pwncollege/dojo\tGHSA-8494-jw55-5fp4", "description": "pwncollege/dojo repository advisory GHSA-8494-jw55-5fp4", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 71, "clock_known": true, "hours_public": 1704, "clock_origin": "advisory", "advisory_date": "2026-07-28", "advisory_days_public": 71, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/pwncollege/dojo/security/advisories/GHSA-8494-jw55-5fp4" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104831", "state": "RESERVED", "public_date": "2026-07-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-28" }, "refs": "ghsa-repos:pwncollege/dojo\tGHSA-9952-242x-33c2", "description": "pwncollege/dojo repository advisory GHSA-9952-242x-33c2", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 71, "clock_known": true, "hours_public": 1704, "clock_origin": "advisory", "advisory_date": "2026-07-28", "advisory_days_public": 71, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/pwncollege/dojo/security/advisories/GHSA-9952-242x-33c2" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104820", "state": "RESERVED", "public_date": "2026-07-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-28" }, "refs": "ghsa-repos:pwncollege/dojo\tGHSA-j352-4cvg-q2hq", "description": "pwncollege/dojo repository advisory GHSA-j352-4cvg-q2hq", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 71, "clock_known": true, "hours_public": 1704, "clock_origin": "advisory", "advisory_date": "2026-07-28", "advisory_days_public": 71, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/pwncollege/dojo/security/advisories/GHSA-j352-4cvg-q2hq" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104836", "state": "RESERVED", "public_date": "2026-07-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-28" }, "refs": "ghsa-repos:pwncollege/dojo\tGHSA-qhrg-v6f4-x39m", "description": "pwncollege/dojo repository advisory GHSA-qhrg-v6f4-x39m", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 71, "clock_known": true, "hours_public": 1704, "clock_origin": "advisory", "advisory_date": "2026-07-28", "advisory_days_public": 71, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/pwncollege/dojo/security/advisories/GHSA-qhrg-v6f4-x39m" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104830", "state": "RESERVED", "public_date": "2026-07-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-28" }, "refs": "ghsa-repos:pwncollege/dojo\tGHSA-jx5q-94xm-9qvw", "description": "pwncollege/dojo repository advisory GHSA-jx5q-94xm-9qvw", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 71, "clock_known": true, "hours_public": 1704, "clock_origin": "advisory", "advisory_date": "2026-07-28", "advisory_days_public": 71, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/pwncollege/dojo/security/advisories/GHSA-jx5q-94xm-9qvw" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104835", "state": "RESERVED", "public_date": "2026-07-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-28" }, "refs": "ghsa-repos:pwncollege/dojo\tGHSA-p423-qc2f-9j7g", "description": "pwncollege/dojo repository advisory GHSA-p423-qc2f-9j7g", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 71, "clock_known": true, "hours_public": 1704, "clock_origin": "advisory", "advisory_date": "2026-07-28", "advisory_days_public": 71, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/pwncollege/dojo/security/advisories/GHSA-p423-qc2f-9j7g" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104829", "state": "RESERVED", "public_date": "2026-07-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-28" }, "refs": "ghsa-repos:pwncollege/dojo\tGHSA-3mp3-cqfr-9crr", "description": "pwncollege/dojo repository advisory GHSA-3mp3-cqfr-9crr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 71, "clock_known": true, "hours_public": 1704, "clock_origin": "advisory", "advisory_date": "2026-07-28", "advisory_days_public": 71, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/pwncollege/dojo/security/advisories/GHSA-3mp3-cqfr-9crr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104870", "state": "RESERVED", "public_date": "2026-07-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-28" }, "refs": "ghsa-repos:steve-community/steve\tGHSA-xgmv-c7vq-m9wp", "description": "steve-community/steve repository advisory GHSA-xgmv-c7vq-m9wp", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 71, "clock_known": true, "hours_public": 1704, "clock_origin": "advisory", "advisory_date": "2026-07-28", "advisory_days_public": 71, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/steve-community/steve/security/advisories/GHSA-xgmv-c7vq-m9wp" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-5047", "state": "RESERVED", "public_date": "2026-07-28", "sources": "broadcom,csaf", "feed_count": 2, "dates": { "csaf": "2026-07-28", "broadcom": "2026-07-28" }, "refs": "broadcom:37933;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2562\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2562.json", "description": "CVE-2026-5047", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 71, "clock_known": true, "hours_public": 1704, "clock_origin": "advisory", "advisory_date": "2026-07-28", "advisory_days_public": 71, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "broadcom": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37933", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2562.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-5048", "state": "RESERVED", "public_date": "2026-07-28", "sources": "broadcom,csaf", "feed_count": 2, "dates": { "csaf": "2026-07-28", "broadcom": "2026-07-28" }, "refs": "broadcom:37932;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2562\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2562.json", "description": "CVE-2026-5048", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 71, "clock_known": true, "hours_public": 1704, "clock_origin": "advisory", "advisory_date": "2026-07-28", "advisory_days_public": 71, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "broadcom": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37932", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2562.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-5049", "state": "RESERVED", "public_date": "2026-07-28", "sources": "broadcom,csaf", "feed_count": 2, "dates": { "csaf": "2026-07-28", "broadcom": "2026-07-28" }, "refs": "broadcom:37931;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2562\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2562.json", "description": "CVE-2026-5049", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 71, "clock_known": true, "hours_public": 1704, "clock_origin": "advisory", "advisory_date": "2026-07-28", "advisory_days_public": 71, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "broadcom": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37931", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2562.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-58341", "state": "RESERVED", "public_date": "2026-07-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-07-28" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-58341\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58341.json", "description": "moodle: CSRF risk in group messaging state toggle", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 71, "clock_known": true, "hours_public": 1704, "clock_origin": "advisory", "advisory_date": "2026-07-28", "advisory_days_public": 71, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58341.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-58343", "state": "RESERVED", "public_date": "2026-07-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-07-28" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-58343\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58343.json", "description": "moodle: Missing capability checks in AI placement web services", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 71, "clock_known": true, "hours_public": 1704, "clock_origin": "advisory", "advisory_date": "2026-07-28", "advisory_days_public": 71, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58343.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-58345", "state": "RESERVED", "public_date": "2026-07-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-07-28" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-58345\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58345.json", "description": "moodle: Missing capability check in Assignment marker allocation", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 71, "clock_known": true, "hours_public": 1704, "clock_origin": "advisory", "advisory_date": "2026-07-28", "advisory_days_public": 71, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58345.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-58346", "state": "RESERVED", "public_date": "2026-07-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-07-28" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-58346\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58346.json", "description": "moodle: Blind SSRF risk in MNet peers function", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 71, "clock_known": true, "hours_public": 1704, "clock_origin": "advisory", "advisory_date": "2026-07-28", "advisory_days_public": 71, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58346.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-58347", "state": "RESERVED", "public_date": "2026-07-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-07-28" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-58347\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58347.json", "description": "moodle: DoS risk via user profile description", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 71, "clock_known": true, "hours_public": 1704, "clock_origin": "advisory", "advisory_date": "2026-07-28", "advisory_days_public": 71, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58347.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-58348", "state": "RESERVED", "public_date": "2026-07-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-07-28" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-58348\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58348.json", "description": "moodle: Missing capability checks in report builder fragment callbacks", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 71, "clock_known": true, "hours_public": 1704, "clock_origin": "advisory", "advisory_date": "2026-07-28", "advisory_days_public": 71, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58348.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-5769", "state": "RESERVED", "public_date": "2026-07-28", "sources": "broadcom", "feed_count": 1, "dates": { "broadcom": "2026-07-28" }, "refs": "broadcom:37934", "description": "Switch discovery credentials can be seen in plain text inside sannavswapfie", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 71, "clock_known": true, "hours_public": 1704, "clock_origin": "advisory", "advisory_date": "2026-07-28", "advisory_days_public": 71, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "broadcom": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37934" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-9238", "state": "RESERVED", "public_date": "2026-07-29", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-07-29" }, "refs": "alas:CVE-2026-9238;debian:qemu", "description": "In QEMU's 9pfs (virtio-9p) implementation, the v9fs_readdir() function does not properly constrain the memory allocation size for Treaddir responses.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 70, "clock_known": true, "hours_public": 1680, "clock_origin": "advisory", "advisory_date": "2026-07-29", "advisory_days_public": 70, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-9238.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-9238" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63319", "state": "RESERVED", "public_date": "2026-07-29", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-07-29" }, "refs": "alas:CVE-2026-63319;debian:qemu", "description": "In QEMU's USB redirection (usbredir) implementation (hw/usb/redirect.c), a malicious usbredir peer can send an ep_info message that resets max_packet_size to 0 after bulk receiving has already started.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 70, "clock_known": true, "hours_public": 1680, "clock_origin": "advisory", "advisory_date": "2026-07-29", "advisory_days_public": 70, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-63319.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-63319" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-16043", "state": "RESERVED", "public_date": "2026-07-29", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-07-29" }, "refs": "alas:CVE-2026-16043;debian:qemu", "description": "In QEMU's sysbus-xhci (USB 3.0 host controller) emulation (hw/usb/hcd-xhci.c, hw/usb/hcd-xhci-sysbus.c), an out-of-bounds heap access vulnerability exists in the xhci_sysbus_intr_ raise() function.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 70, "clock_known": true, "hours_public": 1680, "clock_origin": "advisory", "advisory_date": "2026-07-29", "advisory_days_public": 70, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-16043.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-16043" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-15578", "state": "RESERVED", "public_date": "2026-07-29", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-07-29" }, "refs": "alas:CVE-2026-15578;debian:qemu", "description": "In QEMU's VNC server implementation (ui/vnc.c), the set_pixel_format() function does not properly validate the red_max, green_max, and blue_max fields from a client's SetPixelFormat message.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 70, "clock_known": true, "hours_public": 1680, "clock_origin": "advisory", "advisory_date": "2026-07-29", "advisory_days_public": 70, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-15578.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-15578" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-8348", "state": "RESERVED", "public_date": "2026-07-29", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-07-29" }, "refs": "alas:CVE-2026-8348;debian:qemu", "description": "In QEMU's 9pfs (virtio-9p) implementation, the TXATTRCREATE and TXATTRWALK request handlers do not limit the number of simultaneously open xattr FIDs. Each xattr FID allocates a host memory buffer for the extended attribute value.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 70, "clock_known": true, "hours_public": 1680, "clock_origin": "advisory", "advisory_date": "2026-07-29", "advisory_days_public": 70, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-8348.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-8348" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-15705", "state": "RESERVED", "public_date": "2026-07-29", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-07-29" }, "refs": "alas:CVE-2026-15705;debian:qemu", "description": "In QEMU's USB redirection (usbredir) implementation, a use-after-free vulnerability exists in the usbredir_buffered_bulk_packet() function in hw/usb/redirect.c. When processing a multi-fragment buffered bulk packet that is split into max-packet-size chunks, only the final fragment owns the shared parser memory allocation (via free_on_destroy).", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 70, "clock_known": true, "hours_public": 1680, "clock_origin": "advisory", "advisory_date": "2026-07-29", "advisory_days_public": 70, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-15705.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-15705" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61475", "state": "RESERVED", "public_date": "2026-07-29", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-07-29" }, "refs": "alas:CVE-2026-61475;debian:qemu", "description": "In QEMU's VNC server implementation (ui/vnc.c), the vnc_refresh_lossy_rect() function contains an out-of-bounds write vulnerability when marking dirty bitmap rows during lossy tile refresh.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 70, "clock_known": true, "hours_public": 1680, "clock_origin": "advisory", "advisory_date": "2026-07-29", "advisory_days_public": 70, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-61475.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-61475" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-42178", "state": "RESERVED", "public_date": "2026-07-29", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-29" }, "refs": "ghsa-repos:OpenAEV-Platform/openaev\tGHSA-596j-9hrm-3mhg", "description": "OpenAEV-Platform/openaev repository advisory GHSA-596j-9hrm-3mhg", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 70, "clock_known": true, "hours_public": 1680, "clock_origin": "advisory", "advisory_date": "2026-07-29", "advisory_days_public": 70, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/OpenAEV-Platform/openaev/security/advisories/GHSA-596j-9hrm-3mhg" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-42179", "state": "RESERVED", "public_date": "2026-07-29", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-29" }, "refs": "ghsa-repos:OpenAEV-Platform/openaev\tGHSA-74m8-76qm-2hv4", "description": "OpenAEV-Platform/openaev repository advisory GHSA-74m8-76qm-2hv4", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 70, "clock_known": true, "hours_public": 1680, "clock_origin": "advisory", "advisory_date": "2026-07-29", "advisory_days_public": 70, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/OpenAEV-Platform/openaev/security/advisories/GHSA-74m8-76qm-2hv4" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-42182", "state": "RESERVED", "public_date": "2026-07-29", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-29" }, "refs": "ghsa-repos:OpenAEV-Platform/openaev\tGHSA-8vq3-w884-xj4c", "description": "OpenAEV-Platform/openaev repository advisory GHSA-8vq3-w884-xj4c", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 70, "clock_known": true, "hours_public": 1680, "clock_origin": "advisory", "advisory_date": "2026-07-29", "advisory_days_public": 70, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/OpenAEV-Platform/openaev/security/advisories/GHSA-8vq3-w884-xj4c" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96627", "state": "RESERVED", "public_date": "2026-07-29", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-29" }, "refs": "ghsa-repos:getarcaneapp/arcane\tGHSA-pw5q-rjx4-7f7p", "description": "getarcaneapp/arcane repository advisory GHSA-pw5q-rjx4-7f7p", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 70, "clock_known": true, "hours_public": 1680, "clock_origin": "advisory", "advisory_date": "2026-07-29", "advisory_days_public": 70, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/getarcaneapp/arcane/security/advisories/GHSA-pw5q-rjx4-7f7p" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-97702", "state": "RESERVED", "public_date": "2026-07-29", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-29" }, "refs": "ghsa-repos:openedx/openedx-platform\tGHSA-95xv-3c54-c3pw", "description": "openedx/openedx-platform repository advisory GHSA-95xv-3c54-c3pw", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 70, "clock_known": true, "hours_public": 1680, "clock_origin": "advisory", "advisory_date": "2026-07-29", "advisory_days_public": 70, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/openedx/openedx-platform/security/advisories/GHSA-95xv-3c54-c3pw" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104819", "state": "RESERVED", "public_date": "2026-07-29", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-29" }, "refs": "ghsa-repos:qax-os/excelize\tGHSA-48hm-4h8j-58fg", "description": "qax-os/excelize repository advisory GHSA-48hm-4h8j-58fg", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 70, "clock_known": true, "hours_public": 1680, "clock_origin": "advisory", "advisory_date": "2026-07-29", "advisory_days_public": 70, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/qax-os/excelize/security/advisories/GHSA-48hm-4h8j-58fg" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-71386", "state": "RESERVED", "public_date": "2026-07-29", "sources": "jvn,zdi", "feed_count": 2, "dates": { "jvn": "2026-07-31", "zdi": "2026-07-29" }, "refs": "jvn:JVNDB-2026-026086;zdi:ZDI-26-497", "description": "Security Update for Trend Micro Trend Vision One (July 2026)", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 70, "clock_known": true, "hours_public": 1680, "clock_origin": "advisory", "advisory_date": "2026-07-29", "advisory_days_public": 70, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "jvn": "https://jvndb.jvn.jp/en/contents/2026/JVNDB-2026-026086.html", "zdi": "https://www.zerodayinitiative.com/advisories/ZDI-26-497/" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-71387", "state": "RESERVED", "public_date": "2026-07-29", "sources": "jvn,zdi", "feed_count": 2, "dates": { "jvn": "2026-07-31", "zdi": "2026-07-29" }, "refs": "jvn:JVNDB-2026-026086;zdi:ZDI-26-498", "description": "Security Update for Trend Micro Trend Vision One (July 2026)", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 70, "clock_known": true, "hours_public": 1680, "clock_origin": "advisory", "advisory_date": "2026-07-29", "advisory_days_public": 70, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "jvn": "https://jvndb.jvn.jp/en/contents/2026/JVNDB-2026-026086.html", "zdi": "https://www.zerodayinitiative.com/advisories/ZDI-26-498/" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62660", "state": "RESERVED", "public_date": "2026-07-29", "sources": "zdi", "feed_count": 1, "dates": { "zdi": "2026-07-29" }, "refs": "zdi:ZDI-26-496", "description": "ZDI advisory ZDI-26-496", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 70, "clock_known": true, "hours_public": 1680, "clock_origin": "advisory", "advisory_date": "2026-07-29", "advisory_days_public": 70, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "zdi": "https://www.zerodayinitiative.com/advisories/ZDI-26-496/" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-81493", "state": "RESERVED", "public_date": "2026-07-30", "sources": "debian,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-07-30" }, "refs": "debian:incus;ghsa-repos:lxc/incus\tGHSA-p2v3-6wvc-cv3p", "description": "lxc/incus repository advisory GHSA-p2v3-6wvc-cv3p", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 69, "clock_known": true, "hours_public": 1656, "clock_origin": "advisory", "advisory_date": "2026-07-30", "advisory_days_public": 69, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "incus", "ecosystem": "", "source_urls": { "debian": "https://security-tracker.debian.org/tracker/CVE-2026-81493", "ghsa-repos": "https://github.com/lxc/incus/security/advisories/GHSA-p2v3-6wvc-cv3p" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-81494", "state": "RESERVED", "public_date": "2026-07-30", "sources": "debian,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-07-30" }, "refs": "debian:incus;ghsa-repos:lxc/incus\tGHSA-7fj9-65v4-rp7h", "description": "lxc/incus repository advisory GHSA-7fj9-65v4-rp7h", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 69, "clock_known": true, "hours_public": 1656, "clock_origin": "advisory", "advisory_date": "2026-07-30", "advisory_days_public": 69, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "incus", "ecosystem": "", "source_urls": { "debian": "https://security-tracker.debian.org/tracker/CVE-2026-81494", "ghsa-repos": "https://github.com/lxc/incus/security/advisories/GHSA-7fj9-65v4-rp7h" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-81495", "state": "RESERVED", "public_date": "2026-07-30", "sources": "debian,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-07-30" }, "refs": "debian:incus;ghsa-repos:lxc/incus\tGHSA-67qw-68v3-36h6", "description": "lxc/incus repository advisory GHSA-67qw-68v3-36h6", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 69, "clock_known": true, "hours_public": 1656, "clock_origin": "advisory", "advisory_date": "2026-07-30", "advisory_days_public": 69, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "incus", "ecosystem": "", "source_urls": { "debian": "https://security-tracker.debian.org/tracker/CVE-2026-81495", "ghsa-repos": "https://github.com/lxc/incus/security/advisories/GHSA-67qw-68v3-36h6" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-81496", "state": "RESERVED", "public_date": "2026-07-30", "sources": "debian,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-07-30" }, "refs": "debian:incus;ghsa-repos:lxc/incus\tGHSA-26gp-p5fw-3r2h", "description": "lxc/incus repository advisory GHSA-26gp-p5fw-3r2h", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 69, "clock_known": true, "hours_public": 1656, "clock_origin": "advisory", "advisory_date": "2026-07-30", "advisory_days_public": 69, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "incus", "ecosystem": "", "source_urls": { "debian": "https://security-tracker.debian.org/tracker/CVE-2026-81496", "ghsa-repos": "https://github.com/lxc/incus/security/advisories/GHSA-26gp-p5fw-3r2h" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-81497", "state": "RESERVED", "public_date": "2026-07-30", "sources": "debian,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-07-30" }, "refs": "debian:incus;ghsa-repos:lxc/incus\tGHSA-4qxq-p5hm-3q3p", "description": "lxc/incus repository advisory GHSA-4qxq-p5hm-3q3p", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 69, "clock_known": true, "hours_public": 1656, "clock_origin": "advisory", "advisory_date": "2026-07-30", "advisory_days_public": 69, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "incus", "ecosystem": "", "source_urls": { "debian": "https://security-tracker.debian.org/tracker/CVE-2026-81497", "ghsa-repos": "https://github.com/lxc/incus/security/advisories/GHSA-4qxq-p5hm-3q3p" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-81498", "state": "RESERVED", "public_date": "2026-07-30", "sources": "debian,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-07-30" }, "refs": "debian:incus;ghsa-repos:lxc/incus\tGHSA-m3j6-p3v3-qmjv", "description": "lxc/incus repository advisory GHSA-m3j6-p3v3-qmjv", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 69, "clock_known": true, "hours_public": 1656, "clock_origin": "advisory", "advisory_date": "2026-07-30", "advisory_days_public": 69, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "incus", "ecosystem": "", "source_urls": { "debian": "https://security-tracker.debian.org/tracker/CVE-2026-81498", "ghsa-repos": "https://github.com/lxc/incus/security/advisories/GHSA-m3j6-p3v3-qmjv" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-81499", "state": "RESERVED", "public_date": "2026-07-30", "sources": "debian,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-07-30" }, "refs": "debian:incus;ghsa-repos:lxc/incus\tGHSA-6v6x-387m-rj4w", "description": "lxc/incus repository advisory GHSA-6v6x-387m-rj4w", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 69, "clock_known": true, "hours_public": 1656, "clock_origin": "advisory", "advisory_date": "2026-07-30", "advisory_days_public": 69, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "incus", "ecosystem": "", "source_urls": { "debian": "https://security-tracker.debian.org/tracker/CVE-2026-81499", "ghsa-repos": "https://github.com/lxc/incus/security/advisories/GHSA-6v6x-387m-rj4w" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77416", "state": "RESERVED", "public_date": "2026-07-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-30" }, "refs": "ghsa-repos:JanssenProject/jans\tGHSA-4c5w-cgpc-9h7m", "description": "JanssenProject/jans repository advisory GHSA-4c5w-cgpc-9h7m", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 69, "clock_known": true, "hours_public": 1656, "clock_origin": "advisory", "advisory_date": "2026-07-30", "advisory_days_public": 69, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/JanssenProject/jans/security/advisories/GHSA-4c5w-cgpc-9h7m" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-42293", "state": "RESERVED", "public_date": "2026-07-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-30" }, "refs": "ghsa-repos:OpenAEV-Platform/openaev\tGHSA-c9pf-5gw2-mfv4", "description": "OpenAEV-Platform/openaev repository advisory GHSA-c9pf-5gw2-mfv4", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 69, "clock_known": true, "hours_public": 1656, "clock_origin": "advisory", "advisory_date": "2026-07-30", "advisory_days_public": 69, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/OpenAEV-Platform/openaev/security/advisories/GHSA-c9pf-5gw2-mfv4" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-44360", "state": "RESERVED", "public_date": "2026-07-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-30" }, "refs": "ghsa-repos:OpenAEV-Platform/openaev\tGHSA-g5cm-55mg-67f6", "description": "OpenAEV-Platform/openaev repository advisory GHSA-g5cm-55mg-67f6", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 69, "clock_known": true, "hours_public": 1656, "clock_origin": "advisory", "advisory_date": "2026-07-30", "advisory_days_public": 69, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/OpenAEV-Platform/openaev/security/advisories/GHSA-g5cm-55mg-67f6" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-44361", "state": "RESERVED", "public_date": "2026-07-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-30" }, "refs": "ghsa-repos:OpenAEV-Platform/openaev\tGHSA-j9wq-xj7h-c2qw", "description": "OpenAEV-Platform/openaev repository advisory GHSA-j9wq-xj7h-c2qw", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 69, "clock_known": true, "hours_public": 1656, "clock_origin": "advisory", "advisory_date": "2026-07-30", "advisory_days_public": 69, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/OpenAEV-Platform/openaev/security/advisories/GHSA-j9wq-xj7h-c2qw" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-102755", "state": "RESERVED", "public_date": "2026-07-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-30" }, "refs": "ghsa-repos:dataease/dataease\tGHSA-pjh9-r96g-pcqw", "description": "dataease/dataease repository advisory GHSA-pjh9-r96g-pcqw", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 69, "clock_known": true, "hours_public": 1656, "clock_origin": "advisory", "advisory_date": "2026-07-30", "advisory_days_public": 69, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/dataease/dataease/security/advisories/GHSA-pjh9-r96g-pcqw" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-102756", "state": "RESERVED", "public_date": "2026-07-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-30" }, "refs": "ghsa-repos:dataease/dataease\tGHSA-6pfp-pqvf-xvfg", "description": "dataease/dataease repository advisory GHSA-6pfp-pqvf-xvfg", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 69, "clock_known": true, "hours_public": 1656, "clock_origin": "advisory", "advisory_date": "2026-07-30", "advisory_days_public": 69, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/dataease/dataease/security/advisories/GHSA-6pfp-pqvf-xvfg" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104141", "state": "RESERVED", "public_date": "2026-07-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-30" }, "refs": "ghsa-repos:dataease/dataease\tGHSA-8hgp-vw27-hxph", "description": "dataease/dataease repository advisory GHSA-8hgp-vw27-hxph", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 69, "clock_known": true, "hours_public": 1656, "clock_origin": "advisory", "advisory_date": "2026-07-30", "advisory_days_public": 69, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/dataease/dataease/security/advisories/GHSA-8hgp-vw27-hxph" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104142", "state": "RESERVED", "public_date": "2026-07-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-30" }, "refs": "ghsa-repos:dataease/dataease\tGHSA-gcr3-cj2q-gj4q", "description": "dataease/dataease repository advisory GHSA-gcr3-cj2q-gj4q", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 69, "clock_known": true, "hours_public": 1656, "clock_origin": "advisory", "advisory_date": "2026-07-30", "advisory_days_public": 69, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/dataease/dataease/security/advisories/GHSA-gcr3-cj2q-gj4q" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104143", "state": "RESERVED", "public_date": "2026-07-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-30" }, "refs": "ghsa-repos:dataease/dataease\tGHSA-h32f-m89w-g35f", "description": "dataease/dataease repository advisory GHSA-h32f-m89w-g35f", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 69, "clock_known": true, "hours_public": 1656, "clock_origin": "advisory", "advisory_date": "2026-07-30", "advisory_days_public": 69, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/dataease/dataease/security/advisories/GHSA-h32f-m89w-g35f" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-103988", "state": "RESERVED", "public_date": "2026-07-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-30" }, "refs": "ghsa-repos:error311/FileRise\tGHSA-hhc9-q8vh-95p8", "description": "error311/FileRise repository advisory GHSA-hhc9-q8vh-95p8", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 69, "clock_known": true, "hours_public": 1656, "clock_origin": "advisory", "advisory_date": "2026-07-30", "advisory_days_public": 69, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/error311/FileRise/security/advisories/GHSA-hhc9-q8vh-95p8" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104106", "state": "RESERVED", "public_date": "2026-07-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-30" }, "refs": "ghsa-repos:error311/FileRise\tGHSA-77m8-hm3q-mrr5", "description": "error311/FileRise repository advisory GHSA-77m8-hm3q-mrr5", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 69, "clock_known": true, "hours_public": 1656, "clock_origin": "advisory", "advisory_date": "2026-07-30", "advisory_days_public": 69, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/error311/FileRise/security/advisories/GHSA-77m8-hm3q-mrr5" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104105", "state": "RESERVED", "public_date": "2026-07-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-30" }, "refs": "ghsa-repos:error311/FileRise\tGHSA-9pg4-98cx-r82j", "description": "error311/FileRise repository advisory GHSA-9pg4-98cx-r82j", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 69, "clock_known": true, "hours_public": 1656, "clock_origin": "advisory", "advisory_date": "2026-07-30", "advisory_days_public": 69, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/error311/FileRise/security/advisories/GHSA-9pg4-98cx-r82j" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104108", "state": "RESERVED", "public_date": "2026-07-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-30" }, "refs": "ghsa-repos:error311/FileRise\tGHSA-c5c5-mv9m-j367", "description": "error311/FileRise repository advisory GHSA-c5c5-mv9m-j367", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 69, "clock_known": true, "hours_public": 1656, "clock_origin": "advisory", "advisory_date": "2026-07-30", "advisory_days_public": 69, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/error311/FileRise/security/advisories/GHSA-c5c5-mv9m-j367" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-103977", "state": "RESERVED", "public_date": "2026-07-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-30" }, "refs": "ghsa-repos:error311/FileRise\tGHSA-4hfj-6478-5cv7", "description": "error311/FileRise repository advisory GHSA-4hfj-6478-5cv7", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 69, "clock_known": true, "hours_public": 1656, "clock_origin": "advisory", "advisory_date": "2026-07-30", "advisory_days_public": 69, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/error311/FileRise/security/advisories/GHSA-4hfj-6478-5cv7" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-46647", "state": "RESERVED", "public_date": "2026-07-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-30" }, "refs": "ghsa-repos:globaleaks/globaleaks-whistleblowing-software\tGHSA-m5xx-3qv7-37hj", "description": "globaleaks/globaleaks-whistleblowing-software repository advisory GHSA-m5xx-3qv7-37hj", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 69, "clock_known": true, "hours_public": 1656, "clock_origin": "advisory", "advisory_date": "2026-07-30", "advisory_days_public": 69, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/globaleaks/globaleaks-whistleblowing-software/security/advisories/GHSA-m5xx-3qv7-37hj" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-70655", "state": "RESERVED", "public_date": "2026-07-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-30" }, "refs": "ghsa-repos:globaleaks/globaleaks-whistleblowing-software\tGHSA-9vhh-65v7-3xj6", "description": "globaleaks/globaleaks-whistleblowing-software repository advisory GHSA-9vhh-65v7-3xj6", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 69, "clock_known": true, "hours_public": 1656, "clock_origin": "advisory", "advisory_date": "2026-07-30", "advisory_days_public": 69, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/globaleaks/globaleaks-whistleblowing-software/security/advisories/GHSA-9vhh-65v7-3xj6" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-46648", "state": "RESERVED", "public_date": "2026-07-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-30" }, "refs": "ghsa-repos:globaleaks/globaleaks-whistleblowing-software\tGHSA-w88m-4vmc-pq9g", "description": "globaleaks/globaleaks-whistleblowing-software repository advisory GHSA-w88m-4vmc-pq9g", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 69, "clock_known": true, "hours_public": 1656, "clock_origin": "advisory", "advisory_date": "2026-07-30", "advisory_days_public": 69, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/globaleaks/globaleaks-whistleblowing-software/security/advisories/GHSA-w88m-4vmc-pq9g" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-45020", "state": "RESERVED", "public_date": "2026-07-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-30" }, "refs": "ghsa-repos:globaleaks/globaleaks-whistleblowing-software\tGHSA-x4cq-h872-f8wx", "description": "globaleaks/globaleaks-whistleblowing-software repository advisory GHSA-x4cq-h872-f8wx", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 69, "clock_known": true, "hours_public": 1656, "clock_origin": "advisory", "advisory_date": "2026-07-30", "advisory_days_public": 69, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/globaleaks/globaleaks-whistleblowing-software/security/advisories/GHSA-x4cq-h872-f8wx" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-102664", "state": "RESERVED", "public_date": "2026-07-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-30" }, "refs": "ghsa-repos:sysown/proxysql\tGHSA-fvch-fpgq-pwfx", "description": "sysown/proxysql repository advisory GHSA-fvch-fpgq-pwfx", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 69, "clock_known": true, "hours_public": 1656, "clock_origin": "advisory", "advisory_date": "2026-07-30", "advisory_days_public": 69, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/sysown/proxysql/security/advisories/GHSA-fvch-fpgq-pwfx" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-102337", "state": "RESERVED", "public_date": "2026-07-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-30" }, "refs": "ghsa-repos:webmin/webmin\tGHSA-x8qr-rx2g-f23g", "description": "webmin/webmin repository advisory GHSA-x8qr-rx2g-f23g", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 69, "clock_known": true, "hours_public": 1656, "clock_origin": "advisory", "advisory_date": "2026-07-30", "advisory_days_public": 69, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/webmin/webmin/security/advisories/GHSA-x8qr-rx2g-f23g" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-12061", "state": "RESERVED", "public_date": "2026-07-31", "sources": "debian,ghsa,osv", "feed_count": 3, "dates": { "ghsa": "2026-07-31", "osv": "2026-07-31" }, "refs": "debian:nltk;ghsa:GHSA-fg7f-2386-8897;osv:PyPI:nltk", "description": "Natural Language Toolkit (NLTK): ReDoS in NLTK ReviewsCorpusReader FEATURES regex", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 68, "clock_known": true, "hours_public": 1632, "clock_origin": "advisory", "advisory_date": "2026-07-31", "advisory_days_public": 68, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "nltk", "ecosystem": "PyPI", "source_urls": { "debian": "https://security-tracker.debian.org/tracker/CVE-2026-12061", "ghsa": "https://github.com/advisories/GHSA-fg7f-2386-8897", "osv": "https://osv.dev/list?q=CVE-2026-12061" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-12072", "state": "RESERVED", "public_date": "2026-07-31", "sources": "csaf,debian,ghsa,osv", "feed_count": 4, "dates": { "ghsa": "2026-07-31", "osv": "2026-07-31", "csaf": "2026-08-06" }, "refs": "csaf:SUSE Product Security Team\topenSUSE-SU-2026:11469-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11469-1.json;debian:nltk;ghsa:GHSA-6hm5-jgcp-p838;osv:PyPI:nltk", "description": "Natural Language Toolkit (NLTK): Path Traversal in NKJPCorpusReader leads to Arbitrary File Read and bypasses the nltk.pathsec sandbox (ENFORCE=True)", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 68, "clock_known": true, "hours_public": 1632, "clock_origin": "advisory", "advisory_date": "2026-07-31", "advisory_days_public": 68, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "nltk", "ecosystem": "PyPI", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11469-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-12072", "ghsa": "https://github.com/advisories/GHSA-6hm5-jgcp-p838", "osv": "https://osv.dev/list?q=CVE-2026-12072" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-12074", "state": "RESERVED", "public_date": "2026-07-31", "sources": "debian,ghsa,osv", "feed_count": 3, "dates": { "ghsa": "2026-07-31", "osv": "2026-07-31" }, "refs": "debian:nltk;ghsa:GHSA-xh95-f55m-82fw;osv:PyPI:nltk", "description": "Natural Language Toolkit (NLTK) has path traversal in FramenetCorpusReader.frame() that allows arbitrary XML file read, bypassing the nltk.pathsec sandbox (ENFORCE=True)", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 68, "clock_known": true, "hours_public": 1632, "clock_origin": "advisory", "advisory_date": "2026-07-31", "advisory_days_public": 68, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "nltk", "ecosystem": "PyPI", "source_urls": { "debian": "https://security-tracker.debian.org/tracker/CVE-2026-12074", "ghsa": "https://github.com/advisories/GHSA-xh95-f55m-82fw", "osv": "https://osv.dev/list?q=CVE-2026-12074" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-12075", "state": "RESERVED", "public_date": "2026-07-31", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-07-31", "osv": "2026-07-31" }, "refs": "ghsa:GHSA-qvv7-cg9c-w4x3;osv:PyPI:nltk", "description": "Natural Language Toolkit (NLTK): DNS-rebinding SSRF filter bypass in nltk.pathsec.urlopen (nltk.download / nltk.data.load) defeats ENFORCE mode", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 68, "clock_known": true, "hours_public": 1632, "clock_origin": "advisory", "advisory_date": "2026-07-31", "advisory_days_public": 68, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "nltk", "ecosystem": "PyPI", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-qvv7-cg9c-w4x3", "osv": "https://osv.dev/list?q=CVE-2026-12075" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63218", "state": "RESERVED", "public_date": "2026-07-31", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-31" }, "refs": "ghsa-repos:SuiteCRM/SuiteCRM\tGHSA-v624-ccrf-9v97", "description": "SuiteCRM/SuiteCRM repository advisory GHSA-v624-ccrf-9v97", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 68, "clock_known": true, "hours_public": 1632, "clock_origin": "advisory", "advisory_date": "2026-07-31", "advisory_days_public": 68, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/SuiteCRM/SuiteCRM/security/advisories/GHSA-v624-ccrf-9v97" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63217", "state": "RESERVED", "public_date": "2026-07-31", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-31" }, "refs": "ghsa-repos:SuiteCRM/SuiteCRM\tGHSA-m5xj-rrwv-g3q3", "description": "SuiteCRM/SuiteCRM repository advisory GHSA-m5xj-rrwv-g3q3", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 68, "clock_known": true, "hours_public": 1632, "clock_origin": "advisory", "advisory_date": "2026-07-31", "advisory_days_public": 68, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/SuiteCRM/SuiteCRM/security/advisories/GHSA-m5xj-rrwv-g3q3" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63215", "state": "RESERVED", "public_date": "2026-07-31", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-31" }, "refs": "ghsa-repos:SuiteCRM/SuiteCRM\tGHSA-pmhw-r27f-w92m", "description": "SuiteCRM/SuiteCRM repository advisory GHSA-pmhw-r27f-w92m", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 68, "clock_known": true, "hours_public": 1632, "clock_origin": "advisory", "advisory_date": "2026-07-31", "advisory_days_public": 68, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/SuiteCRM/SuiteCRM/security/advisories/GHSA-pmhw-r27f-w92m" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63214", "state": "RESERVED", "public_date": "2026-07-31", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-31" }, "refs": "ghsa-repos:SuiteCRM/SuiteCRM\tGHSA-gjgm-wrr6-hrmp", "description": "SuiteCRM/SuiteCRM repository advisory GHSA-gjgm-wrr6-hrmp", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 68, "clock_known": true, "hours_public": 1632, "clock_origin": "advisory", "advisory_date": "2026-07-31", "advisory_days_public": 68, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/SuiteCRM/SuiteCRM/security/advisories/GHSA-gjgm-wrr6-hrmp" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63213", "state": "RESERVED", "public_date": "2026-07-31", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-31" }, "refs": "ghsa-repos:SuiteCRM/SuiteCRM\tGHSA-wfvr-mpq2-257w", "description": "SuiteCRM/SuiteCRM repository advisory GHSA-wfvr-mpq2-257w", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 68, "clock_known": true, "hours_public": 1632, "clock_origin": "advisory", "advisory_date": "2026-07-31", "advisory_days_public": 68, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/SuiteCRM/SuiteCRM/security/advisories/GHSA-wfvr-mpq2-257w" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63111", "state": "RESERVED", "public_date": "2026-07-31", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-31" }, "refs": "ghsa-repos:SuiteCRM/SuiteCRM\tGHSA-gx3x-3f4c-cjmx", "description": "SuiteCRM/SuiteCRM repository advisory GHSA-gx3x-3f4c-cjmx", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 68, "clock_known": true, "hours_public": 1632, "clock_origin": "advisory", "advisory_date": "2026-07-31", "advisory_days_public": 68, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/SuiteCRM/SuiteCRM/security/advisories/GHSA-gx3x-3f4c-cjmx" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61653", "state": "RESERVED", "public_date": "2026-07-31", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-31" }, "refs": "ghsa-repos:SuiteCRM/SuiteCRM\tGHSA-5m7h-v4v6-2r8h", "description": "SuiteCRM/SuiteCRM repository advisory GHSA-5m7h-v4v6-2r8h", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 68, "clock_known": true, "hours_public": 1632, "clock_origin": "advisory", "advisory_date": "2026-07-31", "advisory_days_public": 68, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/SuiteCRM/SuiteCRM/security/advisories/GHSA-5m7h-v4v6-2r8h" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61651", "state": "RESERVED", "public_date": "2026-07-31", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-31" }, "refs": "ghsa-repos:SuiteCRM/SuiteCRM\tGHSA-7cj5-pc2f-9xgv", "description": "SuiteCRM/SuiteCRM repository advisory GHSA-7cj5-pc2f-9xgv", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 68, "clock_known": true, "hours_public": 1632, "clock_origin": "advisory", "advisory_date": "2026-07-31", "advisory_days_public": 68, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/SuiteCRM/SuiteCRM/security/advisories/GHSA-7cj5-pc2f-9xgv" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61650", "state": "RESERVED", "public_date": "2026-07-31", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-31" }, "refs": "ghsa-repos:SuiteCRM/SuiteCRM\tGHSA-qmh9-m7g7-pxxp", "description": "SuiteCRM/SuiteCRM repository advisory GHSA-qmh9-m7g7-pxxp", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 68, "clock_known": true, "hours_public": 1632, "clock_origin": "advisory", "advisory_date": "2026-07-31", "advisory_days_public": 68, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/SuiteCRM/SuiteCRM/security/advisories/GHSA-qmh9-m7g7-pxxp" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61649", "state": "RESERVED", "public_date": "2026-07-31", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-31" }, "refs": "ghsa-repos:SuiteCRM/SuiteCRM\tGHSA-r665-27q3-wvg8", "description": "SuiteCRM/SuiteCRM repository advisory GHSA-r665-27q3-wvg8", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 68, "clock_known": true, "hours_public": 1632, "clock_origin": "advisory", "advisory_date": "2026-07-31", "advisory_days_public": 68, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/SuiteCRM/SuiteCRM/security/advisories/GHSA-r665-27q3-wvg8" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61648", "state": "RESERVED", "public_date": "2026-07-31", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-31" }, "refs": "ghsa-repos:SuiteCRM/SuiteCRM\tGHSA-pqq6-v2mj-hrm2", "description": "SuiteCRM/SuiteCRM repository advisory GHSA-pqq6-v2mj-hrm2", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 68, "clock_known": true, "hours_public": 1632, "clock_origin": "advisory", "advisory_date": "2026-07-31", "advisory_days_public": 68, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/SuiteCRM/SuiteCRM/security/advisories/GHSA-pqq6-v2mj-hrm2" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104782", "state": "RESERVED", "public_date": "2026-07-31", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-07-31" }, "refs": "ghsa-repos:e107inc/e107\tGHSA-87hm-vh32-7c3r", "description": "e107inc/e107 repository advisory GHSA-87hm-vh32-7c3r", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 68, "clock_known": true, "hours_public": 1632, "clock_origin": "advisory", "advisory_date": "2026-07-31", "advisory_days_public": 68, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/e107inc/e107/security/advisories/GHSA-87hm-vh32-7c3r" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-45518", "state": "RESERVED", "public_date": "2026-08-01", "sources": "csaf,osv,samsung", "feed_count": 3, "dates": { "osv": "2026-09-01", "csaf": "2026-09-08", "samsung": "2026-08-01" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3251\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3251.json;osv:Android:platform/frameworks/base;samsung:SMR-Aug-2026", "description": "In tokenize of SQLiteTokenizer.java, there is a possible way to access voicemail information due to SQL injection.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 67, "clock_known": true, "hours_public": 1608, "clock_origin": "advisory", "advisory_date": "2026-08-01", "advisory_days_public": 67, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "platform/frameworks/base", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3251.json", "osv": "https://osv.dev/list?q=CVE-2026-45518", "samsung": "https://security.samsungmobile.com/securityUpdate.smsb" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-15717", "state": "RESERVED", "public_date": "2026-08-01", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-08-01" }, "refs": "csaf:SUSE Product Security Team\topenSUSE-SU-2026:11422-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11422-1.json", "description": "CVE-2026-15717", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 67, "clock_known": true, "hours_public": 1608, "clock_origin": "advisory", "advisory_date": "2026-08-01", "advisory_days_public": 67, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11422-1.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-18375", "state": "RESERVED", "public_date": "2026-08-01", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-08-01" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-18375\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-18375.json", "description": "pagure: Pagure: API ACL bypass allows unauthorized repository creation via browser session check", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 67, "clock_known": true, "hours_public": 1608, "clock_origin": "advisory", "advisory_date": "2026-08-01", "advisory_days_public": 67, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-18375.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-18376", "state": "RESERVED", "public_date": "2026-08-01", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-08-01" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-18376\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-18376.json", "description": "koji: Koji SCM URL-Encoding Parser Differential (normpath bypass)", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 67, "clock_known": true, "hours_public": 1608, "clock_origin": "advisory", "advisory_date": "2026-08-01", "advisory_days_public": 67, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-18376.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-28665", "state": "RESERVED", "public_date": "2026-08-01", "sources": "samsung", "feed_count": 1, "dates": { "samsung": "2026-08-01" }, "refs": "samsung:SMR-Aug-2026", "description": "Samsung SMR Aug 2026", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 67, "clock_known": true, "hours_public": 1608, "clock_origin": "advisory", "advisory_date": "2026-08-01", "advisory_days_public": 67, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "samsung": "https://security.samsungmobile.com/securityUpdate.smsb" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-0022", "state": "RESERVED", "public_date": "2026-08-01", "sources": "samsung", "feed_count": 1, "dates": { "samsung": "2026-08-01" }, "refs": "samsung:SMR-Aug-2026", "description": "Samsung SMR Aug 2026", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 67, "clock_known": true, "hours_public": 1608, "clock_origin": "advisory", "advisory_date": "2026-08-01", "advisory_days_public": 67, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "samsung": "https://security.samsungmobile.com/securityUpdate.smsb" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-28645", "state": "RESERVED", "public_date": "2026-08-01", "sources": "samsung", "feed_count": 1, "dates": { "samsung": "2026-08-01" }, "refs": "samsung:SMR-Aug-2026", "description": "Samsung SMR Aug 2026", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 67, "clock_known": true, "hours_public": 1608, "clock_origin": "advisory", "advisory_date": "2026-08-01", "advisory_days_public": 67, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "samsung": "https://security.samsungmobile.com/securityUpdate.smsb" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-28591", "state": "RESERVED", "public_date": "2026-08-01", "sources": "samsung", "feed_count": 1, "dates": { "samsung": "2026-08-01" }, "refs": "samsung:SMR-Aug-2026", "description": "Samsung SMR Aug 2026", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 67, "clock_known": true, "hours_public": 1608, "clock_origin": "advisory", "advisory_date": "2026-08-01", "advisory_days_public": 67, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "samsung": "https://security.samsungmobile.com/securityUpdate.smsb" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-45522", "state": "RESERVED", "public_date": "2026-08-01", "sources": "samsung", "feed_count": 1, "dates": { "samsung": "2026-08-01" }, "refs": "samsung:SMR-Aug-2026", "description": "Samsung SMR Aug 2026", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 67, "clock_known": true, "hours_public": 1608, "clock_origin": "advisory", "advisory_date": "2026-08-01", "advisory_days_public": 67, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "samsung": "https://security.samsungmobile.com/securityUpdate.smsb" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-102748", "state": "RESERVED", "public_date": "2026-08-02", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-02" }, "refs": "ghsa-repos:dgraph-io/dgraph\tGHSA-qj98-gp63-54xj", "description": "dgraph-io/dgraph repository advisory GHSA-qj98-gp63-54xj", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 66, "clock_known": true, "hours_public": 1584, "clock_origin": "advisory", "advisory_date": "2026-08-02", "advisory_days_public": 66, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/dgraph-io/dgraph/security/advisories/GHSA-qj98-gp63-54xj" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-59774", "state": "RESERVED", "public_date": "2026-08-02", "sources": "alpine,csaf,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-08-02", "csaf": "2026-08-02" }, "refs": "alpine:gitea;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2612\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2612.json;ghsa-repos:go-gitea/gitea\tGHSA-6v53-hr58-556r", "description": "go-gitea/gitea repository advisory GHSA-6v53-hr58-556r", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 66, "clock_known": true, "hours_public": 1584, "clock_origin": "advisory", "advisory_date": "2026-08-02", "advisory_days_public": 66, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gitea", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-59774", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2612.json", "ghsa-repos": "https://github.com/go-gitea/gitea/security/advisories/GHSA-6v53-hr58-556r" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-102885", "state": "RESERVED", "public_date": "2026-08-02", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-02" }, "refs": "ghsa-repos:mdjnelson/moodle-mod_customcert\tGHSA-r86f-x9v9-g8j7", "description": "mdjnelson/moodle-mod_customcert repository advisory GHSA-r86f-x9v9-g8j7", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 66, "clock_known": true, "hours_public": 1584, "clock_origin": "advisory", "advisory_date": "2026-08-02", "advisory_days_public": 66, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/mdjnelson/moodle-mod_customcert/security/advisories/GHSA-r86f-x9v9-g8j7" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-102693", "state": "RESERVED", "public_date": "2026-08-03", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-03" }, "refs": "ghsa-repos:RIOT-OS/RIOT\tGHSA-gwgv-6976-hxrg", "description": "RIOT-OS/RIOT repository advisory GHSA-gwgv-6976-hxrg", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 65, "clock_known": true, "hours_public": 1560, "clock_origin": "advisory", "advisory_date": "2026-08-03", "advisory_days_public": 65, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-gwgv-6976-hxrg" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62983", "state": "RESERVED", "public_date": "2026-08-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-04" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-7whw-8467-78jp", "description": "chamilo/chamilo-lms repository advisory GHSA-7whw-8467-78jp", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 64, "clock_known": true, "hours_public": 1536, "clock_origin": "advisory", "advisory_date": "2026-08-04", "advisory_days_public": 64, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-7whw-8467-78jp" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62307", "state": "RESERVED", "public_date": "2026-08-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-04" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-7g97-jh3w-53wh", "description": "chamilo/chamilo-lms repository advisory GHSA-7g97-jh3w-53wh", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 64, "clock_known": true, "hours_public": 1536, "clock_origin": "advisory", "advisory_date": "2026-08-04", "advisory_days_public": 64, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-7g97-jh3w-53wh" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62306", "state": "RESERVED", "public_date": "2026-08-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-04" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-hg2v-955j-35c3", "description": "chamilo/chamilo-lms repository advisory GHSA-hg2v-955j-35c3", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 64, "clock_known": true, "hours_public": 1536, "clock_origin": "advisory", "advisory_date": "2026-08-04", "advisory_days_public": 64, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-hg2v-955j-35c3" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62305", "state": "RESERVED", "public_date": "2026-08-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-04" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-37fh-r78h-9vvr", "description": "chamilo/chamilo-lms repository advisory GHSA-37fh-r78h-9vvr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 64, "clock_known": true, "hours_public": 1536, "clock_origin": "advisory", "advisory_date": "2026-08-04", "advisory_days_public": 64, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-37fh-r78h-9vvr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62304", "state": "RESERVED", "public_date": "2026-08-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-04" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-9r7v-p62p-h9gc", "description": "chamilo/chamilo-lms repository advisory GHSA-9r7v-p62p-h9gc", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 64, "clock_known": true, "hours_public": 1536, "clock_origin": "advisory", "advisory_date": "2026-08-04", "advisory_days_public": 64, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-9r7v-p62p-h9gc" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61786", "state": "RESERVED", "public_date": "2026-08-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-04" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-35wp-xr4v-jg99", "description": "chamilo/chamilo-lms repository advisory GHSA-35wp-xr4v-jg99", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 64, "clock_known": true, "hours_public": 1536, "clock_origin": "advisory", "advisory_date": "2026-08-04", "advisory_days_public": 64, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-35wp-xr4v-jg99" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61785", "state": "RESERVED", "public_date": "2026-08-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-04" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-3v23-qp3p-p2xf", "description": "chamilo/chamilo-lms repository advisory GHSA-3v23-qp3p-p2xf", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 64, "clock_known": true, "hours_public": 1536, "clock_origin": "advisory", "advisory_date": "2026-08-04", "advisory_days_public": 64, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-3v23-qp3p-p2xf" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61665", "state": "RESERVED", "public_date": "2026-08-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-04" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-rpp3-vpc9-w3h2", "description": "chamilo/chamilo-lms repository advisory GHSA-rpp3-vpc9-w3h2", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 64, "clock_known": true, "hours_public": 1536, "clock_origin": "advisory", "advisory_date": "2026-08-04", "advisory_days_public": 64, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-rpp3-vpc9-w3h2" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61661", "state": "RESERVED", "public_date": "2026-08-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-04" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-7jqm-3829-36cm", "description": "chamilo/chamilo-lms repository advisory GHSA-7jqm-3829-36cm", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 64, "clock_known": true, "hours_public": 1536, "clock_origin": "advisory", "advisory_date": "2026-08-04", "advisory_days_public": 64, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-7jqm-3829-36cm" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61660", "state": "RESERVED", "public_date": "2026-08-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-04" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-9g35-w847-rpp8", "description": "chamilo/chamilo-lms repository advisory GHSA-9g35-w847-rpp8", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 64, "clock_known": true, "hours_public": 1536, "clock_origin": "advisory", "advisory_date": "2026-08-04", "advisory_days_public": 64, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-9g35-w847-rpp8" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61659", "state": "RESERVED", "public_date": "2026-08-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-04" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-9mpp-78g5-c22m", "description": "chamilo/chamilo-lms repository advisory GHSA-9mpp-78g5-c22m", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 64, "clock_known": true, "hours_public": 1536, "clock_origin": "advisory", "advisory_date": "2026-08-04", "advisory_days_public": 64, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-9mpp-78g5-c22m" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61658", "state": "RESERVED", "public_date": "2026-08-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-04" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-h24x-xw47-2wwx", "description": "chamilo/chamilo-lms repository advisory GHSA-h24x-xw47-2wwx", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 64, "clock_known": true, "hours_public": 1536, "clock_origin": "advisory", "advisory_date": "2026-08-04", "advisory_days_public": 64, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-h24x-xw47-2wwx" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61656", "state": "RESERVED", "public_date": "2026-08-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-04" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-vjmr-7vxh-wpg2", "description": "chamilo/chamilo-lms repository advisory GHSA-vjmr-7vxh-wpg2", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 64, "clock_known": true, "hours_public": 1536, "clock_origin": "advisory", "advisory_date": "2026-08-04", "advisory_days_public": 64, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-vjmr-7vxh-wpg2" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61655", "state": "RESERVED", "public_date": "2026-08-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-04" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-j9jg-h6cw-jj7v", "description": "chamilo/chamilo-lms repository advisory GHSA-j9jg-h6cw-jj7v", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 64, "clock_known": true, "hours_public": 1536, "clock_origin": "advisory", "advisory_date": "2026-08-04", "advisory_days_public": 64, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-j9jg-h6cw-jj7v" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61624", "state": "RESERVED", "public_date": "2026-08-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-04" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-x3j9-q879-46vr", "description": "chamilo/chamilo-lms repository advisory GHSA-x3j9-q879-46vr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 64, "clock_known": true, "hours_public": 1536, "clock_origin": "advisory", "advisory_date": "2026-08-04", "advisory_days_public": 64, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-x3j9-q879-46vr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61623", "state": "RESERVED", "public_date": "2026-08-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-04" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-rp64-899j-x9f6", "description": "chamilo/chamilo-lms repository advisory GHSA-rp64-899j-x9f6", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 64, "clock_known": true, "hours_public": 1536, "clock_origin": "advisory", "advisory_date": "2026-08-04", "advisory_days_public": 64, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-rp64-899j-x9f6" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61622", "state": "RESERVED", "public_date": "2026-08-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-04" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-2c5g-hrhg-44vg", "description": "chamilo/chamilo-lms repository advisory GHSA-2c5g-hrhg-44vg", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 64, "clock_known": true, "hours_public": 1536, "clock_origin": "advisory", "advisory_date": "2026-08-04", "advisory_days_public": 64, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-2c5g-hrhg-44vg" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61615", "state": "RESERVED", "public_date": "2026-08-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-04" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-mw74-xqfh-r8gj", "description": "chamilo/chamilo-lms repository advisory GHSA-mw74-xqfh-r8gj", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 64, "clock_known": true, "hours_public": 1536, "clock_origin": "advisory", "advisory_date": "2026-08-04", "advisory_days_public": 64, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-mw74-xqfh-r8gj" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61603", "state": "RESERVED", "public_date": "2026-08-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-04" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-94h4-9vrp-v3cv", "description": "chamilo/chamilo-lms repository advisory GHSA-94h4-9vrp-v3cv", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 64, "clock_known": true, "hours_public": 1536, "clock_origin": "advisory", "advisory_date": "2026-08-04", "advisory_days_public": 64, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-94h4-9vrp-v3cv" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61602", "state": "RESERVED", "public_date": "2026-08-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-04" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-66hv-22wg-x4q2", "description": "chamilo/chamilo-lms repository advisory GHSA-66hv-22wg-x4q2", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 64, "clock_known": true, "hours_public": 1536, "clock_origin": "advisory", "advisory_date": "2026-08-04", "advisory_days_public": 64, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-66hv-22wg-x4q2" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61601", "state": "RESERVED", "public_date": "2026-08-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-04" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-55mr-fcm3-5724", "description": "chamilo/chamilo-lms repository advisory GHSA-55mr-fcm3-5724", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 64, "clock_known": true, "hours_public": 1536, "clock_origin": "advisory", "advisory_date": "2026-08-04", "advisory_days_public": 64, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-55mr-fcm3-5724" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61600", "state": "RESERVED", "public_date": "2026-08-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-04" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-pjh4-mvwg-6jrm", "description": "chamilo/chamilo-lms repository advisory GHSA-pjh4-mvwg-6jrm", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 64, "clock_known": true, "hours_public": 1536, "clock_origin": "advisory", "advisory_date": "2026-08-04", "advisory_days_public": 64, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-pjh4-mvwg-6jrm" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61587", "state": "RESERVED", "public_date": "2026-08-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-04" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-j3jc-5rqc-qq2x", "description": "chamilo/chamilo-lms repository advisory GHSA-j3jc-5rqc-qq2x", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 64, "clock_known": true, "hours_public": 1536, "clock_origin": "advisory", "advisory_date": "2026-08-04", "advisory_days_public": 64, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-j3jc-5rqc-qq2x" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61585", "state": "RESERVED", "public_date": "2026-08-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-04" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-6wcp-8v36-m8hv", "description": "chamilo/chamilo-lms repository advisory GHSA-6wcp-8v36-m8hv", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 64, "clock_known": true, "hours_public": 1536, "clock_origin": "advisory", "advisory_date": "2026-08-04", "advisory_days_public": 64, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-6wcp-8v36-m8hv" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61577", "state": "RESERVED", "public_date": "2026-08-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-04" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-cg5h-j563-652j", "description": "chamilo/chamilo-lms repository advisory GHSA-cg5h-j563-652j", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 64, "clock_known": true, "hours_public": 1536, "clock_origin": "advisory", "advisory_date": "2026-08-04", "advisory_days_public": 64, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-cg5h-j563-652j" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-54748", "state": "RESERVED", "public_date": "2026-08-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-04" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-99q5-mwrx-jq34", "description": "chamilo/chamilo-lms repository advisory GHSA-99q5-mwrx-jq34", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 64, "clock_known": true, "hours_public": 1536, "clock_origin": "advisory", "advisory_date": "2026-08-04", "advisory_days_public": 64, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-99q5-mwrx-jq34" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61558", "state": "RESERVED", "public_date": "2026-08-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-04" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-x579-vfgg-ff5w", "description": "chamilo/chamilo-lms repository advisory GHSA-x579-vfgg-ff5w", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 64, "clock_known": true, "hours_public": 1536, "clock_origin": "advisory", "advisory_date": "2026-08-04", "advisory_days_public": 64, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-x579-vfgg-ff5w" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61538", "state": "RESERVED", "public_date": "2026-08-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-04" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-2369-h4gx-5mfx", "description": "chamilo/chamilo-lms repository advisory GHSA-2369-h4gx-5mfx", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 64, "clock_known": true, "hours_public": 1536, "clock_origin": "advisory", "advisory_date": "2026-08-04", "advisory_days_public": 64, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-2369-h4gx-5mfx" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-54750", "state": "RESERVED", "public_date": "2026-08-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-04" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-5vmm-46vr-72j8", "description": "chamilo/chamilo-lms repository advisory GHSA-5vmm-46vr-72j8", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 64, "clock_known": true, "hours_public": 1536, "clock_origin": "advisory", "advisory_date": "2026-08-04", "advisory_days_public": 64, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-5vmm-46vr-72j8" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61537", "state": "RESERVED", "public_date": "2026-08-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-04" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-p2pv-9wv4-pw66", "description": "chamilo/chamilo-lms repository advisory GHSA-p2pv-9wv4-pw66", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 64, "clock_known": true, "hours_public": 1536, "clock_origin": "advisory", "advisory_date": "2026-08-04", "advisory_days_public": 64, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-p2pv-9wv4-pw66" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61533", "state": "RESERVED", "public_date": "2026-08-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-04" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-65wx-4v4p-xph3", "description": "chamilo/chamilo-lms repository advisory GHSA-65wx-4v4p-xph3", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 64, "clock_known": true, "hours_public": 1536, "clock_origin": "advisory", "advisory_date": "2026-08-04", "advisory_days_public": 64, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-65wx-4v4p-xph3" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61733", "state": "RESERVED", "public_date": "2026-08-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-04" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-ch7g-4f23-9hm2", "description": "chamilo/chamilo-lms repository advisory GHSA-ch7g-4f23-9hm2", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 64, "clock_known": true, "hours_public": 1536, "clock_origin": "advisory", "advisory_date": "2026-08-04", "advisory_days_public": 64, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-ch7g-4f23-9hm2" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61734", "state": "RESERVED", "public_date": "2026-08-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-04" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-2fr5-c8p6-5hq6", "description": "chamilo/chamilo-lms repository advisory GHSA-2fr5-c8p6-5hq6", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 64, "clock_known": true, "hours_public": 1536, "clock_origin": "advisory", "advisory_date": "2026-08-04", "advisory_days_public": 64, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-2fr5-c8p6-5hq6" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61531", "state": "RESERVED", "public_date": "2026-08-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-04" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-438r-9jh4-mmfc", "description": "chamilo/chamilo-lms repository advisory GHSA-438r-9jh4-mmfc", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 64, "clock_known": true, "hours_public": 1536, "clock_origin": "advisory", "advisory_date": "2026-08-04", "advisory_days_public": 64, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-438r-9jh4-mmfc" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61530", "state": "RESERVED", "public_date": "2026-08-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-04" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-8423-5658-789h", "description": "chamilo/chamilo-lms repository advisory GHSA-8423-5658-789h", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 64, "clock_known": true, "hours_public": 1536, "clock_origin": "advisory", "advisory_date": "2026-08-04", "advisory_days_public": 64, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-8423-5658-789h" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104110", "state": "RESERVED", "public_date": "2026-08-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-04" }, "refs": "ghsa-repos:error311/FileRise\tGHSA-m49m-9v4m-w2rq", "description": "error311/FileRise repository advisory GHSA-m49m-9v4m-w2rq", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 64, "clock_known": true, "hours_public": 1536, "clock_origin": "advisory", "advisory_date": "2026-08-04", "advisory_days_public": 64, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/error311/FileRise/security/advisories/GHSA-m49m-9v4m-w2rq" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104109", "state": "RESERVED", "public_date": "2026-08-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-04" }, "refs": "ghsa-repos:error311/FileRise\tGHSA-jp22-hh6w-mpwp", "description": "error311/FileRise repository advisory GHSA-jp22-hh6w-mpwp", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 64, "clock_known": true, "hours_public": 1536, "clock_origin": "advisory", "advisory_date": "2026-08-04", "advisory_days_public": 64, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/error311/FileRise/security/advisories/GHSA-jp22-hh6w-mpwp" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104107", "state": "RESERVED", "public_date": "2026-08-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-04" }, "refs": "ghsa-repos:error311/FileRise\tGHSA-67p9-5q8f-586q", "description": "error311/FileRise repository advisory GHSA-67p9-5q8f-586q", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 64, "clock_known": true, "hours_public": 1536, "clock_origin": "advisory", "advisory_date": "2026-08-04", "advisory_days_public": 64, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/error311/FileRise/security/advisories/GHSA-67p9-5q8f-586q" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-70644", "state": "RESERVED", "public_date": "2026-08-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-04" }, "refs": "ghsa-repos:owncloud/security-advisories\tGHSA-vrcq-jx87-3rc6", "description": "owncloud/security-advisories repository advisory GHSA-vrcq-jx87-3rc6", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 64, "clock_known": true, "hours_public": 1536, "clock_origin": "advisory", "advisory_date": "2026-08-04", "advisory_days_public": 64, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/owncloud/security-advisories/security/advisories/GHSA-vrcq-jx87-3rc6" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-70645", "state": "RESERVED", "public_date": "2026-08-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-04" }, "refs": "ghsa-repos:owncloud/security-advisories\tGHSA-qcf4-c9pm-c2ww", "description": "owncloud/security-advisories repository advisory GHSA-qcf4-c9pm-c2ww", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 64, "clock_known": true, "hours_public": 1536, "clock_origin": "advisory", "advisory_date": "2026-08-04", "advisory_days_public": 64, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/owncloud/security-advisories/security/advisories/GHSA-qcf4-c9pm-c2ww" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-59953", "state": "RESERVED", "public_date": "2026-08-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-04" }, "refs": "ghsa-repos:owncloud/security-advisories\tGHSA-q9wg-cjf4-xwwc", "description": "owncloud/security-advisories repository advisory GHSA-q9wg-cjf4-xwwc", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 64, "clock_known": true, "hours_public": 1536, "clock_origin": "advisory", "advisory_date": "2026-08-04", "advisory_days_public": 64, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/owncloud/security-advisories/security/advisories/GHSA-q9wg-cjf4-xwwc" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-55302", "state": "RESERVED", "public_date": "2026-08-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-04" }, "refs": "ghsa-repos:owncloud/security-advisories\tGHSA-p325-hhcp-j884", "description": "owncloud/security-advisories repository advisory GHSA-p325-hhcp-j884", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 64, "clock_known": true, "hours_public": 1536, "clock_origin": "advisory", "advisory_date": "2026-08-04", "advisory_days_public": 64, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/owncloud/security-advisories/security/advisories/GHSA-p325-hhcp-j884" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-58274", "state": "RESERVED", "public_date": "2026-08-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-04" }, "refs": "ghsa-repos:owncloud/security-advisories\tGHSA-7cmc-wrr6-qf82", "description": "owncloud/security-advisories repository advisory GHSA-7cmc-wrr6-qf82", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 64, "clock_known": true, "hours_public": 1536, "clock_origin": "advisory", "advisory_date": "2026-08-04", "advisory_days_public": 64, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/owncloud/security-advisories/security/advisories/GHSA-7cmc-wrr6-qf82" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104144", "state": "RESERVED", "public_date": "2026-08-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-04" }, "refs": "ghsa-repos:pjsip/pjproject\tGHSA-wf9x-v65x-5qh3", "description": "pjsip/pjproject repository advisory GHSA-wf9x-v65x-5qh3", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 64, "clock_known": true, "hours_public": 1536, "clock_origin": "advisory", "advisory_date": "2026-08-04", "advisory_days_public": 64, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/pjsip/pjproject/security/advisories/GHSA-wf9x-v65x-5qh3" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-102345", "state": "RESERVED", "public_date": "2026-08-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-04" }, "refs": "ghsa-repos:zammad/zammad\tGHSA-4x3x-65c5-8hx4", "description": "zammad/zammad repository advisory GHSA-4x3x-65c5-8hx4", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 64, "clock_known": true, "hours_public": 1536, "clock_origin": "advisory", "advisory_date": "2026-08-04", "advisory_days_public": 64, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/zammad/zammad/security/advisories/GHSA-4x3x-65c5-8hx4" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-52682", "state": "RESERVED", "public_date": "2026-08-05", "sources": "alpine,csaf,debian", "feed_count": 3, "dates": { "csaf": "2026-08-05" }, "refs": "alpine:dnsdist;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2683\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2683.json;debian:dnsdist", "description": "CVE-2026-52682", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 63, "clock_known": true, "hours_public": 1512, "clock_origin": "advisory", "advisory_date": "2026-08-05", "advisory_days_public": 63, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "dnsdist", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-52682", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2683.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-52682" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-54535", "state": "RESERVED", "public_date": "2026-08-05", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-05" }, "refs": "ghsa-repos:OpenSIPS/opensips\tGHSA-g97q-m2gv-f5vc", "description": "OpenSIPS/opensips repository advisory GHSA-g97q-m2gv-f5vc", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 63, "clock_known": true, "hours_public": 1512, "clock_origin": "advisory", "advisory_date": "2026-08-05", "advisory_days_public": 63, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/OpenSIPS/opensips/security/advisories/GHSA-g97q-m2gv-f5vc" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-54539", "state": "RESERVED", "public_date": "2026-08-05", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-05" }, "refs": "ghsa-repos:OpenSIPS/opensips\tGHSA-hx7p-6j27-gjpv", "description": "OpenSIPS/opensips repository advisory GHSA-hx7p-6j27-gjpv", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 63, "clock_known": true, "hours_public": 1512, "clock_origin": "advisory", "advisory_date": "2026-08-05", "advisory_days_public": 63, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/OpenSIPS/opensips/security/advisories/GHSA-hx7p-6j27-gjpv" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62339", "state": "RESERVED", "public_date": "2026-08-05", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-05" }, "refs": "ghsa-repos:OpenSIPS/opensips\tGHSA-65mj-944f-fx48", "description": "OpenSIPS/opensips repository advisory GHSA-65mj-944f-fx48", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 63, "clock_known": true, "hours_public": 1512, "clock_origin": "advisory", "advisory_date": "2026-08-05", "advisory_days_public": 63, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/OpenSIPS/opensips/security/advisories/GHSA-65mj-944f-fx48" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-69145", "state": "RESERVED", "public_date": "2026-08-05", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-05" }, "refs": "ghsa-repos:SuiteCRM/SuiteCRM\tGHSA-4fhr-x4wr-fwqg", "description": "SuiteCRM/SuiteCRM repository advisory GHSA-4fhr-x4wr-fwqg", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 63, "clock_known": true, "hours_public": 1512, "clock_origin": "advisory", "advisory_date": "2026-08-05", "advisory_days_public": 63, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/SuiteCRM/SuiteCRM/security/advisories/GHSA-4fhr-x4wr-fwqg" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-69144", "state": "RESERVED", "public_date": "2026-08-05", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-05" }, "refs": "ghsa-repos:SuiteCRM/SuiteCRM\tGHSA-j2r4-r4wh-339v", "description": "SuiteCRM/SuiteCRM repository advisory GHSA-j2r4-r4wh-339v", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 63, "clock_known": true, "hours_public": 1512, "clock_origin": "advisory", "advisory_date": "2026-08-05", "advisory_days_public": 63, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/SuiteCRM/SuiteCRM/security/advisories/GHSA-j2r4-r4wh-339v" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-69143", "state": "RESERVED", "public_date": "2026-08-05", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-05" }, "refs": "ghsa-repos:SuiteCRM/SuiteCRM\tGHSA-rc6r-hwhg-7pfg", "description": "SuiteCRM/SuiteCRM repository advisory GHSA-rc6r-hwhg-7pfg", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 63, "clock_known": true, "hours_public": 1512, "clock_origin": "advisory", "advisory_date": "2026-08-05", "advisory_days_public": 63, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/SuiteCRM/SuiteCRM/security/advisories/GHSA-rc6r-hwhg-7pfg" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-69142", "state": "RESERVED", "public_date": "2026-08-05", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-05" }, "refs": "ghsa-repos:SuiteCRM/SuiteCRM\tGHSA-pjc8-2w2x-xcgf", "description": "SuiteCRM/SuiteCRM repository advisory GHSA-pjc8-2w2x-xcgf", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 63, "clock_known": true, "hours_public": 1512, "clock_origin": "advisory", "advisory_date": "2026-08-05", "advisory_days_public": 63, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/SuiteCRM/SuiteCRM/security/advisories/GHSA-pjc8-2w2x-xcgf" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-69141", "state": "RESERVED", "public_date": "2026-08-05", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-05" }, "refs": "ghsa-repos:SuiteCRM/SuiteCRM\tGHSA-wphj-qjgj-4j23", "description": "SuiteCRM/SuiteCRM repository advisory GHSA-wphj-qjgj-4j23", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 63, "clock_known": true, "hours_public": 1512, "clock_origin": "advisory", "advisory_date": "2026-08-05", "advisory_days_public": 63, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/SuiteCRM/SuiteCRM/security/advisories/GHSA-wphj-qjgj-4j23" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-69140", "state": "RESERVED", "public_date": "2026-08-05", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-05" }, "refs": "ghsa-repos:SuiteCRM/SuiteCRM\tGHSA-xg3m-xvc9-j55j", "description": "SuiteCRM/SuiteCRM repository advisory GHSA-xg3m-xvc9-j55j", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 63, "clock_known": true, "hours_public": 1512, "clock_origin": "advisory", "advisory_date": "2026-08-05", "advisory_days_public": 63, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/SuiteCRM/SuiteCRM/security/advisories/GHSA-xg3m-xvc9-j55j" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-69137", "state": "RESERVED", "public_date": "2026-08-05", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-05" }, "refs": "ghsa-repos:SuiteCRM/SuiteCRM\tGHSA-72r3-24x4-j46c", "description": "SuiteCRM/SuiteCRM repository advisory GHSA-72r3-24x4-j46c", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 63, "clock_known": true, "hours_public": 1512, "clock_origin": "advisory", "advisory_date": "2026-08-05", "advisory_days_public": 63, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/SuiteCRM/SuiteCRM/security/advisories/GHSA-72r3-24x4-j46c" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-69136", "state": "RESERVED", "public_date": "2026-08-05", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-05" }, "refs": "ghsa-repos:SuiteCRM/SuiteCRM\tGHSA-3mjp-45mc-3256", "description": "SuiteCRM/SuiteCRM repository advisory GHSA-3mjp-45mc-3256", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 63, "clock_known": true, "hours_public": 1512, "clock_origin": "advisory", "advisory_date": "2026-08-05", "advisory_days_public": 63, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/SuiteCRM/SuiteCRM/security/advisories/GHSA-3mjp-45mc-3256" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-69135", "state": "RESERVED", "public_date": "2026-08-05", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-05" }, "refs": "ghsa-repos:SuiteCRM/SuiteCRM\tGHSA-gcc4-hvpc-cgvv", "description": "SuiteCRM/SuiteCRM repository advisory GHSA-gcc4-hvpc-cgvv", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 63, "clock_known": true, "hours_public": 1512, "clock_origin": "advisory", "advisory_date": "2026-08-05", "advisory_days_public": 63, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/SuiteCRM/SuiteCRM/security/advisories/GHSA-gcc4-hvpc-cgvv" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-69134", "state": "RESERVED", "public_date": "2026-08-05", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-05" }, "refs": "ghsa-repos:SuiteCRM/SuiteCRM\tGHSA-3phg-q9w9-4pqw", "description": "SuiteCRM/SuiteCRM repository advisory GHSA-3phg-q9w9-4pqw", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 63, "clock_known": true, "hours_public": 1512, "clock_origin": "advisory", "advisory_date": "2026-08-05", "advisory_days_public": 63, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/SuiteCRM/SuiteCRM/security/advisories/GHSA-3phg-q9w9-4pqw" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104790", "state": "RESERVED", "public_date": "2026-08-05", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-05" }, "refs": "ghsa-repos:himmelblau-idm/himmelblau\tGHSA-x259-23ph-65m5", "description": "himmelblau-idm/himmelblau repository advisory GHSA-x259-23ph-65m5", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 63, "clock_known": true, "hours_public": 1512, "clock_origin": "advisory", "advisory_date": "2026-08-05", "advisory_days_public": 63, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/himmelblau-idm/himmelblau/security/advisories/GHSA-x259-23ph-65m5" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104789", "state": "RESERVED", "public_date": "2026-08-05", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-05" }, "refs": "ghsa-repos:himmelblau-idm/himmelblau\tGHSA-4f5j-9xgm-8pvr", "description": "himmelblau-idm/himmelblau repository advisory GHSA-4f5j-9xgm-8pvr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 63, "clock_known": true, "hours_public": 1512, "clock_origin": "advisory", "advisory_date": "2026-08-05", "advisory_days_public": 63, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/himmelblau-idm/himmelblau/security/advisories/GHSA-4f5j-9xgm-8pvr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104781", "state": "RESERVED", "public_date": "2026-08-05", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-05" }, "refs": "ghsa-repos:himmelblau-idm/himmelblau\tGHSA-6cq7-jcwm-cpmr", "description": "himmelblau-idm/himmelblau repository advisory GHSA-6cq7-jcwm-cpmr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 63, "clock_known": true, "hours_public": 1512, "clock_origin": "advisory", "advisory_date": "2026-08-05", "advisory_days_public": 63, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/himmelblau-idm/himmelblau/security/advisories/GHSA-6cq7-jcwm-cpmr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61545", "state": "RESERVED", "public_date": "2026-08-05", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-08-05", "csaf": "2026-08-05" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2685\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2685.json;ghsa-repos:nextcloud/security-advisories\tGHSA-vq3v-jv6f-6xp2", "description": "nextcloud/security-advisories repository advisory GHSA-vq3v-jv6f-6xp2", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 63, "clock_known": true, "hours_public": 1512, "clock_origin": "advisory", "advisory_date": "2026-08-05", "advisory_days_public": 63, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2685.json", "ghsa-repos": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-vq3v-jv6f-6xp2" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61527", "state": "RESERVED", "public_date": "2026-08-05", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-08-05", "csaf": "2026-08-05" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2685\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2685.json;ghsa-repos:nextcloud/security-advisories\tGHSA-99gw-ww6p-f2rr", "description": "nextcloud/security-advisories repository advisory GHSA-99gw-ww6p-f2rr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 63, "clock_known": true, "hours_public": 1512, "clock_origin": "advisory", "advisory_date": "2026-08-05", "advisory_days_public": 63, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2685.json", "ghsa-repos": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-99gw-ww6p-f2rr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-15268", "state": "RESERVED", "public_date": "2026-08-05", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-08-05" }, "refs": "csaf:SUSE Product Security Team\topenSUSE-SU-2026:11455-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11455-1.json", "description": "CVE-2026-15268", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 63, "clock_known": true, "hours_public": 1512, "clock_origin": "advisory", "advisory_date": "2026-08-05", "advisory_days_public": 63, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11455-1.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-17629", "state": "RESERVED", "public_date": "2026-08-05", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-08-05" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2675\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2675.json", "description": "CVE-2026-17629", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 63, "clock_known": true, "hours_public": 1512, "clock_origin": "advisory", "advisory_date": "2026-08-05", "advisory_days_public": 63, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2675.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-8506", "state": "RESERVED", "public_date": "2026-08-05", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-08-05" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2675\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2675.json", "description": "CVE-2026-8506", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 63, "clock_known": true, "hours_public": 1512, "clock_origin": "advisory", "advisory_date": "2026-08-05", "advisory_days_public": 63, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2675.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-9131", "state": "RESERVED", "public_date": "2026-08-05", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-08-05" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2675\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2675.json", "description": "CVE-2026-9131", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 63, "clock_known": true, "hours_public": 1512, "clock_origin": "advisory", "advisory_date": "2026-08-05", "advisory_days_public": 63, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2675.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-102615", "state": "RESERVED", "public_date": "2026-08-06", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-06" }, "refs": "ghsa-repos:heyform/heyform\tGHSA-pxw5-pjrc-j758", "description": "heyform/heyform repository advisory GHSA-pxw5-pjrc-j758", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 62, "clock_known": true, "hours_public": 1488, "clock_origin": "advisory", "advisory_date": "2026-08-06", "advisory_days_public": 62, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/heyform/heyform/security/advisories/GHSA-pxw5-pjrc-j758" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-87005", "state": "RESERVED", "public_date": "2026-08-06", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-06" }, "refs": "ghsa-repos:siemens/linux-entra-sso\tGHSA-g9vc-5j77-f2cm", "description": "siemens/linux-entra-sso repository advisory GHSA-g9vc-5j77-f2cm", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 62, "clock_known": true, "hours_public": 1488, "clock_origin": "advisory", "advisory_date": "2026-08-06", "advisory_days_public": 62, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/siemens/linux-entra-sso/security/advisories/GHSA-g9vc-5j77-f2cm" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63625", "state": "RESERVED", "public_date": "2026-08-06", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-06" }, "refs": "ghsa-repos:xwikisas/xwiki-pro-macros\tGHSA-22q9-227p-wx5j", "description": "xwikisas/xwiki-pro-macros repository advisory GHSA-22q9-227p-wx5j", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 62, "clock_known": true, "hours_public": 1488, "clock_origin": "advisory", "advisory_date": "2026-08-06", "advisory_days_public": 62, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/xwikisas/xwiki-pro-macros/security/advisories/GHSA-22q9-227p-wx5j" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61703", "state": "RESERVED", "public_date": "2026-08-07", "sources": "alpine,csaf,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-08-07", "csaf": "2026-08-26" }, "refs": "alpine:openexr;csaf:SUSE Product Security Team\topenSUSE-SU-2026:11612-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11612-1.json;ghsa-repos:AcademySoftwareFoundation/openexr\tGHSA-994f-rr2m-9r7x", "description": "AcademySoftwareFoundation/openexr repository advisory GHSA-994f-rr2m-9r7x", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 61, "clock_known": true, "hours_public": 1464, "clock_origin": "advisory", "advisory_date": "2026-08-07", "advisory_days_public": 61, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "openexr", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-61703", "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11612-1.json", "ghsa-repos": "https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-994f-rr2m-9r7x" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-102737", "state": "RESERVED", "public_date": "2026-08-09", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-09" }, "refs": "ghsa-repos:AsyncHttpClient/async-http-client\tGHSA-qpfv-56x8-xgx4", "description": "AsyncHttpClient/async-http-client repository advisory GHSA-qpfv-56x8-xgx4", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 59, "clock_known": true, "hours_public": 1416, "clock_origin": "advisory", "advisory_date": "2026-08-09", "advisory_days_public": 59, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-qpfv-56x8-xgx4" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-102740", "state": "RESERVED", "public_date": "2026-08-09", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-09" }, "refs": "ghsa-repos:AsyncHttpClient/async-http-client\tGHSA-cf59-3jcr-vfhw", "description": "AsyncHttpClient/async-http-client repository advisory GHSA-cf59-3jcr-vfhw", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 59, "clock_known": true, "hours_public": 1416, "clock_origin": "advisory", "advisory_date": "2026-08-09", "advisory_days_public": 59, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-cf59-3jcr-vfhw" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61478", "state": "RESERVED", "public_date": "2026-08-10", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-08-10" }, "refs": "alas:CVE-2026-61478;debian:libvirt", "description": "libvirt: Check for empty string condition and skip inclusion of the XML document context in the error message.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 58, "clock_known": true, "hours_public": 1392, "clock_origin": "advisory", "advisory_date": "2026-08-10", "advisory_days_public": 58, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "libvirt", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-61478.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-61478" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104201", "state": "RESERVED", "public_date": "2026-08-10", "sources": "debian,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-08-10" }, "refs": "debian:radsecproxy;ghsa-repos:radsecproxy/radsecproxy\tGHSA-wj29-mxmc-q98c", "description": "radsecproxy/radsecproxy repository advisory GHSA-wj29-mxmc-q98c", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 58, "clock_known": true, "hours_public": 1392, "clock_origin": "advisory", "advisory_date": "2026-08-10", "advisory_days_public": 58, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "radsecproxy", "ecosystem": "", "source_urls": { "debian": "https://security-tracker.debian.org/tracker/CVE-2026-104201", "ghsa-repos": "https://github.com/radsecproxy/radsecproxy/security/advisories/GHSA-wj29-mxmc-q98c" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-94474", "state": "RESERVED", "public_date": "2026-08-10", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-10" }, "refs": "ghsa-repos:ChurchCRM/CRM\tGHSA-4wmp-3v34-g7q8", "description": "ChurchCRM/CRM repository advisory GHSA-4wmp-3v34-g7q8", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 58, "clock_known": true, "hours_public": 1392, "clock_origin": "advisory", "advisory_date": "2026-08-10", "advisory_days_public": 58, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ChurchCRM/CRM/security/advisories/GHSA-4wmp-3v34-g7q8" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-94473", "state": "RESERVED", "public_date": "2026-08-10", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-10" }, "refs": "ghsa-repos:ChurchCRM/CRM\tGHSA-6rgg-mrx3-92w7", "description": "ChurchCRM/CRM repository advisory GHSA-6rgg-mrx3-92w7", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 58, "clock_known": true, "hours_public": 1392, "clock_origin": "advisory", "advisory_date": "2026-08-10", "advisory_days_public": 58, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ChurchCRM/CRM/security/advisories/GHSA-6rgg-mrx3-92w7" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-94472", "state": "RESERVED", "public_date": "2026-08-10", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-10" }, "refs": "ghsa-repos:ChurchCRM/CRM\tGHSA-m649-24q9-q6r4", "description": "ChurchCRM/CRM repository advisory GHSA-m649-24q9-q6r4", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 58, "clock_known": true, "hours_public": 1392, "clock_origin": "advisory", "advisory_date": "2026-08-10", "advisory_days_public": 58, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ChurchCRM/CRM/security/advisories/GHSA-m649-24q9-q6r4" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-94471", "state": "RESERVED", "public_date": "2026-08-10", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-10" }, "refs": "ghsa-repos:ChurchCRM/CRM\tGHSA-hm7v-jrhm-fmfx", "description": "ChurchCRM/CRM repository advisory GHSA-hm7v-jrhm-fmfx", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 58, "clock_known": true, "hours_public": 1392, "clock_origin": "advisory", "advisory_date": "2026-08-10", "advisory_days_public": 58, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ChurchCRM/CRM/security/advisories/GHSA-hm7v-jrhm-fmfx" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-94470", "state": "RESERVED", "public_date": "2026-08-10", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-10" }, "refs": "ghsa-repos:ChurchCRM/CRM\tGHSA-f2fq-4rmp-9x8c", "description": "ChurchCRM/CRM repository advisory GHSA-f2fq-4rmp-9x8c", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 58, "clock_known": true, "hours_public": 1392, "clock_origin": "advisory", "advisory_date": "2026-08-10", "advisory_days_public": 58, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ChurchCRM/CRM/security/advisories/GHSA-f2fq-4rmp-9x8c" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-53767", "state": "RESERVED", "public_date": "2026-08-10", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-10" }, "refs": "ghsa-repos:xenocrat/chyrp-lite\tGHSA-8h86-c24h-5jp3", "description": "xenocrat/chyrp-lite repository advisory GHSA-8h86-c24h-5jp3", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 58, "clock_known": true, "hours_public": 1392, "clock_origin": "advisory", "advisory_date": "2026-08-10", "advisory_days_public": 58, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/xenocrat/chyrp-lite/security/advisories/GHSA-8h86-c24h-5jp3" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-71323", "state": "RESERVED", "public_date": "2026-08-10", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-10" }, "refs": "ghsa-repos:xenocrat/chyrp-lite\tGHSA-753p-h5vp-7p9f", "description": "xenocrat/chyrp-lite repository advisory GHSA-753p-h5vp-7p9f", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 58, "clock_known": true, "hours_public": 1392, "clock_origin": "advisory", "advisory_date": "2026-08-10", "advisory_days_public": 58, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/xenocrat/chyrp-lite/security/advisories/GHSA-753p-h5vp-7p9f" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-53768", "state": "RESERVED", "public_date": "2026-08-10", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-10" }, "refs": "ghsa-repos:xenocrat/chyrp-lite\tGHSA-r9w7-5h94-wq5x", "description": "xenocrat/chyrp-lite repository advisory GHSA-r9w7-5h94-wq5x", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 58, "clock_known": true, "hours_public": 1392, "clock_origin": "advisory", "advisory_date": "2026-08-10", "advisory_days_public": 58, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/xenocrat/chyrp-lite/security/advisories/GHSA-r9w7-5h94-wq5x" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-97701", "state": "RESERVED", "public_date": "2026-08-10", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-10" }, "refs": "ghsa-repos:zulip/zulip\tGHSA-m257-w4r5-5rmf", "description": "zulip/zulip repository advisory GHSA-m257-w4r5-5rmf", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 58, "clock_known": true, "hours_public": 1392, "clock_origin": "advisory", "advisory_date": "2026-08-10", "advisory_days_public": 58, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/zulip/zulip/security/advisories/GHSA-m257-w4r5-5rmf" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-102893", "state": "RESERVED", "public_date": "2026-08-10", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-10" }, "refs": "ghsa-repos:zulip/zulip\tGHSA-xw9h-9rcm-hx4m", "description": "zulip/zulip repository advisory GHSA-xw9h-9rcm-hx4m", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 58, "clock_known": true, "hours_public": 1392, "clock_origin": "advisory", "advisory_date": "2026-08-10", "advisory_days_public": 58, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/zulip/zulip/security/advisories/GHSA-xw9h-9rcm-hx4m" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-100404", "state": "RESERVED", "public_date": "2026-08-10", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-10" }, "refs": "ghsa-repos:zulip/zulip\tGHSA-5r8f-gq2h-fcgp", "description": "zulip/zulip repository advisory GHSA-5r8f-gq2h-fcgp", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 58, "clock_known": true, "hours_public": 1392, "clock_origin": "advisory", "advisory_date": "2026-08-10", "advisory_days_public": 58, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/zulip/zulip/security/advisories/GHSA-5r8f-gq2h-fcgp" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-66801", "state": "RESERVED", "public_date": "2026-08-10", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2026-08-10", "csaf": "2026-08-11" }, "refs": "csaf:Red Hat Product Security\tRHSA-2026:53530\thttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_53530.json;redhat:CVE-2026-66801", "description": "multicluster-global-hub: Cross-hub lateral movement via shared spec-topic Write ACL and spoofable CloudEvent identity", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 58, "clock_known": true, "hours_public": 1392, "clock_origin": "advisory", "advisory_date": "2026-08-10", "advisory_days_public": 58, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2026-66801", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_53530.json", "redhat": "https://access.redhat.com/security/cve/CVE-2026-66801" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-56618", "state": "RESERVED", "public_date": "2026-08-10", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-08-10" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2741\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2741.json", "description": "CVE-2026-56618", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 58, "clock_known": true, "hours_public": 1392, "clock_origin": "advisory", "advisory_date": "2026-08-10", "advisory_days_public": 58, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2741.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-92162", "state": "RESERVED", "public_date": "2026-08-11", "sources": "alas,csaf,debian,ghsa-repos", "feed_count": 4, "dates": { "alas": "2026-09-23", "ghsa-repos": "2026-08-11", "csaf": "2026-09-23" }, "refs": "alas:CVE-2026-92162;csaf:SUSE Product Security Team\tCVE-2026-92162\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-92162.json;debian:flatpak;ghsa-repos:flatpak/flatpak\tGHSA-v2gw-v9h5-9q4x", "description": "On systems where at least one OCI remote is configured (most common on Fedora systems), a malicious local user in an active local session could use a crafted architecture name to trick the flatpak-system-helper process into creating a root-owned directory tree with contents determined by the OCI remote, plus a root-owned lock file and icons directory, outside the intended root directory.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 57, "clock_known": true, "hours_public": 1368, "clock_origin": "advisory", "advisory_date": "2026-08-11", "advisory_days_public": 57, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "flatpak", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-92162.html", "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-92162.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-92162", "ghsa-repos": "https://github.com/flatpak/flatpak/security/advisories/GHSA-v2gw-v9h5-9q4x" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-64786", "state": "RESERVED", "public_date": "2026-08-11", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-11" }, "refs": "ghsa-repos:apple/container\tGHSA-xwgf-4rc5-p4m4", "description": "apple/container repository advisory GHSA-xwgf-4rc5-p4m4", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 57, "clock_known": true, "hours_public": 1368, "clock_origin": "advisory", "advisory_date": "2026-08-11", "advisory_days_public": 57, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/apple/container/security/advisories/GHSA-xwgf-4rc5-p4m4" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-102658", "state": "RESERVED", "public_date": "2026-08-11", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-11" }, "refs": "ghsa-repos:kohler/hotcrp\tGHSA-fr3q-pp37-9wcg", "description": "kohler/hotcrp repository advisory GHSA-fr3q-pp37-9wcg", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 57, "clock_known": true, "hours_public": 1368, "clock_origin": "advisory", "advisory_date": "2026-08-11", "advisory_days_public": 57, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kohler/hotcrp/security/advisories/GHSA-fr3q-pp37-9wcg" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-102642", "state": "RESERVED", "public_date": "2026-08-11", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-11" }, "refs": "ghsa-repos:kohler/hotcrp\tGHSA-v8jx-vq6p-jq52", "description": "kohler/hotcrp repository advisory GHSA-v8jx-vq6p-jq52", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 57, "clock_known": true, "hours_public": 1368, "clock_origin": "advisory", "advisory_date": "2026-08-11", "advisory_days_public": 57, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kohler/hotcrp/security/advisories/GHSA-v8jx-vq6p-jq52" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63491", "state": "RESERVED", "public_date": "2026-08-11", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-11" }, "refs": "ghsa-repos:kohler/hotcrp\tGHSA-4v58-pj7j-xc8j", "description": "kohler/hotcrp repository advisory GHSA-4v58-pj7j-xc8j", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 57, "clock_known": true, "hours_public": 1368, "clock_origin": "advisory", "advisory_date": "2026-08-11", "advisory_days_public": 57, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kohler/hotcrp/security/advisories/GHSA-4v58-pj7j-xc8j" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104140", "state": "RESERVED", "public_date": "2026-08-11", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-11" }, "refs": "ghsa-repos:qgis/QGIS\tGHSA-cr49-pm9v-m788", "description": "qgis/QGIS repository advisory GHSA-cr49-pm9v-m788", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 57, "clock_known": true, "hours_public": 1368, "clock_origin": "advisory", "advisory_date": "2026-08-11", "advisory_days_public": 57, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/qgis/QGIS/security/advisories/GHSA-cr49-pm9v-m788" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-100397", "state": "RESERVED", "public_date": "2026-08-11", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-11" }, "refs": "ghsa-repos:rucio/rucio\tGHSA-x585-4vv8-2mh2", "description": "rucio/rucio repository advisory GHSA-x585-4vv8-2mh2", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 57, "clock_known": true, "hours_public": 1368, "clock_origin": "advisory", "advisory_date": "2026-08-11", "advisory_days_public": 57, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/rucio/rucio/security/advisories/GHSA-x585-4vv8-2mh2" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63113", "state": "RESERVED", "public_date": "2026-08-11", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-11" }, "refs": "ghsa-repos:sharetribe/web-template\tGHSA-f5r9-7hmp-j694", "description": "sharetribe/web-template repository advisory GHSA-f5r9-7hmp-j694", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 57, "clock_known": true, "hours_public": 1368, "clock_origin": "advisory", "advisory_date": "2026-08-11", "advisory_days_public": 57, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/sharetribe/web-template/security/advisories/GHSA-f5r9-7hmp-j694" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63112", "state": "RESERVED", "public_date": "2026-08-11", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-11" }, "refs": "ghsa-repos:sharetribe/web-template\tGHSA-rcgh-6wcv-gq7v", "description": "sharetribe/web-template repository advisory GHSA-rcgh-6wcv-gq7v", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 57, "clock_known": true, "hours_public": 1368, "clock_origin": "advisory", "advisory_date": "2026-08-11", "advisory_days_public": 57, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/sharetribe/web-template/security/advisories/GHSA-rcgh-6wcv-gq7v" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77580", "state": "RESERVED", "public_date": "2026-08-11", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-11" }, "refs": "ghsa-repos:xibosignage/xibo-cms\tGHSA-xr7g-gv5j-ph8q", "description": "xibosignage/xibo-cms repository advisory GHSA-xr7g-gv5j-ph8q", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 57, "clock_known": true, "hours_public": 1368, "clock_origin": "advisory", "advisory_date": "2026-08-11", "advisory_days_public": 57, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/xibosignage/xibo-cms/security/advisories/GHSA-xr7g-gv5j-ph8q" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77588", "state": "RESERVED", "public_date": "2026-08-11", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-11" }, "refs": "ghsa-repos:xibosignage/xibo-cms\tGHSA-3xgq-r5vq-c9ff", "description": "xibosignage/xibo-cms repository advisory GHSA-3xgq-r5vq-c9ff", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 57, "clock_known": true, "hours_public": 1368, "clock_origin": "advisory", "advisory_date": "2026-08-11", "advisory_days_public": 57, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/xibosignage/xibo-cms/security/advisories/GHSA-3xgq-r5vq-c9ff" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77579", "state": "RESERVED", "public_date": "2026-08-11", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-11" }, "refs": "ghsa-repos:xibosignage/xibo-cms\tGHSA-vhmj-m55w-4xxc", "description": "xibosignage/xibo-cms repository advisory GHSA-vhmj-m55w-4xxc", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 57, "clock_known": true, "hours_public": 1368, "clock_origin": "advisory", "advisory_date": "2026-08-11", "advisory_days_public": 57, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/xibosignage/xibo-cms/security/advisories/GHSA-vhmj-m55w-4xxc" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77578", "state": "RESERVED", "public_date": "2026-08-11", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-11" }, "refs": "ghsa-repos:xibosignage/xibo-cms\tGHSA-pc3g-2hhm-46qc", "description": "xibosignage/xibo-cms repository advisory GHSA-pc3g-2hhm-46qc", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 57, "clock_known": true, "hours_public": 1368, "clock_origin": "advisory", "advisory_date": "2026-08-11", "advisory_days_public": 57, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/xibosignage/xibo-cms/security/advisories/GHSA-pc3g-2hhm-46qc" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77577", "state": "RESERVED", "public_date": "2026-08-11", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-11" }, "refs": "ghsa-repos:xibosignage/xibo-cms\tGHSA-mgjq-cpf4-pjjw", "description": "xibosignage/xibo-cms repository advisory GHSA-mgjq-cpf4-pjjw", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 57, "clock_known": true, "hours_public": 1368, "clock_origin": "advisory", "advisory_date": "2026-08-11", "advisory_days_public": 57, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/xibosignage/xibo-cms/security/advisories/GHSA-mgjq-cpf4-pjjw" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-18724", "state": "RESERVED", "public_date": "2026-08-12", "sources": "alas,csaf,debian,redhat", "feed_count": 4, "dates": { "alas": "2026-08-14", "redhat": "2026-08-12", "csaf": "2026-08-14" }, "refs": "alas:CVE-2026-18724;csaf:SUSE Product Security Team\tCVE-2026-18724\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-18724.json;debian:open-iscsi;redhat:CVE-2026-18724", "description": "open-iscsi: open-iscsi: Stack buffer overflow in idbm record parsing", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 56, "clock_known": true, "hours_public": 1344, "clock_origin": "advisory", "advisory_date": "2026-08-12", "advisory_days_public": 56, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "open-iscsi", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-18724.html", "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-18724.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-18724", "redhat": "https://access.redhat.com/security/cve/CVE-2026-18724" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-18725", "state": "RESERVED", "public_date": "2026-08-12", "sources": "alas,csaf,debian,redhat", "feed_count": 4, "dates": { "alas": "2026-08-14", "redhat": "2026-08-12", "csaf": "2026-08-18" }, "refs": "alas:CVE-2026-18725;csaf:SUSE Product Security Team\tCVE-2026-18725\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-18725.json;debian:open-iscsi;redhat:CVE-2026-18725", "description": "open-iscsi: open-iscsi: Out-of-bounds access in iscsiuio ICMPv6 echo handling", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 56, "clock_known": true, "hours_public": 1344, "clock_origin": "advisory", "advisory_date": "2026-08-12", "advisory_days_public": 56, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "open-iscsi", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-18725.html", "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-18725.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-18725", "redhat": "https://access.redhat.com/security/cve/CVE-2026-18725" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-52053", "state": "RESERVED", "public_date": "2026-08-12", "sources": "debian,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-08-12" }, "refs": "debian:mongoose;ghsa-repos:cesanta/mongoose\tGHSA-g96q-9mw4-vr8x", "description": "cesanta/mongoose repository advisory GHSA-g96q-9mw4-vr8x", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 56, "clock_known": true, "hours_public": 1344, "clock_origin": "advisory", "advisory_date": "2026-08-12", "advisory_days_public": 56, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "mongoose", "ecosystem": "", "source_urls": { "debian": "https://security-tracker.debian.org/tracker/CVE-2026-52053", "ghsa-repos": "https://github.com/cesanta/mongoose/security/advisories/GHSA-g96q-9mw4-vr8x" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-52061", "state": "RESERVED", "public_date": "2026-08-12", "sources": "debian,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-08-12" }, "refs": "debian:mongoose;ghsa-repos:cesanta/mongoose\tGHSA-pfr9-hqr2-78rq", "description": "cesanta/mongoose repository advisory GHSA-pfr9-hqr2-78rq", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 56, "clock_known": true, "hours_public": 1344, "clock_origin": "advisory", "advisory_date": "2026-08-12", "advisory_days_public": 56, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "mongoose", "ecosystem": "", "source_urls": { "debian": "https://security-tracker.debian.org/tracker/CVE-2026-52061", "ghsa-repos": "https://github.com/cesanta/mongoose/security/advisories/GHSA-pfr9-hqr2-78rq" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-52068", "state": "RESERVED", "public_date": "2026-08-12", "sources": "debian,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-08-12" }, "refs": "debian:mongoose;ghsa-repos:cesanta/mongoose\tGHSA-9qr7-6j3g-f76w", "description": "cesanta/mongoose repository advisory GHSA-9qr7-6j3g-f76w", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 56, "clock_known": true, "hours_public": 1344, "clock_origin": "advisory", "advisory_date": "2026-08-12", "advisory_days_public": 56, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "mongoose", "ecosystem": "", "source_urls": { "debian": "https://security-tracker.debian.org/tracker/CVE-2026-52068", "ghsa-repos": "https://github.com/cesanta/mongoose/security/advisories/GHSA-9qr7-6j3g-f76w" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63626", "state": "RESERVED", "public_date": "2026-08-12", "sources": "debian,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-08-12" }, "refs": "debian:mongoose;ghsa-repos:cesanta/mongoose\tGHSA-pc66-j6r6-49x9", "description": "cesanta/mongoose repository advisory GHSA-pc66-j6r6-49x9", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 56, "clock_known": true, "hours_public": 1344, "clock_origin": "advisory", "advisory_date": "2026-08-12", "advisory_days_public": 56, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "mongoose", "ecosystem": "", "source_urls": { "debian": "https://security-tracker.debian.org/tracker/CVE-2026-63626", "ghsa-repos": "https://github.com/cesanta/mongoose/security/advisories/GHSA-pc66-j6r6-49x9" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-73252", "state": "RESERVED", "public_date": "2026-08-12", "sources": "debian,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-08-12" }, "refs": "debian:mongoose;ghsa-repos:cesanta/mongoose\tGHSA-hq58-98f5-2wg3", "description": "cesanta/mongoose repository advisory GHSA-hq58-98f5-2wg3", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 56, "clock_known": true, "hours_public": 1344, "clock_origin": "advisory", "advisory_date": "2026-08-12", "advisory_days_public": 56, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "mongoose", "ecosystem": "", "source_urls": { "debian": "https://security-tracker.debian.org/tracker/CVE-2026-73252", "ghsa-repos": "https://github.com/cesanta/mongoose/security/advisories/GHSA-hq58-98f5-2wg3" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-73260", "state": "RESERVED", "public_date": "2026-08-12", "sources": "debian,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-08-12" }, "refs": "debian:mongoose;ghsa-repos:cesanta/mongoose\tGHSA-f6wr-mg35-p25g", "description": "cesanta/mongoose repository advisory GHSA-f6wr-mg35-p25g", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 56, "clock_known": true, "hours_public": 1344, "clock_origin": "advisory", "advisory_date": "2026-08-12", "advisory_days_public": 56, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "mongoose", "ecosystem": "", "source_urls": { "debian": "https://security-tracker.debian.org/tracker/CVE-2026-73260", "ghsa-repos": "https://github.com/cesanta/mongoose/security/advisories/GHSA-f6wr-mg35-p25g" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-73261", "state": "RESERVED", "public_date": "2026-08-12", "sources": "debian,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-08-12" }, "refs": "debian:mongoose;ghsa-repos:cesanta/mongoose\tGHSA-3fmr-92g4-wchx", "description": "cesanta/mongoose repository advisory GHSA-3fmr-92g4-wchx", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 56, "clock_known": true, "hours_public": 1344, "clock_origin": "advisory", "advisory_date": "2026-08-12", "advisory_days_public": 56, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "mongoose", "ecosystem": "", "source_urls": { "debian": "https://security-tracker.debian.org/tracker/CVE-2026-73261", "ghsa-repos": "https://github.com/cesanta/mongoose/security/advisories/GHSA-3fmr-92g4-wchx" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-12876", "state": "RESERVED", "public_date": "2026-08-12", "sources": "debian,ghsa,ghsa-repos,osv", "feed_count": 4, "dates": { "ghsa": "2026-09-02", "ghsa-repos": "2026-08-12", "osv": "2026-09-02" }, "refs": "debian:nltk;ghsa-repos:nltk/nltk\tGHSA-ff5c-cp5c-9wjf;ghsa:GHSA-ff5c-cp5c-9wjf;osv:PyPI:nltk", "description": "NLTK: Uncontrolled resource consumption in RecursiveDescentParser via ambiguous or left-recursive grammars", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 56, "clock_known": true, "hours_public": 1344, "clock_origin": "advisory", "advisory_date": "2026-08-12", "advisory_days_public": 56, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "nltk", "ecosystem": "PyPI", "source_urls": { "debian": "https://security-tracker.debian.org/tracker/CVE-2026-12876", "ghsa": "https://github.com/advisories/GHSA-ff5c-cp5c-9wjf", "ghsa-repos": "https://github.com/nltk/nltk/security/advisories/GHSA-ff5c-cp5c-9wjf", "osv": "https://osv.dev/list?q=CVE-2026-12876" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-64680", "state": "RESERVED", "public_date": "2026-08-12", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-12" }, "refs": "ghsa-repos:apostrophecms/apostrophe\tGHSA-rgg4-476q-xgcg", "description": "apostrophecms/apostrophe repository advisory GHSA-rgg4-476q-xgcg", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 56, "clock_known": true, "hours_public": 1344, "clock_origin": "advisory", "advisory_date": "2026-08-12", "advisory_days_public": 56, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rgg4-476q-xgcg" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63668", "state": "RESERVED", "public_date": "2026-08-12", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-12" }, "refs": "ghsa-repos:apostrophecms/apostrophe\tGHSA-xmpp-f9v3-r7qh", "description": "apostrophecms/apostrophe repository advisory GHSA-xmpp-f9v3-r7qh", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 56, "clock_known": true, "hours_public": 1344, "clock_origin": "advisory", "advisory_date": "2026-08-12", "advisory_days_public": 56, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-xmpp-f9v3-r7qh" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77531", "state": "RESERVED", "public_date": "2026-08-12", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-12" }, "refs": "ghsa-repos:cilium/cilium\tGHSA-xqhm-7xhv-6ppj", "description": "cilium/cilium repository advisory GHSA-xqhm-7xhv-6ppj", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 56, "clock_known": true, "hours_public": 1344, "clock_origin": "advisory", "advisory_date": "2026-08-12", "advisory_days_public": 56, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/cilium/cilium/security/advisories/GHSA-xqhm-7xhv-6ppj" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-83620", "state": "RESERVED", "public_date": "2026-08-12", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-12" }, "refs": "ghsa-repos:cilium/cilium\tGHSA-33qq-jq9c-6gcc", "description": "cilium/cilium repository advisory GHSA-33qq-jq9c-6gcc", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 56, "clock_known": true, "hours_public": 1344, "clock_origin": "advisory", "advisory_date": "2026-08-12", "advisory_days_public": 56, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/cilium/cilium/security/advisories/GHSA-33qq-jq9c-6gcc" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104149", "state": "RESERVED", "public_date": "2026-08-12", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-12" }, "refs": "ghsa-repos:cilium/cilium\tGHSA-vh48-r624-p8v7", "description": "cilium/cilium repository advisory GHSA-vh48-r624-p8v7", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 56, "clock_known": true, "hours_public": 1344, "clock_origin": "advisory", "advisory_date": "2026-08-12", "advisory_days_public": 56, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/cilium/cilium/security/advisories/GHSA-vh48-r624-p8v7" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-106124", "state": "RESERVED", "public_date": "2026-08-12", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-12" }, "refs": "ghsa-repos:gofiber/fiber\tGHSA-c5qf-v26h-rp5r", "description": "gofiber/fiber repository advisory GHSA-c5qf-v26h-rp5r", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 56, "clock_known": true, "hours_public": 1344, "clock_origin": "advisory", "advisory_date": "2026-08-12", "advisory_days_public": 56, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/gofiber/fiber/security/advisories/GHSA-c5qf-v26h-rp5r" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-71385", "state": "RESERVED", "public_date": "2026-08-12", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-08-12" }, "refs": "csaf:Nationaal Cyber Security Centrum\tNCSC-2026-0294\thttps://advisories.ncsc.nl/csaf/v2/2026/ncsc-2026-0294.json", "description": "CVE-2026-71385", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 56, "clock_known": true, "hours_public": 1344, "clock_origin": "advisory", "advisory_date": "2026-08-12", "advisory_days_public": 56, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://advisories.ncsc.nl/csaf/v2/2026/ncsc-2026-0294.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-16858", "state": "RESERVED", "public_date": "2026-08-12", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-08-12" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2820\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2820.json", "description": "CVE-2026-16858", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 56, "clock_known": true, "hours_public": 1344, "clock_origin": "advisory", "advisory_date": "2026-08-12", "advisory_days_public": 56, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2820.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-17208", "state": "RESERVED", "public_date": "2026-08-12", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-08-12" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2820\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2820.json", "description": "CVE-2026-17208", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 56, "clock_known": true, "hours_public": 1344, "clock_origin": "advisory", "advisory_date": "2026-08-12", "advisory_days_public": 56, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2820.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-17217", "state": "RESERVED", "public_date": "2026-08-12", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-08-12" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2820\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2820.json", "description": "CVE-2026-17217", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 56, "clock_known": true, "hours_public": 1344, "clock_origin": "advisory", "advisory_date": "2026-08-12", "advisory_days_public": 56, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2820.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-17498", "state": "RESERVED", "public_date": "2026-08-12", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-08-12" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2820\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2820.json", "description": "CVE-2026-17498", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 56, "clock_known": true, "hours_public": 1344, "clock_origin": "advisory", "advisory_date": "2026-08-12", "advisory_days_public": 56, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2820.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-18680", "state": "RESERVED", "public_date": "2026-08-12", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-08-12" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2820\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2820.json", "description": "CVE-2026-18680", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 56, "clock_known": true, "hours_public": 1344, "clock_origin": "advisory", "advisory_date": "2026-08-12", "advisory_days_public": 56, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2820.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-91131", "state": "RESERVED", "public_date": "2026-08-12", "sources": "zdi", "feed_count": 1, "dates": { "zdi": "2026-08-12" }, "refs": "zdi:ZDI-26-563", "description": "ZDI advisory ZDI-26-563", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 56, "clock_known": true, "hours_public": 1344, "clock_origin": "advisory", "advisory_date": "2026-08-12", "advisory_days_public": 56, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "zdi": "https://www.zerodayinitiative.com/advisories/ZDI-26-563/" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-53526", "state": "RESERVED", "public_date": "2026-08-13", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-13" }, "refs": "ghsa-repos:dzikoysk/reposilite\tGHSA-7944-89x5-52q9", "description": "dzikoysk/reposilite repository advisory GHSA-7944-89x5-52q9", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 55, "clock_known": true, "hours_public": 1320, "clock_origin": "advisory", "advisory_date": "2026-08-13", "advisory_days_public": 55, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/dzikoysk/reposilite/security/advisories/GHSA-7944-89x5-52q9" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77460", "state": "RESERVED", "public_date": "2026-08-13", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-13" }, "refs": "ghsa-repos:espocrm/espocrm\tGHSA-28w2-h88g-6vgv", "description": "espocrm/espocrm repository advisory GHSA-28w2-h88g-6vgv", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 55, "clock_known": true, "hours_public": 1320, "clock_origin": "advisory", "advisory_date": "2026-08-13", "advisory_days_public": 55, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/espocrm/espocrm/security/advisories/GHSA-28w2-h88g-6vgv" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-75505", "state": "RESERVED", "public_date": "2026-08-13", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-13" }, "refs": "ghsa-repos:espocrm/espocrm\tGHSA-24pg-2q7q-m5p6", "description": "espocrm/espocrm repository advisory GHSA-24pg-2q7q-m5p6", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 55, "clock_known": true, "hours_public": 1320, "clock_origin": "advisory", "advisory_date": "2026-08-13", "advisory_days_public": 55, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/espocrm/espocrm/security/advisories/GHSA-24pg-2q7q-m5p6" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-73503", "state": "RESERVED", "public_date": "2026-08-13", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-13" }, "refs": "ghsa-repos:owncloud/security-advisories\tGHSA-j4jg-hf2g-h4j2", "description": "owncloud/security-advisories repository advisory GHSA-j4jg-hf2g-h4j2", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 55, "clock_known": true, "hours_public": 1320, "clock_origin": "advisory", "advisory_date": "2026-08-13", "advisory_days_public": 55, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/owncloud/security-advisories/security/advisories/GHSA-j4jg-hf2g-h4j2" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-67212", "state": "RESERVED", "public_date": "2026-08-13", "sources": "zdi", "feed_count": 1, "dates": { "zdi": "2026-08-13" }, "refs": "zdi:ZDI-26-577", "description": "ZDI advisory ZDI-26-577", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 55, "clock_known": true, "hours_public": 1320, "clock_origin": "advisory", "advisory_date": "2026-08-13", "advisory_days_public": 55, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "zdi": "https://www.zerodayinitiative.com/advisories/ZDI-26-577/" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-35511", "state": "RESERVED", "public_date": "2026-08-14", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-08-14", "osv": "2026-08-14" }, "refs": "ghsa:GHSA-29rf-f4vv-pvq6;osv:Go:github.com/authorizerdev/authorizer", "description": "Authorizer: Zero-click account takeover via OAuth identity linking to unverified email accounts", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 54, "clock_known": true, "hours_public": 1296, "clock_origin": "advisory", "advisory_date": "2026-08-14", "advisory_days_public": 54, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "github.com/authorizerdev/authorizer", "ecosystem": "Go", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-29rf-f4vv-pvq6", "osv": "https://osv.dev/list?q=CVE-2026-35511" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-94476", "state": "RESERVED", "public_date": "2026-08-14", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-14" }, "refs": "ghsa-repos:ChurchCRM/CRM\tGHSA-v4x7-hgpq-29r6", "description": "ChurchCRM/CRM repository advisory GHSA-v4x7-hgpq-29r6", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 54, "clock_known": true, "hours_public": 1296, "clock_origin": "advisory", "advisory_date": "2026-08-14", "advisory_days_public": 54, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ChurchCRM/CRM/security/advisories/GHSA-v4x7-hgpq-29r6" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-94480", "state": "RESERVED", "public_date": "2026-08-14", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-14" }, "refs": "ghsa-repos:ChurchCRM/CRM\tGHSA-82rp-5vf3-pc5r", "description": "ChurchCRM/CRM repository advisory GHSA-82rp-5vf3-pc5r", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 54, "clock_known": true, "hours_public": 1296, "clock_origin": "advisory", "advisory_date": "2026-08-14", "advisory_days_public": 54, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ChurchCRM/CRM/security/advisories/GHSA-82rp-5vf3-pc5r" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-94481", "state": "RESERVED", "public_date": "2026-08-14", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-14" }, "refs": "ghsa-repos:ChurchCRM/CRM\tGHSA-wppr-wvw2-hxw6", "description": "ChurchCRM/CRM repository advisory GHSA-wppr-wvw2-hxw6", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 54, "clock_known": true, "hours_public": 1296, "clock_origin": "advisory", "advisory_date": "2026-08-14", "advisory_days_public": 54, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ChurchCRM/CRM/security/advisories/GHSA-wppr-wvw2-hxw6" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-94479", "state": "RESERVED", "public_date": "2026-08-14", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-14" }, "refs": "ghsa-repos:ChurchCRM/CRM\tGHSA-f8vm-66mm-9f4c", "description": "ChurchCRM/CRM repository advisory GHSA-f8vm-66mm-9f4c", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 54, "clock_known": true, "hours_public": 1296, "clock_origin": "advisory", "advisory_date": "2026-08-14", "advisory_days_public": 54, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ChurchCRM/CRM/security/advisories/GHSA-f8vm-66mm-9f4c" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-94475", "state": "RESERVED", "public_date": "2026-08-14", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-14" }, "refs": "ghsa-repos:ChurchCRM/CRM\tGHSA-6m8p-xqqp-v872", "description": "ChurchCRM/CRM repository advisory GHSA-6m8p-xqqp-v872", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 54, "clock_known": true, "hours_public": 1296, "clock_origin": "advisory", "advisory_date": "2026-08-14", "advisory_days_public": 54, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ChurchCRM/CRM/security/advisories/GHSA-6m8p-xqqp-v872" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-94478", "state": "RESERVED", "public_date": "2026-08-14", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-14" }, "refs": "ghsa-repos:ChurchCRM/CRM\tGHSA-864x-m2jj-h957", "description": "ChurchCRM/CRM repository advisory GHSA-864x-m2jj-h957", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 54, "clock_known": true, "hours_public": 1296, "clock_origin": "advisory", "advisory_date": "2026-08-14", "advisory_days_public": 54, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ChurchCRM/CRM/security/advisories/GHSA-864x-m2jj-h957" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-94477", "state": "RESERVED", "public_date": "2026-08-14", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-14" }, "refs": "ghsa-repos:ChurchCRM/CRM\tGHSA-9gpc-c4mc-w24j", "description": "ChurchCRM/CRM repository advisory GHSA-9gpc-c4mc-w24j", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 54, "clock_known": true, "hours_public": 1296, "clock_origin": "advisory", "advisory_date": "2026-08-14", "advisory_days_public": 54, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ChurchCRM/CRM/security/advisories/GHSA-9gpc-c4mc-w24j" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-93409", "state": "RESERVED", "public_date": "2026-08-14", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-14" }, "refs": "ghsa-repos:Shelf-nu/shelf.nu\tGHSA-jwvm-658j-g7p7", "description": "Shelf-nu/shelf.nu repository advisory GHSA-jwvm-658j-g7p7", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 54, "clock_known": true, "hours_public": 1296, "clock_origin": "advisory", "advisory_date": "2026-08-14", "advisory_days_public": 54, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Shelf-nu/shelf.nu/security/advisories/GHSA-jwvm-658j-g7p7" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-93408", "state": "RESERVED", "public_date": "2026-08-14", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-14" }, "refs": "ghsa-repos:Shelf-nu/shelf.nu\tGHSA-59xr-h3v6-74hf", "description": "Shelf-nu/shelf.nu repository advisory GHSA-59xr-h3v6-74hf", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 54, "clock_known": true, "hours_public": 1296, "clock_origin": "advisory", "advisory_date": "2026-08-14", "advisory_days_public": 54, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Shelf-nu/shelf.nu/security/advisories/GHSA-59xr-h3v6-74hf" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-85744", "state": "RESERVED", "public_date": "2026-08-14", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-14" }, "refs": "ghsa-repos:freescout-help-desk/freescout\tGHSA-v8vc-cmf9-gg2c", "description": "freescout-help-desk/freescout repository advisory GHSA-v8vc-cmf9-gg2c", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 54, "clock_known": true, "hours_public": 1296, "clock_origin": "advisory", "advisory_date": "2026-08-14", "advisory_days_public": 54, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-v8vc-cmf9-gg2c" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-85743", "state": "RESERVED", "public_date": "2026-08-14", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-14" }, "refs": "ghsa-repos:freescout-help-desk/freescout\tGHSA-6w8v-qp43-vg2h", "description": "freescout-help-desk/freescout repository advisory GHSA-6w8v-qp43-vg2h", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 54, "clock_known": true, "hours_public": 1296, "clock_origin": "advisory", "advisory_date": "2026-08-14", "advisory_days_public": 54, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-6w8v-qp43-vg2h" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-85742", "state": "RESERVED", "public_date": "2026-08-14", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-14" }, "refs": "ghsa-repos:freescout-help-desk/freescout\tGHSA-2g42-f97q-973x", "description": "freescout-help-desk/freescout repository advisory GHSA-2g42-f97q-973x", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 54, "clock_known": true, "hours_public": 1296, "clock_origin": "advisory", "advisory_date": "2026-08-14", "advisory_days_public": 54, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-2g42-f97q-973x" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-103985", "state": "RESERVED", "public_date": "2026-08-14", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-14" }, "refs": "ghsa-repos:freescout-help-desk/freescout\tGHSA-m4hc-rc98-38jc", "description": "freescout-help-desk/freescout repository advisory GHSA-m4hc-rc98-38jc", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 54, "clock_known": true, "hours_public": 1296, "clock_origin": "advisory", "advisory_date": "2026-08-14", "advisory_days_public": 54, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-m4hc-rc98-38jc" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-103984", "state": "RESERVED", "public_date": "2026-08-14", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-14" }, "refs": "ghsa-repos:freescout-help-desk/freescout\tGHSA-cr68-27qv-p5m4", "description": "freescout-help-desk/freescout repository advisory GHSA-cr68-27qv-p5m4", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 54, "clock_known": true, "hours_public": 1296, "clock_origin": "advisory", "advisory_date": "2026-08-14", "advisory_days_public": 54, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-cr68-27qv-p5m4" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-60008", "state": "RESERVED", "public_date": "2026-08-14", "sources": "alpine,csaf,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-08-14", "csaf": "2026-08-16" }, "refs": "alpine:gitea;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2863\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2863.json;ghsa-repos:go-gitea/gitea\tGHSA-7452-653r-6gp8", "description": "go-gitea/gitea repository advisory GHSA-7452-653r-6gp8", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 54, "clock_known": true, "hours_public": 1296, "clock_origin": "advisory", "advisory_date": "2026-08-14", "advisory_days_public": 54, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gitea", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-60008", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2863.json", "ghsa-repos": "https://github.com/go-gitea/gitea/security/advisories/GHSA-7452-653r-6gp8" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-73535", "state": "RESERVED", "public_date": "2026-08-14", "sources": "alpine,csaf,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-08-14", "csaf": "2026-08-16" }, "refs": "alpine:gitea;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2863\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2863.json;ghsa-repos:go-gitea/gitea\tGHSA-8xjr-x7rg-hp5h", "description": "go-gitea/gitea repository advisory GHSA-8xjr-x7rg-hp5h", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 54, "clock_known": true, "hours_public": 1296, "clock_origin": "advisory", "advisory_date": "2026-08-14", "advisory_days_public": 54, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gitea", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-73535", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2863.json", "ghsa-repos": "https://github.com/go-gitea/gitea/security/advisories/GHSA-8xjr-x7rg-hp5h" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-73539", "state": "RESERVED", "public_date": "2026-08-14", "sources": "alpine,csaf,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-08-14", "csaf": "2026-08-16" }, "refs": "alpine:gitea;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2863\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2863.json;ghsa-repos:go-gitea/gitea\tGHSA-579w-82gf-89m2", "description": "go-gitea/gitea repository advisory GHSA-579w-82gf-89m2", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 54, "clock_known": true, "hours_public": 1296, "clock_origin": "advisory", "advisory_date": "2026-08-14", "advisory_days_public": 54, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gitea", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-73539", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2863.json", "ghsa-repos": "https://github.com/go-gitea/gitea/security/advisories/GHSA-579w-82gf-89m2" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-73800", "state": "RESERVED", "public_date": "2026-08-14", "sources": "alpine,csaf,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-08-14", "csaf": "2026-08-16" }, "refs": "alpine:gitea;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2863\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2863.json;ghsa-repos:go-gitea/gitea\tGHSA-r9ch-mqjm-g67v", "description": "go-gitea/gitea repository advisory GHSA-r9ch-mqjm-g67v", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 54, "clock_known": true, "hours_public": 1296, "clock_origin": "advisory", "advisory_date": "2026-08-14", "advisory_days_public": 54, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gitea", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-73800", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2863.json", "ghsa-repos": "https://github.com/go-gitea/gitea/security/advisories/GHSA-r9ch-mqjm-g67v" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-73804", "state": "RESERVED", "public_date": "2026-08-14", "sources": "alpine,csaf,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-08-14", "csaf": "2026-08-16" }, "refs": "alpine:gitea;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2863\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2863.json;ghsa-repos:go-gitea/gitea\tGHSA-q55v-4cmj-xh65", "description": "go-gitea/gitea repository advisory GHSA-q55v-4cmj-xh65", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 54, "clock_known": true, "hours_public": 1296, "clock_origin": "advisory", "advisory_date": "2026-08-14", "advisory_days_public": 54, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gitea", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-73804", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2863.json", "ghsa-repos": "https://github.com/go-gitea/gitea/security/advisories/GHSA-q55v-4cmj-xh65" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-73814", "state": "RESERVED", "public_date": "2026-08-14", "sources": "alpine,csaf,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-08-14", "csaf": "2026-08-16" }, "refs": "alpine:gitea;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2863\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2863.json;ghsa-repos:go-gitea/gitea\tGHSA-h62v-wmrr-5qjq", "description": "go-gitea/gitea repository advisory GHSA-h62v-wmrr-5qjq", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 54, "clock_known": true, "hours_public": 1296, "clock_origin": "advisory", "advisory_date": "2026-08-14", "advisory_days_public": 54, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gitea", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-73814", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2863.json", "ghsa-repos": "https://github.com/go-gitea/gitea/security/advisories/GHSA-h62v-wmrr-5qjq" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-85711", "state": "RESERVED", "public_date": "2026-08-14", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-14" }, "refs": "ghsa-repos:leiweibau/Pi.Alert\tGHSA-66mg-wpcq-2phq", "description": "leiweibau/Pi.Alert repository advisory GHSA-66mg-wpcq-2phq", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 54, "clock_known": true, "hours_public": 1296, "clock_origin": "advisory", "advisory_date": "2026-08-14", "advisory_days_public": 54, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/leiweibau/Pi.Alert/security/advisories/GHSA-66mg-wpcq-2phq" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-19911", "state": "RESERVED", "public_date": "2026-08-14", "sources": "zdi", "feed_count": 1, "dates": { "zdi": "2026-08-14" }, "refs": "zdi:ZDI-26-526", "description": "ZDI advisory ZDI-26-526", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 54, "clock_known": true, "hours_public": 1296, "clock_origin": "advisory", "advisory_date": "2026-08-14", "advisory_days_public": 54, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "zdi": "https://www.zerodayinitiative.com/advisories/ZDI-26-526/" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-66021", "state": "RESERVED", "public_date": "2026-08-15", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-08-15" }, "refs": "alas:CVE-2026-66021;debian:qemu", "description": "virtio_gpu_resource_create_blob() stores the guest-controlled blob_size without checking it against the total size of the iov backing entries.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 53, "clock_known": true, "hours_public": 1272, "clock_origin": "advisory", "advisory_date": "2026-08-15", "advisory_days_public": 53, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-66021.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-66021" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-73802", "state": "RESERVED", "public_date": "2026-08-15", "sources": "ghsa,ghsa-repos,osv", "feed_count": 3, "dates": { "ghsa": "2026-10-02", "ghsa-repos": "2026-08-15", "osv": "2026-10-02" }, "refs": "ghsa-repos:go-gitea/gitea\tGHSA-x4q3-gcj3-m6cf;ghsa:GHSA-x4q3-gcj3-m6cf;osv:Go:gitea.com/gitea/runner", "description": "gitea-runner: workflow container.options passes host namespaces and capability flags to job container when privileged mode is disabled", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 53, "clock_known": true, "hours_public": 1272, "clock_origin": "advisory", "advisory_date": "2026-08-15", "advisory_days_public": 53, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gitea.com/gitea/runner", "ecosystem": "Go", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-x4q3-gcj3-m6cf", "ghsa-repos": "https://github.com/go-gitea/gitea/security/advisories/GHSA-x4q3-gcj3-m6cf", "osv": "https://osv.dev/list?q=CVE-2026-73802" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77457", "state": "RESERVED", "public_date": "2026-08-15", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-15" }, "refs": "ghsa-repos:CyclopsMC/IntegratedScripting\tGHSA-w75f-hm5x-8f6x", "description": "CyclopsMC/IntegratedScripting repository advisory GHSA-w75f-hm5x-8f6x", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 53, "clock_known": true, "hours_public": 1272, "clock_origin": "advisory", "advisory_date": "2026-08-15", "advisory_days_public": 53, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/CyclopsMC/IntegratedScripting/security/advisories/GHSA-w75f-hm5x-8f6x" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-86042", "state": "RESERVED", "public_date": "2026-08-15", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-15" }, "refs": "ghsa-repos:WeblateOrg/weblate\tGHSA-f66g-8pcg-jm8r", "description": "WeblateOrg/weblate repository advisory GHSA-f66g-8pcg-jm8r", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 53, "clock_known": true, "hours_public": 1272, "clock_origin": "advisory", "advisory_date": "2026-08-15", "advisory_days_public": 53, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/WeblateOrg/weblate/security/advisories/GHSA-f66g-8pcg-jm8r" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-19720", "state": "RESERVED", "public_date": "2026-08-16", "sources": "alas,csaf,debian", "feed_count": 3, "dates": { "alas": "2026-08-18", "csaf": "2026-08-16" }, "refs": "alas:CVE-2026-19720;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2860\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2860.json;debian:inetutils", "description": "talkd buffer overflow with long DNS names (from: )", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 52, "clock_known": true, "hours_public": 1248, "clock_origin": "advisory", "advisory_date": "2026-08-16", "advisory_days_public": 52, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "inetutils", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-19720.html", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2860.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-19720" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63318", "state": "RESERVED", "public_date": "2026-08-16", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-08-16" }, "refs": "alas:CVE-2026-63318;debian:qemu", "description": "QEMU's 9pfs readonly check at line 2108-2109 tests mode & O_TRUNC and mode & O_APPEND against the raw 9P open mode byte.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 52, "clock_known": true, "hours_public": 1248, "clock_origin": "advisory", "advisory_date": "2026-08-16", "advisory_days_public": 52, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-63318.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-63318" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-16457", "state": "RESERVED", "public_date": "2026-08-16", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-08-16" }, "refs": "alas:CVE-2026-16457;debian:qemu", "description": "Virtqueue handler functions in device emulation code often look something like this: while (!virtio_queue_empty(vq)) { ...pop and process virtqueue element... } virtio-blk, virtio-scsi, virtio-crypto, and vhost-shadow-virtqueue use this pattern.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 52, "clock_known": true, "hours_public": 1248, "clock_origin": "advisory", "advisory_date": "2026-08-16", "advisory_days_public": 52, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-16457.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-16457" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-50626", "state": "RESERVED", "public_date": "2026-08-16", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-08-16" }, "refs": "alas:CVE-2026-50626;debian:qemu", "description": "virtio-mmio reports VIRTQUEUE_MAX_SIZE (1024) as QUEUE_NUM_MAX for every queue, regardless of the size the device passes to virtio_add_queue(). This works by accident because QEMU mostly does not care about the ring size - the guest is the one allocating memory here.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 52, "clock_known": true, "hours_public": 1248, "clock_origin": "advisory", "advisory_date": "2026-08-16", "advisory_days_public": 52, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-50626.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-50626" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-94621", "state": "RESERVED", "public_date": "2026-08-16", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-16" }, "refs": "ghsa-repos:aliasvault/aliasvault\tGHSA-7hm6-fj4m-pf6f", "description": "aliasvault/aliasvault repository advisory GHSA-7hm6-fj4m-pf6f", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 52, "clock_known": true, "hours_public": 1248, "clock_origin": "advisory", "advisory_date": "2026-08-16", "advisory_days_public": 52, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/aliasvault/aliasvault/security/advisories/GHSA-7hm6-fj4m-pf6f" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62356", "state": "RESERVED", "public_date": "2026-08-17", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-08-17", "csaf": "2026-08-18" }, "refs": "csaf:SUSE Product Security Team\topenSUSE-SU-2026:11542-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11542-1.json;ghsa-repos:RedisBloom/RedisBloom\tGHSA-q5p6-hwxh-c23h", "description": "RedisBloom/RedisBloom repository advisory GHSA-q5p6-hwxh-c23h", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 51, "clock_known": true, "hours_public": 1224, "clock_origin": "advisory", "advisory_date": "2026-08-17", "advisory_days_public": 51, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11542-1.json", "ghsa-repos": "https://github.com/RedisBloom/RedisBloom/security/advisories/GHSA-q5p6-hwxh-c23h" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-93410", "state": "RESERVED", "public_date": "2026-08-17", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-17" }, "refs": "ghsa-repos:Shelf-nu/shelf.nu\tGHSA-vwgm-wmh3-8x9c", "description": "Shelf-nu/shelf.nu repository advisory GHSA-vwgm-wmh3-8x9c", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 51, "clock_known": true, "hours_public": 1224, "clock_origin": "advisory", "advisory_date": "2026-08-17", "advisory_days_public": 51, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Shelf-nu/shelf.nu/security/advisories/GHSA-vwgm-wmh3-8x9c" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-71550", "state": "RESERVED", "public_date": "2026-08-17", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-17" }, "refs": "ghsa-repos:SuiteCRM/SuiteCRM\tGHSA-cx24-rr7r-mxrg", "description": "SuiteCRM/SuiteCRM repository advisory GHSA-cx24-rr7r-mxrg", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 51, "clock_known": true, "hours_public": 1224, "clock_origin": "advisory", "advisory_date": "2026-08-17", "advisory_days_public": 51, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/SuiteCRM/SuiteCRM/security/advisories/GHSA-cx24-rr7r-mxrg" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-71548", "state": "RESERVED", "public_date": "2026-08-17", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-08-17", "csaf": "2026-08-17" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2870\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2870.json;ghsa-repos:SuiteCRM/SuiteCRM\tGHSA-239h-ffjr-v957", "description": "SuiteCRM/SuiteCRM repository advisory GHSA-239h-ffjr-v957", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 51, "clock_known": true, "hours_public": 1224, "clock_origin": "advisory", "advisory_date": "2026-08-17", "advisory_days_public": 51, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2870.json", "ghsa-repos": "https://github.com/SuiteCRM/SuiteCRM/security/advisories/GHSA-239h-ffjr-v957" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-71549", "state": "RESERVED", "public_date": "2026-08-17", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-17" }, "refs": "ghsa-repos:SuiteCRM/SuiteCRM-Core\tGHSA-mjjw-75gv-j5g5", "description": "SuiteCRM/SuiteCRM-Core repository advisory GHSA-mjjw-75gv-j5g5", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 51, "clock_known": true, "hours_public": 1224, "clock_origin": "advisory", "advisory_date": "2026-08-17", "advisory_days_public": 51, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/SuiteCRM/SuiteCRM-Core/security/advisories/GHSA-mjjw-75gv-j5g5" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104865", "state": "RESERVED", "public_date": "2026-08-17", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-17" }, "refs": "ghsa-repos:ZOO-Project/ZOO-Project\tGHSA-v4xm-42f4-rpg6", "description": "ZOO-Project/ZOO-Project repository advisory GHSA-v4xm-42f4-rpg6", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 51, "clock_known": true, "hours_public": 1224, "clock_origin": "advisory", "advisory_date": "2026-08-17", "advisory_days_public": 51, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ZOO-Project/ZOO-Project/security/advisories/GHSA-v4xm-42f4-rpg6" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104864", "state": "RESERVED", "public_date": "2026-08-17", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-17" }, "refs": "ghsa-repos:ZOO-Project/ZOO-Project\tGHSA-vw56-fpv7-qh5j", "description": "ZOO-Project/ZOO-Project repository advisory GHSA-vw56-fpv7-qh5j", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 51, "clock_known": true, "hours_public": 1224, "clock_origin": "advisory", "advisory_date": "2026-08-17", "advisory_days_public": 51, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ZOO-Project/ZOO-Project/security/advisories/GHSA-vw56-fpv7-qh5j" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-103975", "state": "RESERVED", "public_date": "2026-08-17", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-17" }, "refs": "ghsa-repos:appium/appium\tGHSA-qfxx-c367-67f8", "description": "appium/appium repository advisory GHSA-qfxx-c367-67f8", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 51, "clock_known": true, "hours_public": 1224, "clock_origin": "advisory", "advisory_date": "2026-08-17", "advisory_days_public": 51, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/appium/appium/security/advisories/GHSA-qfxx-c367-67f8" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-67418", "state": "RESERVED", "public_date": "2026-08-17", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-08-18", "csaf": "2026-08-17" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2881\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2881.json;ghsa-repos:rabbitmq/rabbitmq-server\tGHSA-jv99-v328-mvmm", "description": "rabbitmq/rabbitmq-server repository advisory GHSA-jv99-v328-mvmm", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 51, "clock_known": true, "hours_public": 1224, "clock_origin": "advisory", "advisory_date": "2026-08-17", "advisory_days_public": 51, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2881.json", "ghsa-repos": "https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-jv99-v328-mvmm" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62365", "state": "RESERVED", "public_date": "2026-08-17", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-08-18", "csaf": "2026-08-17" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-2883\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2883.json;ghsa-repos:wazuh/wazuh\tGHSA-whhr-gxxr-f6pm", "description": "wazuh/wazuh repository advisory GHSA-whhr-gxxr-f6pm", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 51, "clock_known": true, "hours_public": 1224, "clock_origin": "advisory", "advisory_date": "2026-08-17", "advisory_days_public": 51, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2883.json", "ghsa-repos": "https://github.com/wazuh/wazuh/security/advisories/GHSA-whhr-gxxr-f6pm" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-85059", "state": "RESERVED", "public_date": "2026-08-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-18" }, "refs": "ghsa-repos:OP-TEE/optee_os\tGHSA-4qww-fw8c-64mg", "description": "OP-TEE/optee_os repository advisory GHSA-4qww-fw8c-64mg", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 50, "clock_known": true, "hours_public": 1200, "clock_origin": "advisory", "advisory_date": "2026-08-18", "advisory_days_public": 50, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/OP-TEE/optee_os/security/advisories/GHSA-4qww-fw8c-64mg" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-103021", "state": "RESERVED", "public_date": "2026-08-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-18" }, "refs": "ghsa-repos:openemr/openemr\tGHSA-rr38-hpxq-wwff", "description": "openemr/openemr repository advisory GHSA-rr38-hpxq-wwff", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 50, "clock_known": true, "hours_public": 1200, "clock_origin": "advisory", "advisory_date": "2026-08-18", "advisory_days_public": 50, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/openemr/openemr/security/advisories/GHSA-rr38-hpxq-wwff" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-103020", "state": "RESERVED", "public_date": "2026-08-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-18" }, "refs": "ghsa-repos:openemr/openemr\tGHSA-q366-cv5v-83w8", "description": "openemr/openemr repository advisory GHSA-q366-cv5v-83w8", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 50, "clock_known": true, "hours_public": 1200, "clock_origin": "advisory", "advisory_date": "2026-08-18", "advisory_days_public": 50, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/openemr/openemr/security/advisories/GHSA-q366-cv5v-83w8" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-103019", "state": "RESERVED", "public_date": "2026-08-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-18" }, "refs": "ghsa-repos:openemr/openemr\tGHSA-5h9g-m7q2-pv45", "description": "openemr/openemr repository advisory GHSA-5h9g-m7q2-pv45", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 50, "clock_known": true, "hours_public": 1200, "clock_origin": "advisory", "advisory_date": "2026-08-18", "advisory_days_public": 50, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/openemr/openemr/security/advisories/GHSA-5h9g-m7q2-pv45" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104139", "state": "RESERVED", "public_date": "2026-08-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-18" }, "refs": "ghsa-repos:openemr/openemr\tGHSA-r3q3-p493-95x8", "description": "openemr/openemr repository advisory GHSA-r3q3-p493-95x8", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 50, "clock_known": true, "hours_public": 1200, "clock_origin": "advisory", "advisory_date": "2026-08-18", "advisory_days_public": 50, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/openemr/openemr/security/advisories/GHSA-r3q3-p493-95x8" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104138", "state": "RESERVED", "public_date": "2026-08-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-18" }, "refs": "ghsa-repos:openemr/openemr\tGHSA-6p9h-59cp-8hxj", "description": "openemr/openemr repository advisory GHSA-6p9h-59cp-8hxj", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 50, "clock_known": true, "hours_public": 1200, "clock_origin": "advisory", "advisory_date": "2026-08-18", "advisory_days_public": 50, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/openemr/openemr/security/advisories/GHSA-6p9h-59cp-8hxj" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104137", "state": "RESERVED", "public_date": "2026-08-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-18" }, "refs": "ghsa-repos:openemr/openemr\tGHSA-h5hw-xfj8-vgrv", "description": "openemr/openemr repository advisory GHSA-h5hw-xfj8-vgrv", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 50, "clock_known": true, "hours_public": 1200, "clock_origin": "advisory", "advisory_date": "2026-08-18", "advisory_days_public": 50, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/openemr/openemr/security/advisories/GHSA-h5hw-xfj8-vgrv" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104136", "state": "RESERVED", "public_date": "2026-08-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-18" }, "refs": "ghsa-repos:openemr/openemr\tGHSA-x6w3-3g4m-5m5v", "description": "openemr/openemr repository advisory GHSA-x6w3-3g4m-5m5v", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 50, "clock_known": true, "hours_public": 1200, "clock_origin": "advisory", "advisory_date": "2026-08-18", "advisory_days_public": 50, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/openemr/openemr/security/advisories/GHSA-x6w3-3g4m-5m5v" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104135", "state": "RESERVED", "public_date": "2026-08-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-18" }, "refs": "ghsa-repos:openemr/openemr\tGHSA-4269-grc6-qr62", "description": "openemr/openemr repository advisory GHSA-4269-grc6-qr62", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 50, "clock_known": true, "hours_public": 1200, "clock_origin": "advisory", "advisory_date": "2026-08-18", "advisory_days_public": 50, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/openemr/openemr/security/advisories/GHSA-4269-grc6-qr62" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104134", "state": "RESERVED", "public_date": "2026-08-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-18" }, "refs": "ghsa-repos:openemr/openemr\tGHSA-xhfm-5pwg-3cxv", "description": "openemr/openemr repository advisory GHSA-xhfm-5pwg-3cxv", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 50, "clock_known": true, "hours_public": 1200, "clock_origin": "advisory", "advisory_date": "2026-08-18", "advisory_days_public": 50, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/openemr/openemr/security/advisories/GHSA-xhfm-5pwg-3cxv" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104133", "state": "RESERVED", "public_date": "2026-08-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-18" }, "refs": "ghsa-repos:openemr/openemr\tGHSA-jh2v-595q-h9vc", "description": "openemr/openemr repository advisory GHSA-jh2v-595q-h9vc", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 50, "clock_known": true, "hours_public": 1200, "clock_origin": "advisory", "advisory_date": "2026-08-18", "advisory_days_public": 50, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/openemr/openemr/security/advisories/GHSA-jh2v-595q-h9vc" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-103939", "state": "RESERVED", "public_date": "2026-08-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-18" }, "refs": "ghsa-repos:openemr/openemr\tGHSA-xhv3-qr55-56h3", "description": "openemr/openemr repository advisory GHSA-xhv3-qr55-56h3", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 50, "clock_known": true, "hours_public": 1200, "clock_origin": "advisory", "advisory_date": "2026-08-18", "advisory_days_public": 50, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/openemr/openemr/security/advisories/GHSA-xhv3-qr55-56h3" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-103938", "state": "RESERVED", "public_date": "2026-08-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-18" }, "refs": "ghsa-repos:openemr/openemr\tGHSA-p8j4-vmx9-rfhj", "description": "openemr/openemr repository advisory GHSA-p8j4-vmx9-rfhj", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 50, "clock_known": true, "hours_public": 1200, "clock_origin": "advisory", "advisory_date": "2026-08-18", "advisory_days_public": 50, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/openemr/openemr/security/advisories/GHSA-p8j4-vmx9-rfhj" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-103935", "state": "RESERVED", "public_date": "2026-08-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-18" }, "refs": "ghsa-repos:openemr/openemr\tGHSA-pm2v-5p99-37p2", "description": "openemr/openemr repository advisory GHSA-pm2v-5p99-37p2", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 50, "clock_known": true, "hours_public": 1200, "clock_origin": "advisory", "advisory_date": "2026-08-18", "advisory_days_public": 50, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/openemr/openemr/security/advisories/GHSA-pm2v-5p99-37p2" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-65958", "state": "RESERVED", "public_date": "2026-08-19", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-19" }, "refs": "ghsa-repos:MacWarrior/clipbucket-v5\tGHSA-3v7j-cvjp-3xcq", "description": "MacWarrior/clipbucket-v5 repository advisory GHSA-3v7j-cvjp-3xcq", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 49, "clock_known": true, "hours_public": 1176, "clock_origin": "advisory", "advisory_date": "2026-08-19", "advisory_days_public": 49, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-3v7j-cvjp-3xcq" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-65821", "state": "RESERVED", "public_date": "2026-08-19", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-19" }, "refs": "ghsa-repos:MacWarrior/clipbucket-v5\tGHSA-cpf6-vvpr-hg2q", "description": "MacWarrior/clipbucket-v5 repository advisory GHSA-cpf6-vvpr-hg2q", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 49, "clock_known": true, "hours_public": 1176, "clock_origin": "advisory", "advisory_date": "2026-08-19", "advisory_days_public": 49, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-cpf6-vvpr-hg2q" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-65823", "state": "RESERVED", "public_date": "2026-08-19", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-19" }, "refs": "ghsa-repos:MacWarrior/clipbucket-v5\tGHSA-g22r-f6qr-x24m", "description": "MacWarrior/clipbucket-v5 repository advisory GHSA-g22r-f6qr-x24m", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 49, "clock_known": true, "hours_public": 1176, "clock_origin": "advisory", "advisory_date": "2026-08-19", "advisory_days_public": 49, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-g22r-f6qr-x24m" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-65826", "state": "RESERVED", "public_date": "2026-08-19", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-19" }, "refs": "ghsa-repos:MacWarrior/clipbucket-v5\tGHSA-pqr6-gpv5-j9mc", "description": "MacWarrior/clipbucket-v5 repository advisory GHSA-pqr6-gpv5-j9mc", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 49, "clock_known": true, "hours_public": 1176, "clock_origin": "advisory", "advisory_date": "2026-08-19", "advisory_days_public": 49, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-pqr6-gpv5-j9mc" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-93414", "state": "RESERVED", "public_date": "2026-08-19", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-19" }, "refs": "ghsa-repos:Shelf-nu/shelf.nu\tGHSA-m9ch-h468-7mh9", "description": "Shelf-nu/shelf.nu repository advisory GHSA-m9ch-h468-7mh9", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 49, "clock_known": true, "hours_public": 1176, "clock_origin": "advisory", "advisory_date": "2026-08-19", "advisory_days_public": 49, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Shelf-nu/shelf.nu/security/advisories/GHSA-m9ch-h468-7mh9" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-93413", "state": "RESERVED", "public_date": "2026-08-19", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-19" }, "refs": "ghsa-repos:Shelf-nu/shelf.nu\tGHSA-f3w7-26qj-w72r", "description": "Shelf-nu/shelf.nu repository advisory GHSA-f3w7-26qj-w72r", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 49, "clock_known": true, "hours_public": 1176, "clock_origin": "advisory", "advisory_date": "2026-08-19", "advisory_days_public": 49, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Shelf-nu/shelf.nu/security/advisories/GHSA-f3w7-26qj-w72r" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-93412", "state": "RESERVED", "public_date": "2026-08-19", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-19" }, "refs": "ghsa-repos:Shelf-nu/shelf.nu\tGHSA-mgp7-gf45-fxqg", "description": "Shelf-nu/shelf.nu repository advisory GHSA-mgp7-gf45-fxqg", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 49, "clock_known": true, "hours_public": 1176, "clock_origin": "advisory", "advisory_date": "2026-08-19", "advisory_days_public": 49, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Shelf-nu/shelf.nu/security/advisories/GHSA-mgp7-gf45-fxqg" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-93411", "state": "RESERVED", "public_date": "2026-08-19", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-19" }, "refs": "ghsa-repos:Shelf-nu/shelf.nu\tGHSA-wc84-38wc-wchr", "description": "Shelf-nu/shelf.nu repository advisory GHSA-wc84-38wc-wchr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 49, "clock_known": true, "hours_public": 1176, "clock_origin": "advisory", "advisory_date": "2026-08-19", "advisory_days_public": 49, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Shelf-nu/shelf.nu/security/advisories/GHSA-wc84-38wc-wchr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-12521", "state": "RESERVED", "public_date": "2026-08-19", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-19" }, "refs": "ghsa-repos:zephyrproject-rtos/zephyr\tGHSA-g5v9-xmfp-7gxm", "description": "zephyrproject-rtos/zephyr repository advisory GHSA-g5v9-xmfp-7gxm", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 49, "clock_known": true, "hours_public": 1176, "clock_origin": "advisory", "advisory_date": "2026-08-19", "advisory_days_public": 49, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-g5v9-xmfp-7gxm" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-92709", "state": "RESERVED", "public_date": "2026-08-20", "sources": "alas,debian,ghsa-repos", "feed_count": 3, "dates": { "alas": "2026-09-24", "ghsa-repos": "2026-08-20" }, "refs": "alas:CVE-2026-92709;debian:rsyslog;ghsa-repos:rsyslog/rsyslog\tGHSA-xmp9-244p-5ggv", "description": "rsyslog's omfile dynaFile facility intentionally allows templates to generate flexible output paths.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 48, "clock_known": true, "hours_public": 1152, "clock_origin": "advisory", "advisory_date": "2026-08-20", "advisory_days_public": 48, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "rsyslog", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-92709.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-92709", "ghsa-repos": "https://github.com/rsyslog/rsyslog/security/advisories/GHSA-xmp9-244p-5ggv" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63202", "state": "RESERVED", "public_date": "2026-08-20", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-08-20", "osv": "2026-08-20" }, "refs": "ghsa:GHSA-4899-mpch-38p3;osv:Maven:io.netty.incubator:netty-incubator-codec-bhttp", "description": "netty-incubator-codec-ohttp BinaryHttpParser: Unauthenticated CPU-exhaustion DoS via infinite loop in field-section decoding", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 48, "clock_known": true, "hours_public": 1152, "clock_origin": "advisory", "advisory_date": "2026-08-20", "advisory_days_public": 48, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "io.netty.incubator", "ecosystem": "Maven", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-4899-mpch-38p3", "osv": "https://osv.dev/list?q=CVE-2026-63202" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61827", "state": "RESERVED", "public_date": "2026-08-20", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-08-20", "osv": "2026-08-20" }, "refs": "ghsa:GHSA-hmq9-67w8-j5pw;osv:Maven:io.netty.incubator:netty-incubator-codec-bhttp", "description": "netty-incubator-codec-ohttp: BinaryHttpParser should enforce limits for variable lengths fields", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 48, "clock_known": true, "hours_public": 1152, "clock_origin": "advisory", "advisory_date": "2026-08-20", "advisory_days_public": 48, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "io.netty.incubator", "ecosystem": "Maven", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-hmq9-67w8-j5pw", "osv": "https://osv.dev/list?q=CVE-2026-61827" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63124", "state": "RESERVED", "public_date": "2026-08-20", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-08-20", "osv": "2026-08-20" }, "refs": "ghsa:GHSA-8cfx-wx3q-mh5q;osv:Maven:io.netty.incubator:netty-incubator-codec-bhttp", "description": "netty-incubator-codec-ohttp: Binary HTTP parser infinite loop on known-length field section boundary", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 48, "clock_known": true, "hours_public": 1152, "clock_origin": "advisory", "advisory_date": "2026-08-20", "advisory_days_public": 48, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "io.netty.incubator", "ecosystem": "Maven", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-8cfx-wx3q-mh5q", "osv": "https://osv.dev/list?q=CVE-2026-63124" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61799", "state": "RESERVED", "public_date": "2026-08-20", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-08-20", "osv": "2026-08-20" }, "refs": "ghsa:GHSA-pgrf-4654-3gq8;osv:Maven:io.netty.incubator:netty-incubator-codec-bhttp", "description": "netty-incubator-codec-ohttp: Binary HTTP parser unchecked varint length overflow causes decoder crash", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 48, "clock_known": true, "hours_public": 1152, "clock_origin": "advisory", "advisory_date": "2026-08-20", "advisory_days_public": 48, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "io.netty.incubator", "ecosystem": "Maven", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-pgrf-4654-3gq8", "osv": "https://osv.dev/list?q=CVE-2026-61799" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61798", "state": "RESERVED", "public_date": "2026-08-20", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-08-20", "osv": "2026-08-20" }, "refs": "ghsa:GHSA-2mc4-j865-9q4r;osv:Maven:io.netty.incubator:netty-incubator-codec-ohttp-hpke-classes-boringssl", "description": "netty-incubator-codec-ohttp: BoringSSL HPKE private key bytes exposed through toString() and exception messages", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 48, "clock_known": true, "hours_public": 1152, "clock_origin": "advisory", "advisory_date": "2026-08-20", "advisory_days_public": 48, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "io.netty.incubator", "ecosystem": "Maven", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-2mc4-j865-9q4r", "osv": "https://osv.dev/list?q=CVE-2026-61798" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-54162", "state": "RESERVED", "public_date": "2026-08-20", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-08-20", "osv": "2026-08-20" }, "refs": "ghsa:GHSA-x3g7-qrwc-f6c5;osv:Go:github.com/alexandre-daubois/ember", "description": "Ember has unneutralized terminal escape/control sequences from Caddy logs injected into the operator's TUI", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 48, "clock_known": true, "hours_public": 1152, "clock_origin": "advisory", "advisory_date": "2026-08-20", "advisory_days_public": 48, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "github.com/alexandre-daubois/ember", "ecosystem": "Go", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-x3g7-qrwc-f6c5", "osv": "https://osv.dev/list?q=CVE-2026-54162" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-92160", "state": "RESERVED", "public_date": "2026-08-20", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-20" }, "refs": "ghsa-repos:nasa/fprime\tGHSA-8r3j-ghrh-55mw", "description": "nasa/fprime repository advisory GHSA-8r3j-ghrh-55mw", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 48, "clock_known": true, "hours_public": 1152, "clock_origin": "advisory", "advisory_date": "2026-08-20", "advisory_days_public": 48, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/nasa/fprime/security/advisories/GHSA-8r3j-ghrh-55mw" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-92159", "state": "RESERVED", "public_date": "2026-08-20", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-20" }, "refs": "ghsa-repos:nasa/fprime\tGHSA-grrq-8rmr-xf83", "description": "nasa/fprime repository advisory GHSA-grrq-8rmr-xf83", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 48, "clock_known": true, "hours_public": 1152, "clock_origin": "advisory", "advisory_date": "2026-08-20", "advisory_days_public": 48, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/nasa/fprime/security/advisories/GHSA-grrq-8rmr-xf83" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-92158", "state": "RESERVED", "public_date": "2026-08-20", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-20" }, "refs": "ghsa-repos:nasa/fprime\tGHSA-vfwv-3qv7-jjjq", "description": "nasa/fprime repository advisory GHSA-vfwv-3qv7-jjjq", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 48, "clock_known": true, "hours_public": 1152, "clock_origin": "advisory", "advisory_date": "2026-08-20", "advisory_days_public": 48, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/nasa/fprime/security/advisories/GHSA-vfwv-3qv7-jjjq" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-92150", "state": "RESERVED", "public_date": "2026-08-20", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-20" }, "refs": "ghsa-repos:nasa/fprime\tGHSA-2mh6-f7jj-6c93", "description": "nasa/fprime repository advisory GHSA-2mh6-f7jj-6c93", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 48, "clock_known": true, "hours_public": 1152, "clock_origin": "advisory", "advisory_date": "2026-08-20", "advisory_days_public": 48, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/nasa/fprime/security/advisories/GHSA-2mh6-f7jj-6c93" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-92157", "state": "RESERVED", "public_date": "2026-08-20", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-20" }, "refs": "ghsa-repos:nasa/fprime\tGHSA-hcmw-g425-8h9g", "description": "nasa/fprime repository advisory GHSA-hcmw-g425-8h9g", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 48, "clock_known": true, "hours_public": 1152, "clock_origin": "advisory", "advisory_date": "2026-08-20", "advisory_days_public": 48, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/nasa/fprime/security/advisories/GHSA-hcmw-g425-8h9g" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-92156", "state": "RESERVED", "public_date": "2026-08-20", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-20" }, "refs": "ghsa-repos:nasa/fprime\tGHSA-6fxx-mgfv-55g7", "description": "nasa/fprime repository advisory GHSA-6fxx-mgfv-55g7", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 48, "clock_known": true, "hours_public": 1152, "clock_origin": "advisory", "advisory_date": "2026-08-20", "advisory_days_public": 48, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/nasa/fprime/security/advisories/GHSA-6fxx-mgfv-55g7" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-92155", "state": "RESERVED", "public_date": "2026-08-20", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-20" }, "refs": "ghsa-repos:nasa/fprime\tGHSA-3534-8qg7-6cf5", "description": "nasa/fprime repository advisory GHSA-3534-8qg7-6cf5", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 48, "clock_known": true, "hours_public": 1152, "clock_origin": "advisory", "advisory_date": "2026-08-20", "advisory_days_public": 48, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/nasa/fprime/security/advisories/GHSA-3534-8qg7-6cf5" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-92154", "state": "RESERVED", "public_date": "2026-08-20", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-20" }, "refs": "ghsa-repos:nasa/fprime\tGHSA-wx8q-q5gx-f54p", "description": "nasa/fprime repository advisory GHSA-wx8q-q5gx-f54p", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 48, "clock_known": true, "hours_public": 1152, "clock_origin": "advisory", "advisory_date": "2026-08-20", "advisory_days_public": 48, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/nasa/fprime/security/advisories/GHSA-wx8q-q5gx-f54p" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-92153", "state": "RESERVED", "public_date": "2026-08-20", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-20" }, "refs": "ghsa-repos:nasa/fprime\tGHSA-5rfj-hw2g-vwmv", "description": "nasa/fprime repository advisory GHSA-5rfj-hw2g-vwmv", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 48, "clock_known": true, "hours_public": 1152, "clock_origin": "advisory", "advisory_date": "2026-08-20", "advisory_days_public": 48, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/nasa/fprime/security/advisories/GHSA-5rfj-hw2g-vwmv" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-92152", "state": "RESERVED", "public_date": "2026-08-20", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-20" }, "refs": "ghsa-repos:nasa/fprime\tGHSA-vv4x-5pmf-m59g", "description": "nasa/fprime repository advisory GHSA-vv4x-5pmf-m59g", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 48, "clock_known": true, "hours_public": 1152, "clock_origin": "advisory", "advisory_date": "2026-08-20", "advisory_days_public": 48, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/nasa/fprime/security/advisories/GHSA-vv4x-5pmf-m59g" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-92146", "state": "RESERVED", "public_date": "2026-08-20", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-20" }, "refs": "ghsa-repos:ondata/ckan-mcp-server\tGHSA-x32r-mh7g-q2rf", "description": "ondata/ckan-mcp-server repository advisory GHSA-x32r-mh7g-q2rf", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 48, "clock_known": true, "hours_public": 1152, "clock_origin": "advisory", "advisory_date": "2026-08-20", "advisory_days_public": 48, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ondata/ckan-mcp-server/security/advisories/GHSA-x32r-mh7g-q2rf" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77682", "state": "RESERVED", "public_date": "2026-08-21", "sources": "csaf,debian", "feed_count": 2, "dates": { "csaf": "2026-08-21" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-77682\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77682.json;debian:epiphany-browser", "description": "epiphany: epiphany: JavaScript code injection in autofill via unsanitized CSS selector from element id", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 47, "clock_known": true, "hours_public": 1128, "clock_origin": "advisory", "advisory_date": "2026-08-21", "advisory_days_public": 47, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "epiphany-browser", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77682.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-77682" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-92163", "state": "RESERVED", "public_date": "2026-08-21", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-21" }, "refs": "ghsa-repos:dartiss/code-embed\tGHSA-7p8v-4g9w-9qfp", "description": "dartiss/code-embed repository advisory GHSA-7p8v-4g9w-9qfp", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 47, "clock_known": true, "hours_public": 1128, "clock_origin": "advisory", "advisory_date": "2026-08-21", "advisory_days_public": 47, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/dartiss/code-embed/security/advisories/GHSA-7p8v-4g9w-9qfp" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77617", "state": "RESERVED", "public_date": "2026-08-21", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-21" }, "refs": "ghsa-repos:dartiss/code-embed\tGHSA-qrwc-v5hh-f395", "description": "dartiss/code-embed repository advisory GHSA-qrwc-v5hh-f395", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 47, "clock_known": true, "hours_public": 1128, "clock_origin": "advisory", "advisory_date": "2026-08-21", "advisory_days_public": 47, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/dartiss/code-embed/security/advisories/GHSA-qrwc-v5hh-f395" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77679", "state": "RESERVED", "public_date": "2026-08-21", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-08-21" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-77679\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77679.json", "description": "epiphany: epiphany: path traversal in WebExtension XPI extraction (ZIP slip)", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 47, "clock_known": true, "hours_public": 1128, "clock_origin": "advisory", "advisory_date": "2026-08-21", "advisory_days_public": 47, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77679.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-16658", "state": "RESERVED", "public_date": "2026-08-22", "sources": "alas,csaf,debian,redhat", "feed_count": 4, "dates": { "alas": "2026-09-02", "redhat": "2026-08-22", "csaf": "2026-08-22" }, "refs": "alas:CVE-2026-16658;csaf:Red Hat Product Security\tCVE-2026-16658\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-16658.json;debian:ansible;redhat:CVE-2026-16658", "description": "A flaw was found in the community.proxmox Ansible collection's proxmox_pct_remote connection plugin.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 46, "clock_known": true, "hours_public": 1104, "clock_origin": "advisory", "advisory_date": "2026-08-22", "advisory_days_public": 46, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "ansible", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-16658.html", "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-16658.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-16658", "redhat": "https://access.redhat.com/security/cve/CVE-2026-16658" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-43923", "state": "RESERVED", "public_date": "2026-08-22", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-08-22" }, "refs": "csaf:SUSE Product Security Team\topenSUSE-SU-2026:11573-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11573-1.json", "description": "CVE-2026-43923", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 46, "clock_known": true, "hours_public": 1104, "clock_origin": "advisory", "advisory_date": "2026-08-22", "advisory_days_public": 46, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11573-1.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-102354", "state": "RESERVED", "public_date": "2026-08-23", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-23" }, "refs": "ghsa-repos:alam00000/bentopdf\tGHSA-wh78-rcw2-hhg9", "description": "alam00000/bentopdf repository advisory GHSA-wh78-rcw2-hhg9", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 45, "clock_known": true, "hours_public": 1080, "clock_origin": "advisory", "advisory_date": "2026-08-23", "advisory_days_public": 45, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/alam00000/bentopdf/security/advisories/GHSA-wh78-rcw2-hhg9" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-46381", "state": "RESERVED", "public_date": "2026-08-24", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-24" }, "refs": "ghsa-repos:CloudburstMC/Network\tGHSA-f43c-g459-93vr", "description": "CloudburstMC/Network repository advisory GHSA-f43c-g459-93vr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 44, "clock_known": true, "hours_public": 1056, "clock_origin": "advisory", "advisory_date": "2026-08-24", "advisory_days_public": 44, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/CloudburstMC/Network/security/advisories/GHSA-f43c-g459-93vr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104877", "state": "RESERVED", "public_date": "2026-08-24", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-24" }, "refs": "ghsa-repos:IBM/mcp-context-forge\tGHSA-x39c-q2jx-f325", "description": "IBM/mcp-context-forge repository advisory GHSA-x39c-q2jx-f325", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 44, "clock_known": true, "hours_public": 1056, "clock_origin": "advisory", "advisory_date": "2026-08-24", "advisory_days_public": 44, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/IBM/mcp-context-forge/security/advisories/GHSA-x39c-q2jx-f325" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104150", "state": "RESERVED", "public_date": "2026-08-24", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-24" }, "refs": "ghsa-repos:adonisjs/http-server\tGHSA-524c-h47v-m3h8", "description": "adonisjs/http-server repository advisory GHSA-524c-h47v-m3h8", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 44, "clock_known": true, "hours_public": 1056, "clock_origin": "advisory", "advisory_date": "2026-08-24", "advisory_days_public": 44, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/adonisjs/http-server/security/advisories/GHSA-524c-h47v-m3h8" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104817", "state": "RESERVED", "public_date": "2026-08-24", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-24" }, "refs": "ghsa-repos:misskey-dev/misskey\tGHSA-4x7v-qx8f-g3p8", "description": "misskey-dev/misskey repository advisory GHSA-4x7v-qx8f-g3p8", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 44, "clock_known": true, "hours_public": 1056, "clock_origin": "advisory", "advisory_date": "2026-08-24", "advisory_days_public": 44, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/misskey-dev/misskey/security/advisories/GHSA-4x7v-qx8f-g3p8" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104816", "state": "RESERVED", "public_date": "2026-08-24", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-24" }, "refs": "ghsa-repos:misskey-dev/misskey\tGHSA-p73x-6qrq-34jc", "description": "misskey-dev/misskey repository advisory GHSA-p73x-6qrq-34jc", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 44, "clock_known": true, "hours_public": 1056, "clock_origin": "advisory", "advisory_date": "2026-08-24", "advisory_days_public": 44, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/misskey-dev/misskey/security/advisories/GHSA-p73x-6qrq-34jc" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-103937", "state": "RESERVED", "public_date": "2026-08-24", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-24" }, "refs": "ghsa-repos:misskey-dev/misskey\tGHSA-m9xp-2fvm-pfmq", "description": "misskey-dev/misskey repository advisory GHSA-m9xp-2fvm-pfmq", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 44, "clock_known": true, "hours_public": 1056, "clock_origin": "advisory", "advisory_date": "2026-08-24", "advisory_days_public": 44, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/misskey-dev/misskey/security/advisories/GHSA-m9xp-2fvm-pfmq" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-97693", "state": "RESERVED", "public_date": "2026-08-24", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-24" }, "refs": "ghsa-repos:xerrors/Yuxi\tGHSA-qpm5-6332-9445", "description": "xerrors/Yuxi repository advisory GHSA-qpm5-6332-9445", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 44, "clock_known": true, "hours_public": 1056, "clock_origin": "advisory", "advisory_date": "2026-08-24", "advisory_days_public": 44, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/xerrors/Yuxi/security/advisories/GHSA-qpm5-6332-9445" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-102686", "state": "RESERVED", "public_date": "2026-08-25", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-25" }, "refs": "ghsa-repos:baresip/re\tGHSA-xq94-fj3h-cfc2", "description": "baresip/re repository advisory GHSA-xq94-fj3h-cfc2", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 43, "clock_known": true, "hours_public": 1032, "clock_origin": "advisory", "advisory_date": "2026-08-25", "advisory_days_public": 43, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/baresip/re/security/advisories/GHSA-xq94-fj3h-cfc2" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-102660", "state": "RESERVED", "public_date": "2026-08-25", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-25" }, "refs": "ghsa-repos:baresip/re\tGHSA-cmr8-q82c-59xv", "description": "baresip/re repository advisory GHSA-cmr8-q82c-59xv", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 43, "clock_known": true, "hours_public": 1032, "clock_origin": "advisory", "advisory_date": "2026-08-25", "advisory_days_public": 43, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/baresip/re/security/advisories/GHSA-cmr8-q82c-59xv" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104884", "state": "RESERVED", "public_date": "2026-08-25", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-25" }, "refs": "ghsa-repos:contao/contao\tGHSA-h57j-5f5m-789v", "description": "contao/contao repository advisory GHSA-h57j-5f5m-789v", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 43, "clock_known": true, "hours_public": 1032, "clock_origin": "advisory", "advisory_date": "2026-08-25", "advisory_days_public": 43, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/contao/contao/security/advisories/GHSA-h57j-5f5m-789v" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104883", "state": "RESERVED", "public_date": "2026-08-25", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-25" }, "refs": "ghsa-repos:contao/contao\tGHSA-r9qp-pqx5-8369", "description": "contao/contao repository advisory GHSA-r9qp-pqx5-8369", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 43, "clock_known": true, "hours_public": 1032, "clock_origin": "advisory", "advisory_date": "2026-08-25", "advisory_days_public": 43, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/contao/contao/security/advisories/GHSA-r9qp-pqx5-8369" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104882", "state": "RESERVED", "public_date": "2026-08-25", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-25" }, "refs": "ghsa-repos:contao/contao\tGHSA-23w9-4pg3-xwm3", "description": "contao/contao repository advisory GHSA-23w9-4pg3-xwm3", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 43, "clock_known": true, "hours_public": 1032, "clock_origin": "advisory", "advisory_date": "2026-08-25", "advisory_days_public": 43, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/contao/contao/security/advisories/GHSA-23w9-4pg3-xwm3" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104881", "state": "RESERVED", "public_date": "2026-08-25", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-25" }, "refs": "ghsa-repos:contao/contao\tGHSA-3r9g-pfhv-3228", "description": "contao/contao repository advisory GHSA-3r9g-pfhv-3228", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 43, "clock_known": true, "hours_public": 1032, "clock_origin": "advisory", "advisory_date": "2026-08-25", "advisory_days_public": 43, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/contao/contao/security/advisories/GHSA-3r9g-pfhv-3228" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-25946", "state": "RESERVED", "public_date": "2026-08-25", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-08-25", "csaf": "2026-08-25" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3010\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3010.json;ghsa-repos:go-gitea/gitea\tGHSA-9574-292w-9wmw", "description": "go-gitea/gitea repository advisory GHSA-9574-292w-9wmw", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 43, "clock_known": true, "hours_public": 1032, "clock_origin": "advisory", "advisory_date": "2026-08-25", "advisory_days_public": 43, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3010.json", "ghsa-repos": "https://github.com/go-gitea/gitea/security/advisories/GHSA-9574-292w-9wmw" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-78360", "state": "RESERVED", "public_date": "2026-08-25", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2026-08-25", "csaf": "2026-08-25" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-78360\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-78360.json;redhat:CVE-2026-78360", "description": "anitya: anitya: missing authorization check in delete_user allows any authenticated user to delete arbitrary users", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 43, "clock_known": true, "hours_public": 1032, "clock_origin": "advisory", "advisory_date": "2026-08-25", "advisory_days_public": 43, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2026-78360", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-78360.json", "redhat": "https://access.redhat.com/security/cve/CVE-2026-78360" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-44701", "state": "RESERVED", "public_date": "2026-08-26", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-08-26", "osv": "2026-08-26" }, "refs": "ghsa:GHSA-crx4-7mmq-j74j;osv:Packagist:devcode-it/openstamanager", "description": "OpenSTAManager has HTML Injection in modules/utenti/edit.php", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 42, "clock_known": true, "hours_public": 1008, "clock_origin": "advisory", "advisory_date": "2026-08-26", "advisory_days_public": 42, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "devcode-it/openstamanager", "ecosystem": "Packagist", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-crx4-7mmq-j74j", "osv": "https://osv.dev/list?q=CVE-2026-44701" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-69132", "state": "RESERVED", "public_date": "2026-08-26", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-26" }, "refs": "ghsa-repos:fedify-dev/fedify\tGHSA-fx98-wc5v-jrg5", "description": "fedify-dev/fedify repository advisory GHSA-fx98-wc5v-jrg5", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 42, "clock_known": true, "hours_public": 1008, "clock_origin": "advisory", "advisory_date": "2026-08-26", "advisory_days_public": 42, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/fedify-dev/fedify/security/advisories/GHSA-fx98-wc5v-jrg5" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77632", "state": "RESERVED", "public_date": "2026-08-26", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-26" }, "refs": "ghsa-repos:fedify-dev/fedify\tGHSA-cxc3-7q96-6cpx", "description": "fedify-dev/fedify repository advisory GHSA-cxc3-7q96-6cpx", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 42, "clock_known": true, "hours_public": 1008, "clock_origin": "advisory", "advisory_date": "2026-08-26", "advisory_days_public": 42, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/fedify-dev/fedify/security/advisories/GHSA-cxc3-7q96-6cpx" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-81500", "state": "RESERVED", "public_date": "2026-08-27", "sources": "alpine,debian,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-08-27" }, "refs": "alpine:incus-feature;debian:incus;ghsa-repos:lxc/incus\tGHSA-9pqw-c7m4-xvg7", "description": "lxc/incus repository advisory GHSA-9pqw-c7m4-xvg7", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 41, "clock_known": true, "hours_public": 984, "clock_origin": "advisory", "advisory_date": "2026-08-27", "advisory_days_public": 41, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "incus-feature", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-81500", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-81500", "ghsa-repos": "https://github.com/lxc/incus/security/advisories/GHSA-9pqw-c7m4-xvg7" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-81501", "state": "RESERVED", "public_date": "2026-08-27", "sources": "alpine,debian,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-08-27" }, "refs": "alpine:incus-feature;debian:incus;ghsa-repos:lxc/incus\tGHSA-c6wx-8679-hpr9", "description": "lxc/incus repository advisory GHSA-c6wx-8679-hpr9", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 41, "clock_known": true, "hours_public": 984, "clock_origin": "advisory", "advisory_date": "2026-08-27", "advisory_days_public": 41, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "incus-feature", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-81501", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-81501", "ghsa-repos": "https://github.com/lxc/incus/security/advisories/GHSA-c6wx-8679-hpr9" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84985", "state": "RESERVED", "public_date": "2026-08-27", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-27" }, "refs": "ghsa-repos:ckan/ckan\tGHSA-p5rh-49m9-56vx", "description": "ckan/ckan repository advisory GHSA-p5rh-49m9-56vx", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 41, "clock_known": true, "hours_public": 984, "clock_origin": "advisory", "advisory_date": "2026-08-27", "advisory_days_public": 41, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ckan/ckan/security/advisories/GHSA-p5rh-49m9-56vx" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84986", "state": "RESERVED", "public_date": "2026-08-27", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-27" }, "refs": "ghsa-repos:ckan/ckan\tGHSA-jgwg-vp4m-5xw5", "description": "ckan/ckan repository advisory GHSA-jgwg-vp4m-5xw5", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 41, "clock_known": true, "hours_public": 984, "clock_origin": "advisory", "advisory_date": "2026-08-27", "advisory_days_public": 41, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ckan/ckan/security/advisories/GHSA-jgwg-vp4m-5xw5" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104773", "state": "RESERVED", "public_date": "2026-08-27", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-27" }, "refs": "ghsa-repos:ckan/ckan\tGHSA-6499-jgj4-2wpf", "description": "ckan/ckan repository advisory GHSA-6499-jgj4-2wpf", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 41, "clock_known": true, "hours_public": 984, "clock_origin": "advisory", "advisory_date": "2026-08-27", "advisory_days_public": 41, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ckan/ckan/security/advisories/GHSA-6499-jgj4-2wpf" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104772", "state": "RESERVED", "public_date": "2026-08-27", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-27" }, "refs": "ghsa-repos:ckan/ckan\tGHSA-3g5q-3wf6-p8rc", "description": "ckan/ckan repository advisory GHSA-3g5q-3wf6-p8rc", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 41, "clock_known": true, "hours_public": 984, "clock_origin": "advisory", "advisory_date": "2026-08-27", "advisory_days_public": 41, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ckan/ckan/security/advisories/GHSA-3g5q-3wf6-p8rc" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104770", "state": "RESERVED", "public_date": "2026-08-27", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-27" }, "refs": "ghsa-repos:ckan/ckan\tGHSA-8hw7-23gj-5599", "description": "ckan/ckan repository advisory GHSA-8hw7-23gj-5599", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 41, "clock_known": true, "hours_public": 984, "clock_origin": "advisory", "advisory_date": "2026-08-27", "advisory_days_public": 41, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ckan/ckan/security/advisories/GHSA-8hw7-23gj-5599" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104771", "state": "RESERVED", "public_date": "2026-08-27", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-27" }, "refs": "ghsa-repos:ckan/ckan\tGHSA-73fv-x47v-f4j5", "description": "ckan/ckan repository advisory GHSA-73fv-x47v-f4j5", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 41, "clock_known": true, "hours_public": 984, "clock_origin": "advisory", "advisory_date": "2026-08-27", "advisory_days_public": 41, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ckan/ckan/security/advisories/GHSA-73fv-x47v-f4j5" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-69182", "state": "RESERVED", "public_date": "2026-08-27", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-27" }, "refs": "ghsa-repos:gunet/openeclass\tGHSA-chpp-rhg9-4h48", "description": "gunet/openeclass repository advisory GHSA-chpp-rhg9-4h48", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 41, "clock_known": true, "hours_public": 984, "clock_origin": "advisory", "advisory_date": "2026-08-27", "advisory_days_public": 41, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/gunet/openeclass/security/advisories/GHSA-chpp-rhg9-4h48" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-106495", "state": "RESERVED", "public_date": "2026-08-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-28" }, "refs": "ghsa-repos:backstage/backstage\tGHSA-3xr5-8w6c-p5gw", "description": "backstage/backstage repository advisory GHSA-3xr5-8w6c-p5gw", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 40, "clock_known": true, "hours_public": 960, "clock_origin": "advisory", "advisory_date": "2026-08-28", "advisory_days_public": 40, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/backstage/backstage/security/advisories/GHSA-3xr5-8w6c-p5gw" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-103003", "state": "RESERVED", "public_date": "2026-08-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-28" }, "refs": "ghsa-repos:stacklok/toolhive\tGHSA-2grq-6q89-rhxx", "description": "stacklok/toolhive repository advisory GHSA-2grq-6q89-rhxx", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 40, "clock_known": true, "hours_public": 960, "clock_origin": "advisory", "advisory_date": "2026-08-28", "advisory_days_public": 40, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/stacklok/toolhive/security/advisories/GHSA-2grq-6q89-rhxx" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-102672", "state": "RESERVED", "public_date": "2026-08-29", "sources": "ghsa,ghsa-repos,osv", "feed_count": 3, "dates": { "ghsa": "2026-09-29", "ghsa-repos": "2026-08-29", "osv": "2026-09-29" }, "refs": "ghsa-repos:electron/electron\tGHSA-vv43-5jgx-7qv8;ghsa:GHSA-vv43-5jgx-7qv8;osv:npm:electron", "description": "Electron: Local race condition in Squirrel.Mac update installation on macOS", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 39, "clock_known": true, "hours_public": 936, "clock_origin": "advisory", "advisory_date": "2026-08-29", "advisory_days_public": 39, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "electron", "ecosystem": "npm", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-vv43-5jgx-7qv8", "ghsa-repos": "https://github.com/electron/electron/security/advisories/GHSA-vv43-5jgx-7qv8", "osv": "https://osv.dev/list?q=CVE-2026-102672" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-70396", "state": "RESERVED", "public_date": "2026-08-29", "sources": "alpine,csaf,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-08-29", "csaf": "2026-08-30" }, "refs": "alpine:gitea;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3079\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json;ghsa-repos:go-gitea/gitea\tGHSA-hxhc-246f-rvqc", "description": "go-gitea/gitea repository advisory GHSA-hxhc-246f-rvqc", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 39, "clock_known": true, "hours_public": 936, "clock_origin": "advisory", "advisory_date": "2026-08-29", "advisory_days_public": 39, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gitea", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-70396", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json", "ghsa-repos": "https://github.com/go-gitea/gitea/security/advisories/GHSA-hxhc-246f-rvqc" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-70400", "state": "RESERVED", "public_date": "2026-08-29", "sources": "alpine,csaf,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-08-29", "csaf": "2026-08-30" }, "refs": "alpine:gitea;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3079\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json;ghsa-repos:go-gitea/gitea\tGHSA-x58h-3mx5-q44r", "description": "go-gitea/gitea repository advisory GHSA-x58h-3mx5-q44r", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 39, "clock_known": true, "hours_public": 936, "clock_origin": "advisory", "advisory_date": "2026-08-29", "advisory_days_public": 39, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gitea", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-70400", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json", "ghsa-repos": "https://github.com/go-gitea/gitea/security/advisories/GHSA-x58h-3mx5-q44r" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-70402", "state": "RESERVED", "public_date": "2026-08-29", "sources": "alpine,csaf,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-08-29", "csaf": "2026-08-30" }, "refs": "alpine:gitea;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3079\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json;ghsa-repos:go-gitea/gitea\tGHSA-pq8x-xpgp-rvmh", "description": "go-gitea/gitea repository advisory GHSA-pq8x-xpgp-rvmh", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 39, "clock_known": true, "hours_public": 936, "clock_origin": "advisory", "advisory_date": "2026-08-29", "advisory_days_public": 39, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gitea", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-70402", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json", "ghsa-repos": "https://github.com/go-gitea/gitea/security/advisories/GHSA-pq8x-xpgp-rvmh" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-70407", "state": "RESERVED", "public_date": "2026-08-29", "sources": "alpine,csaf,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-08-29", "csaf": "2026-08-30" }, "refs": "alpine:gitea;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3079\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json;ghsa-repos:go-gitea/gitea\tGHSA-ww9q-7j5q-hrv5", "description": "go-gitea/gitea repository advisory GHSA-ww9q-7j5q-hrv5", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 39, "clock_known": true, "hours_public": 936, "clock_origin": "advisory", "advisory_date": "2026-08-29", "advisory_days_public": 39, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gitea", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-70407", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json", "ghsa-repos": "https://github.com/go-gitea/gitea/security/advisories/GHSA-ww9q-7j5q-hrv5" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-71184", "state": "RESERVED", "public_date": "2026-08-29", "sources": "alpine,csaf,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-08-29", "csaf": "2026-08-30" }, "refs": "alpine:gitea;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3079\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json;ghsa-repos:go-gitea/gitea\tGHSA-7w2r-xwp6-mh6c", "description": "go-gitea/gitea repository advisory GHSA-7w2r-xwp6-mh6c", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 39, "clock_known": true, "hours_public": 936, "clock_origin": "advisory", "advisory_date": "2026-08-29", "advisory_days_public": 39, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gitea", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-71184", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json", "ghsa-repos": "https://github.com/go-gitea/gitea/security/advisories/GHSA-7w2r-xwp6-mh6c" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-71301", "state": "RESERVED", "public_date": "2026-08-29", "sources": "alpine,csaf,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-08-29", "csaf": "2026-08-30" }, "refs": "alpine:gitea;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3079\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json;ghsa-repos:go-gitea/gitea\tGHSA-5w72-2mqm-qh46", "description": "go-gitea/gitea repository advisory GHSA-5w72-2mqm-qh46", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 39, "clock_known": true, "hours_public": 936, "clock_origin": "advisory", "advisory_date": "2026-08-29", "advisory_days_public": 39, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gitea", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-71301", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json", "ghsa-repos": "https://github.com/go-gitea/gitea/security/advisories/GHSA-5w72-2mqm-qh46" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-73504", "state": "RESERVED", "public_date": "2026-08-29", "sources": "alpine,csaf,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-08-29", "csaf": "2026-08-30" }, "refs": "alpine:gitea;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3079\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json;ghsa-repos:go-gitea/gitea\tGHSA-f8ph-p9p5-vg2p", "description": "go-gitea/gitea repository advisory GHSA-f8ph-p9p5-vg2p", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 39, "clock_known": true, "hours_public": 936, "clock_origin": "advisory", "advisory_date": "2026-08-29", "advisory_days_public": 39, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gitea", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-73504", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json", "ghsa-repos": "https://github.com/go-gitea/gitea/security/advisories/GHSA-f8ph-p9p5-vg2p" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-73126", "state": "RESERVED", "public_date": "2026-08-29", "sources": "alpine,csaf,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-08-29", "csaf": "2026-08-30" }, "refs": "alpine:gitea;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3079\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json;ghsa-repos:go-gitea/gitea\tGHSA-r96c-jc75-rxv6", "description": "go-gitea/gitea repository advisory GHSA-r96c-jc75-rxv6", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 39, "clock_known": true, "hours_public": 936, "clock_origin": "advisory", "advisory_date": "2026-08-29", "advisory_days_public": 39, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gitea", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-73126", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json", "ghsa-repos": "https://github.com/go-gitea/gitea/security/advisories/GHSA-r96c-jc75-rxv6" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-73130", "state": "RESERVED", "public_date": "2026-08-29", "sources": "alpine,csaf,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-08-29", "csaf": "2026-08-30" }, "refs": "alpine:gitea;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3079\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json;ghsa-repos:go-gitea/gitea\tGHSA-8r3w-5682-jrqf", "description": "go-gitea/gitea repository advisory GHSA-8r3w-5682-jrqf", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 39, "clock_known": true, "hours_public": 936, "clock_origin": "advisory", "advisory_date": "2026-08-29", "advisory_days_public": 39, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gitea", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-73130", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json", "ghsa-repos": "https://github.com/go-gitea/gitea/security/advisories/GHSA-8r3w-5682-jrqf" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-73135", "state": "RESERVED", "public_date": "2026-08-29", "sources": "alpine,csaf,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-08-29", "csaf": "2026-08-30" }, "refs": "alpine:gitea;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3079\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json;ghsa-repos:go-gitea/gitea\tGHSA-hch4-r2j8-xm72", "description": "go-gitea/gitea repository advisory GHSA-hch4-r2j8-xm72", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 39, "clock_known": true, "hours_public": 936, "clock_origin": "advisory", "advisory_date": "2026-08-29", "advisory_days_public": 39, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gitea", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-73135", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json", "ghsa-repos": "https://github.com/go-gitea/gitea/security/advisories/GHSA-hch4-r2j8-xm72" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-73273", "state": "RESERVED", "public_date": "2026-08-29", "sources": "alpine,csaf,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-08-29", "csaf": "2026-08-30" }, "refs": "alpine:gitea;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3079\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json;ghsa-repos:go-gitea/gitea\tGHSA-5xcq-p92v-43rf", "description": "go-gitea/gitea repository advisory GHSA-5xcq-p92v-43rf", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 39, "clock_known": true, "hours_public": 936, "clock_origin": "advisory", "advisory_date": "2026-08-29", "advisory_days_public": 39, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gitea", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-73273", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json", "ghsa-repos": "https://github.com/go-gitea/gitea/security/advisories/GHSA-5xcq-p92v-43rf" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-60010", "state": "RESERVED", "public_date": "2026-08-29", "sources": "alpine,csaf,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-08-29", "csaf": "2026-08-30" }, "refs": "alpine:gitea;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3079\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json;ghsa-repos:go-gitea/gitea\tGHSA-g5jj-gp8w-73h7", "description": "go-gitea/gitea repository advisory GHSA-g5jj-gp8w-73h7", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 39, "clock_known": true, "hours_public": 936, "clock_origin": "advisory", "advisory_date": "2026-08-29", "advisory_days_public": 39, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gitea", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-60010", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json", "ghsa-repos": "https://github.com/go-gitea/gitea/security/advisories/GHSA-g5jj-gp8w-73h7" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-60018", "state": "RESERVED", "public_date": "2026-08-29", "sources": "alpine,csaf,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-08-29", "csaf": "2026-08-30" }, "refs": "alpine:gitea;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3079\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json;ghsa-repos:go-gitea/gitea\tGHSA-46px-6cqx-c5fv", "description": "go-gitea/gitea repository advisory GHSA-46px-6cqx-c5fv", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 39, "clock_known": true, "hours_public": 936, "clock_origin": "advisory", "advisory_date": "2026-08-29", "advisory_days_public": 39, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gitea", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-60018", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json", "ghsa-repos": "https://github.com/go-gitea/gitea/security/advisories/GHSA-46px-6cqx-c5fv" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-60021", "state": "RESERVED", "public_date": "2026-08-29", "sources": "alpine,csaf,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-08-29", "csaf": "2026-08-30" }, "refs": "alpine:gitea;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3079\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json;ghsa-repos:go-gitea/gitea\tGHSA-5952-x23q-p23f", "description": "go-gitea/gitea repository advisory GHSA-5952-x23q-p23f", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 39, "clock_known": true, "hours_public": 936, "clock_origin": "advisory", "advisory_date": "2026-08-29", "advisory_days_public": 39, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gitea", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-60021", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json", "ghsa-repos": "https://github.com/go-gitea/gitea/security/advisories/GHSA-5952-x23q-p23f" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62925", "state": "RESERVED", "public_date": "2026-08-29", "sources": "alpine,csaf,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-08-29", "csaf": "2026-08-30" }, "refs": "alpine:gitea;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3079\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json;ghsa-repos:go-gitea/gitea\tGHSA-36q5-5423-vgx2", "description": "go-gitea/gitea repository advisory GHSA-36q5-5423-vgx2", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 39, "clock_known": true, "hours_public": 936, "clock_origin": "advisory", "advisory_date": "2026-08-29", "advisory_days_public": 39, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gitea", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-62925", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json", "ghsa-repos": "https://github.com/go-gitea/gitea/security/advisories/GHSA-36q5-5423-vgx2" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63021", "state": "RESERVED", "public_date": "2026-08-29", "sources": "alpine,csaf,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-08-29", "csaf": "2026-08-30" }, "refs": "alpine:gitea;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3079\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json;ghsa-repos:go-gitea/gitea\tGHSA-fqxf-w92m-prvq", "description": "go-gitea/gitea repository advisory GHSA-fqxf-w92m-prvq", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 39, "clock_known": true, "hours_public": 936, "clock_origin": "advisory", "advisory_date": "2026-08-29", "advisory_days_public": 39, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gitea", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-63021", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json", "ghsa-repos": "https://github.com/go-gitea/gitea/security/advisories/GHSA-fqxf-w92m-prvq" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63792", "state": "RESERVED", "public_date": "2026-08-29", "sources": "alpine,csaf,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-08-29", "csaf": "2026-08-30" }, "refs": "alpine:gitea;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3079\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json;ghsa-repos:go-gitea/gitea\tGHSA-2xph-7j4g-43rg", "description": "go-gitea/gitea repository advisory GHSA-2xph-7j4g-43rg", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 39, "clock_known": true, "hours_public": 936, "clock_origin": "advisory", "advisory_date": "2026-08-29", "advisory_days_public": 39, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gitea", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-63792", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json", "ghsa-repos": "https://github.com/go-gitea/gitea/security/advisories/GHSA-2xph-7j4g-43rg" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-66849", "state": "RESERVED", "public_date": "2026-08-29", "sources": "alpine,csaf,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-08-29", "csaf": "2026-08-30" }, "refs": "alpine:gitea;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3079\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json;ghsa-repos:go-gitea/gitea\tGHSA-px3q-x2mm-55wg", "description": "go-gitea/gitea repository advisory GHSA-px3q-x2mm-55wg", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 39, "clock_known": true, "hours_public": 936, "clock_origin": "advisory", "advisory_date": "2026-08-29", "advisory_days_public": 39, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gitea", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-66849", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json", "ghsa-repos": "https://github.com/go-gitea/gitea/security/advisories/GHSA-px3q-x2mm-55wg" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-66853", "state": "RESERVED", "public_date": "2026-08-29", "sources": "alpine,csaf,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-08-29", "csaf": "2026-08-30" }, "refs": "alpine:gitea;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3079\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json;ghsa-repos:go-gitea/gitea\tGHSA-w4wc-g858-3672", "description": "go-gitea/gitea repository advisory GHSA-w4wc-g858-3672", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 39, "clock_known": true, "hours_public": 936, "clock_origin": "advisory", "advisory_date": "2026-08-29", "advisory_days_public": 39, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gitea", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-66853", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json", "ghsa-repos": "https://github.com/go-gitea/gitea/security/advisories/GHSA-w4wc-g858-3672" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-66874", "state": "RESERVED", "public_date": "2026-08-29", "sources": "alpine,csaf,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-08-29", "csaf": "2026-08-30" }, "refs": "alpine:gitea;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3079\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json;ghsa-repos:go-gitea/gitea\tGHSA-5xp7-r6cr-39ff", "description": "go-gitea/gitea repository advisory GHSA-5xp7-r6cr-39ff", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 39, "clock_known": true, "hours_public": 936, "clock_origin": "advisory", "advisory_date": "2026-08-29", "advisory_days_public": 39, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gitea", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-66874", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json", "ghsa-repos": "https://github.com/go-gitea/gitea/security/advisories/GHSA-5xp7-r6cr-39ff" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-66877", "state": "RESERVED", "public_date": "2026-08-29", "sources": "alpine,csaf,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-08-29", "csaf": "2026-08-30" }, "refs": "alpine:gitea;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3079\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json;ghsa-repos:go-gitea/gitea\tGHSA-v2w8-m4gr-qj65", "description": "go-gitea/gitea repository advisory GHSA-v2w8-m4gr-qj65", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 39, "clock_known": true, "hours_public": 936, "clock_origin": "advisory", "advisory_date": "2026-08-29", "advisory_days_public": 39, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gitea", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-66877", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json", "ghsa-repos": "https://github.com/go-gitea/gitea/security/advisories/GHSA-v2w8-m4gr-qj65" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-67577", "state": "RESERVED", "public_date": "2026-08-29", "sources": "alpine,csaf,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-08-29", "csaf": "2026-08-30" }, "refs": "alpine:gitea;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3079\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json;ghsa-repos:go-gitea/gitea\tGHSA-rfm6-r2x5-cg56", "description": "go-gitea/gitea repository advisory GHSA-rfm6-r2x5-cg56", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 39, "clock_known": true, "hours_public": 936, "clock_origin": "advisory", "advisory_date": "2026-08-29", "advisory_days_public": 39, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gitea", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-67577", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json", "ghsa-repos": "https://github.com/go-gitea/gitea/security/advisories/GHSA-rfm6-r2x5-cg56" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-68957", "state": "RESERVED", "public_date": "2026-08-29", "sources": "alpine,csaf,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-08-29", "csaf": "2026-08-30" }, "refs": "alpine:gitea;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3079\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json;ghsa-repos:go-gitea/gitea\tGHSA-wg93-gp4m-c6vr", "description": "go-gitea/gitea repository advisory GHSA-wg93-gp4m-c6vr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 39, "clock_known": true, "hours_public": 936, "clock_origin": "advisory", "advisory_date": "2026-08-29", "advisory_days_public": 39, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gitea", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-68957", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json", "ghsa-repos": "https://github.com/go-gitea/gitea/security/advisories/GHSA-wg93-gp4m-c6vr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-68964", "state": "RESERVED", "public_date": "2026-08-29", "sources": "alpine,csaf,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-08-29", "csaf": "2026-08-30" }, "refs": "alpine:gitea;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3079\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json;ghsa-repos:go-gitea/gitea\tGHSA-wwmh-7r9x-fg49", "description": "go-gitea/gitea repository advisory GHSA-wwmh-7r9x-fg49", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 39, "clock_known": true, "hours_public": 936, "clock_origin": "advisory", "advisory_date": "2026-08-29", "advisory_days_public": 39, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gitea", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-68964", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json", "ghsa-repos": "https://github.com/go-gitea/gitea/security/advisories/GHSA-wwmh-7r9x-fg49" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-78433", "state": "RESERVED", "public_date": "2026-08-29", "sources": "alpine,csaf,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-08-29", "csaf": "2026-08-30" }, "refs": "alpine:gitea;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3079\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json;ghsa-repos:go-gitea/gitea\tGHSA-frpv-2xgv-wxpq", "description": "go-gitea/gitea repository advisory GHSA-frpv-2xgv-wxpq", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 39, "clock_known": true, "hours_public": 936, "clock_origin": "advisory", "advisory_date": "2026-08-29", "advisory_days_public": 39, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gitea", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-78433", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json", "ghsa-repos": "https://github.com/go-gitea/gitea/security/advisories/GHSA-frpv-2xgv-wxpq" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-83822", "state": "RESERVED", "public_date": "2026-08-29", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-29" }, "refs": "ghsa-repos:roxy-wi/roxy-wi\tGHSA-hp23-3cx2-4h2r", "description": "roxy-wi/roxy-wi repository advisory GHSA-hp23-3cx2-4h2r", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 39, "clock_known": true, "hours_public": 936, "clock_origin": "advisory", "advisory_date": "2026-08-29", "advisory_days_public": 39, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/roxy-wi/roxy-wi/security/advisories/GHSA-hp23-3cx2-4h2r" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-83821", "state": "RESERVED", "public_date": "2026-08-29", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-29" }, "refs": "ghsa-repos:roxy-wi/roxy-wi\tGHSA-9xc3-25r9-425m", "description": "roxy-wi/roxy-wi repository advisory GHSA-9xc3-25r9-425m", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 39, "clock_known": true, "hours_public": 936, "clock_origin": "advisory", "advisory_date": "2026-08-29", "advisory_days_public": 39, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/roxy-wi/roxy-wi/security/advisories/GHSA-9xc3-25r9-425m" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-83818", "state": "RESERVED", "public_date": "2026-08-29", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-29" }, "refs": "ghsa-repos:roxy-wi/roxy-wi\tGHSA-5hgx-fmqx-rcg8", "description": "roxy-wi/roxy-wi repository advisory GHSA-5hgx-fmqx-rcg8", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 39, "clock_known": true, "hours_public": 936, "clock_origin": "advisory", "advisory_date": "2026-08-29", "advisory_days_public": 39, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/roxy-wi/roxy-wi/security/advisories/GHSA-5hgx-fmqx-rcg8" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-83819", "state": "RESERVED", "public_date": "2026-08-29", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-29" }, "refs": "ghsa-repos:roxy-wi/roxy-wi\tGHSA-3wqc-vcrv-gfgr", "description": "roxy-wi/roxy-wi repository advisory GHSA-3wqc-vcrv-gfgr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 39, "clock_known": true, "hours_public": 936, "clock_origin": "advisory", "advisory_date": "2026-08-29", "advisory_days_public": 39, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/roxy-wi/roxy-wi/security/advisories/GHSA-3wqc-vcrv-gfgr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-83820", "state": "RESERVED", "public_date": "2026-08-29", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-29" }, "refs": "ghsa-repos:roxy-wi/roxy-wi\tGHSA-3886-rcwf-vqjh", "description": "roxy-wi/roxy-wi repository advisory GHSA-3886-rcwf-vqjh", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 39, "clock_known": true, "hours_public": 936, "clock_origin": "advisory", "advisory_date": "2026-08-29", "advisory_days_public": 39, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/roxy-wi/roxy-wi/security/advisories/GHSA-3886-rcwf-vqjh" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55543", "state": "RESERVED", "public_date": "2026-08-29", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-08-29" }, "refs": "csaf:SUSE Product Security Team\topenSUSE-SU-2026:11645-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11645-1.json", "description": "CVE-2026-55543", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 39, "clock_known": true, "hours_public": 936, "clock_origin": "advisory", "advisory_date": "2026-08-29", "advisory_days_public": 39, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11645-1.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-49275", "state": "RESERVED", "public_date": "2026-08-30", "sources": "alas,alpine,csaf,debian,ghsa-repos", "feed_count": 5, "dates": { "alas": "2026-09-08", "ghsa-repos": "2026-08-30", "csaf": "2026-09-28" }, "refs": "alas:CVE-2026-49275;alpine:exiv2;csaf:SUSE Product Security Team\tSUSE-SU-2026:4374-1\thttps://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_4374-1.json;debian:exiv2;ghsa-repos:Exiv2/exiv2\tGHSA-hxph-pv7w-8649", "description": "Out of bounds read in CrwMap::decodeBasic", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 38, "clock_known": true, "hours_public": 912, "clock_origin": "advisory", "advisory_date": "2026-08-30", "advisory_days_public": 38, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "exiv2", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-49275.html", "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-49275", "csaf": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_4374-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-49275", "ghsa-repos": "https://github.com/Exiv2/exiv2/security/advisories/GHSA-hxph-pv7w-8649" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-68546", "state": "RESERVED", "public_date": "2026-08-30", "sources": "alas,alpine,csaf,debian,ghsa-repos", "feed_count": 5, "dates": { "alas": "2026-09-08", "ghsa-repos": "2026-08-30", "csaf": "2026-09-28" }, "refs": "alas:CVE-2026-68546;alpine:exiv2;csaf:SUSE Product Security Team\tSUSE-SU-2026:4374-1\thttps://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_4374-1.json;debian:exiv2;ghsa-repos:Exiv2/exiv2\tGHSA-3695-mjv8-3r52", "description": "Heap out-of-bounds write in RemoteIo when reading from a malicious remote server (WebReady/Curl builds)", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 38, "clock_known": true, "hours_public": 912, "clock_origin": "advisory", "advisory_date": "2026-08-30", "advisory_days_public": 38, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "exiv2", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-68546.html", "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-68546", "csaf": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_4374-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-68546", "ghsa-repos": "https://github.com/Exiv2/exiv2/security/advisories/GHSA-3695-mjv8-3r52" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-68547", "state": "RESERVED", "public_date": "2026-08-30", "sources": "alas,alpine,csaf,debian,ghsa-repos", "feed_count": 5, "dates": { "alas": "2026-09-08", "ghsa-repos": "2026-08-30", "csaf": "2026-09-28" }, "refs": "alas:CVE-2026-68547;alpine:exiv2;csaf:SUSE Product Security Team\tSUSE-SU-2026:4374-1\thttps://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_4374-1.json;debian:exiv2;ghsa-repos:Exiv2/exiv2\tGHSA-jcgh-p9v3-pw6j", "description": "Heap out-of-bounds read in RemoteIo when reading block-aligned remote CRW files", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 38, "clock_known": true, "hours_public": 912, "clock_origin": "advisory", "advisory_date": "2026-08-30", "advisory_days_public": 38, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "exiv2", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-68547.html", "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-68547", "csaf": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_4374-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-68547", "ghsa-repos": "https://github.com/Exiv2/exiv2/security/advisories/GHSA-jcgh-p9v3-pw6j" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62984", "state": "RESERVED", "public_date": "2026-08-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-30" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-x6gc-5g5m-hm3r", "description": "chamilo/chamilo-lms repository advisory GHSA-x6gc-5g5m-hm3r", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 38, "clock_known": true, "hours_public": 912, "clock_origin": "advisory", "advisory_date": "2026-08-30", "advisory_days_public": 38, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-x6gc-5g5m-hm3r" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-70649", "state": "RESERVED", "public_date": "2026-08-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-30" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-jvrf-c7q2-qghg", "description": "chamilo/chamilo-lms repository advisory GHSA-jvrf-c7q2-qghg", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 38, "clock_known": true, "hours_public": 912, "clock_origin": "advisory", "advisory_date": "2026-08-30", "advisory_days_public": 38, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-jvrf-c7q2-qghg" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-70648", "state": "RESERVED", "public_date": "2026-08-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-30" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-x63q-6gqg-qr8p", "description": "chamilo/chamilo-lms repository advisory GHSA-x63q-6gqg-qr8p", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 38, "clock_known": true, "hours_public": 912, "clock_origin": "advisory", "advisory_date": "2026-08-30", "advisory_days_public": 38, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-x63q-6gqg-qr8p" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-70647", "state": "RESERVED", "public_date": "2026-08-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-30" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-g5xh-m3w7-jmcq", "description": "chamilo/chamilo-lms repository advisory GHSA-g5xh-m3w7-jmcq", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 38, "clock_known": true, "hours_public": 912, "clock_origin": "advisory", "advisory_date": "2026-08-30", "advisory_days_public": 38, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-g5xh-m3w7-jmcq" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77478", "state": "RESERVED", "public_date": "2026-08-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-30" }, "refs": "ghsa-repos:containers/fuse-overlayfs\tGHSA-33p3-j627-gwr3", "description": "containers/fuse-overlayfs repository advisory GHSA-33p3-j627-gwr3", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 38, "clock_known": true, "hours_public": 912, "clock_origin": "advisory", "advisory_date": "2026-08-30", "advisory_days_public": 38, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/containers/fuse-overlayfs/security/advisories/GHSA-33p3-j627-gwr3" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-70406", "state": "RESERVED", "public_date": "2026-08-30", "sources": "alpine,csaf,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-09-22", "csaf": "2026-08-30" }, "refs": "alpine:gitea;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3079\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json;ghsa-repos:go-gitea/gitea\tGHSA-m78w-jjjx-gp8r", "description": "go-gitea/gitea repository advisory GHSA-m78w-jjjx-gp8r", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 38, "clock_known": true, "hours_public": 912, "clock_origin": "advisory", "advisory_date": "2026-08-30", "advisory_days_public": 38, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gitea", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-70406", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3079.json", "ghsa-repos": "https://github.com/go-gitea/gitea/security/advisories/GHSA-m78w-jjjx-gp8r" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-26504", "state": "RESERVED", "public_date": "2026-08-30", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-08-30" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3097\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3097.json", "description": "CVE-2025-26504", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 38, "clock_known": true, "hours_public": 912, "clock_origin": "advisory", "advisory_date": "2026-08-30", "advisory_days_public": 38, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3097.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-14521", "state": "RESERVED", "public_date": "2026-08-30", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-08-30" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3098\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3098.json", "description": "CVE-2026-14521", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 38, "clock_known": true, "hours_public": 912, "clock_origin": "advisory", "advisory_date": "2026-08-30", "advisory_days_public": 38, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3098.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-81185", "state": "RESERVED", "public_date": "2026-08-31", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-31" }, "refs": "ghsa-repos:MasaCMS/MasaCMS\tGHSA-x8cf-65cx-7pcp", "description": "MasaCMS/MasaCMS repository advisory GHSA-x8cf-65cx-7pcp", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 37, "clock_known": true, "hours_public": 888, "clock_origin": "advisory", "advisory_date": "2026-08-31", "advisory_days_public": 37, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/MasaCMS/MasaCMS/security/advisories/GHSA-x8cf-65cx-7pcp" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-81186", "state": "RESERVED", "public_date": "2026-08-31", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-31" }, "refs": "ghsa-repos:MasaCMS/MasaCMS\tGHSA-2686-mxpg-p7xx", "description": "MasaCMS/MasaCMS repository advisory GHSA-2686-mxpg-p7xx", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 37, "clock_known": true, "hours_public": 888, "clock_origin": "advisory", "advisory_date": "2026-08-31", "advisory_days_public": 37, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/MasaCMS/MasaCMS/security/advisories/GHSA-2686-mxpg-p7xx" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-81189", "state": "RESERVED", "public_date": "2026-08-31", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-31" }, "refs": "ghsa-repos:MasaCMS/MasaCMS\tGHSA-hxq8-42mv-9gjf", "description": "MasaCMS/MasaCMS repository advisory GHSA-hxq8-42mv-9gjf", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 37, "clock_known": true, "hours_public": 888, "clock_origin": "advisory", "advisory_date": "2026-08-31", "advisory_days_public": 37, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/MasaCMS/MasaCMS/security/advisories/GHSA-hxq8-42mv-9gjf" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-81188", "state": "RESERVED", "public_date": "2026-08-31", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-31" }, "refs": "ghsa-repos:MasaCMS/MasaCMS\tGHSA-gf5m-hwmv-w22x", "description": "MasaCMS/MasaCMS repository advisory GHSA-gf5m-hwmv-w22x", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 37, "clock_known": true, "hours_public": 888, "clock_origin": "advisory", "advisory_date": "2026-08-31", "advisory_days_public": 37, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/MasaCMS/MasaCMS/security/advisories/GHSA-gf5m-hwmv-w22x" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-81187", "state": "RESERVED", "public_date": "2026-08-31", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-31" }, "refs": "ghsa-repos:MasaCMS/MasaCMS\tGHSA-w46m-3w6f-v7m2", "description": "MasaCMS/MasaCMS repository advisory GHSA-w46m-3w6f-v7m2", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 37, "clock_known": true, "hours_public": 888, "clock_origin": "advisory", "advisory_date": "2026-08-31", "advisory_days_public": 37, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/MasaCMS/MasaCMS/security/advisories/GHSA-w46m-3w6f-v7m2" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-73972", "state": "RESERVED", "public_date": "2026-08-31", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-31" }, "refs": "ghsa-repos:music-assistant/server\tGHSA-m6c2-h3pf-84q7", "description": "music-assistant/server repository advisory GHSA-m6c2-h3pf-84q7", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 37, "clock_known": true, "hours_public": 888, "clock_origin": "advisory", "advisory_date": "2026-08-31", "advisory_days_public": 37, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/music-assistant/server/security/advisories/GHSA-m6c2-h3pf-84q7" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-73970", "state": "RESERVED", "public_date": "2026-08-31", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-08-31" }, "refs": "ghsa-repos:music-assistant/server\tGHSA-j369-4c4w-7qmq", "description": "music-assistant/server repository advisory GHSA-j369-4c4w-7qmq", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 37, "clock_known": true, "hours_public": 888, "clock_origin": "advisory", "advisory_date": "2026-08-31", "advisory_days_public": 37, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/music-assistant/server/security/advisories/GHSA-j369-4c4w-7qmq" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61476", "state": "RESERVED", "public_date": "2026-09-01", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-09-01" }, "refs": "alas:CVE-2026-61476;debian:qemu", "description": "qemu", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-61476.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-61476" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63110", "state": "RESERVED", "public_date": "2026-09-01", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-09-01" }, "refs": "alas:CVE-2026-63110;debian:qemu", "description": "qemu", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-63110.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-63110" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61404", "state": "RESERVED", "public_date": "2026-09-01", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-09-01" }, "refs": "alas:CVE-2026-61404;debian:qemu", "description": "qemu", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-61404.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-61404" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61405", "state": "RESERVED", "public_date": "2026-09-01", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-09-01" }, "refs": "alas:CVE-2026-61405;debian:qemu", "description": "qemu", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-61405.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-61405" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-58582", "state": "RESERVED", "public_date": "2026-09-01", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-09-01" }, "refs": "alas:CVE-2026-58582;debian:qemu", "description": "qemu", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-58582.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-58582" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-15264", "state": "RESERVED", "public_date": "2026-09-01", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-09-01" }, "refs": "alas:CVE-2026-15264;debian:qemu", "description": "qemu", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-15264.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-15264" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-65929", "state": "RESERVED", "public_date": "2026-09-01", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-09-01" }, "refs": "alas:CVE-2026-65929;debian:qemu", "description": "qemu", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-65929.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-65929" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63109", "state": "RESERVED", "public_date": "2026-09-01", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-09-01" }, "refs": "alas:CVE-2026-63109;debian:qemu", "description": "qemu", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-63109.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-63109" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-18054", "state": "RESERVED", "public_date": "2026-09-01", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-09-01" }, "refs": "alas:CVE-2026-18054;debian:qemu", "description": "qemu", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-18054.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-18054" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61406", "state": "RESERVED", "public_date": "2026-09-01", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-09-01" }, "refs": "alas:CVE-2026-61406;debian:qemu", "description": "qemu", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-61406.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-61406" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-58581", "state": "RESERVED", "public_date": "2026-09-01", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-09-01" }, "refs": "alas:CVE-2026-58581;debian:qemu", "description": "qemu", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-58581.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-58581" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-66022", "state": "RESERVED", "public_date": "2026-09-01", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-09-01" }, "refs": "alas:CVE-2026-66022;debian:qemu", "description": "qemu", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-66022.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-66022" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63321", "state": "RESERVED", "public_date": "2026-09-01", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-09-01" }, "refs": "alas:CVE-2026-63321;debian:qemu", "description": "qemu", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-63321.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-63321" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63323", "state": "RESERVED", "public_date": "2026-09-01", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-09-01" }, "refs": "alas:CVE-2026-63323;debian:qemu", "description": "qemu", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-63323.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-63323" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-16288", "state": "RESERVED", "public_date": "2026-09-01", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-09-01" }, "refs": "alas:CVE-2026-16288;debian:qemu", "description": "qemu", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-16288.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-16288" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61402", "state": "RESERVED", "public_date": "2026-09-01", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-09-01" }, "refs": "alas:CVE-2026-61402;debian:qemu", "description": "qemu", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-61402.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-61402" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63320", "state": "RESERVED", "public_date": "2026-09-01", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-09-01" }, "refs": "alas:CVE-2026-63320;debian:qemu", "description": "Host-side AddressSanitizer heap-buffer-overflow READ in current QEMU master through the virtio-net-pci receive filtering path on q35.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-63320.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-63320" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-65928", "state": "RESERVED", "public_date": "2026-09-01", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-09-01" }, "refs": "alas:CVE-2026-65928;debian:qemu", "description": "qemu", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-65928.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-65928" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63322", "state": "RESERVED", "public_date": "2026-09-01", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-09-01" }, "refs": "alas:CVE-2026-63322;debian:qemu", "description": "qemu", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-63322.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-63322" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-50624", "state": "RESERVED", "public_date": "2026-09-01", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-09-01" }, "refs": "alas:CVE-2026-50624;debian:qemu", "description": "qemu", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-50624.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-50624" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-70291", "state": "RESERVED", "public_date": "2026-09-01", "sources": "csaf,debian", "feed_count": 2, "dates": { "csaf": "2026-09-01" }, "refs": "csaf:SUSE Product Security Team\tCVE-2025-70291\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2025-70291.json;debian:u-boot", "description": "CVE-2025-70291", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "u-boot", "ecosystem": "", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2025-70291.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2025-70291" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-70292", "state": "RESERVED", "public_date": "2026-09-01", "sources": "csaf,debian", "feed_count": 2, "dates": { "csaf": "2026-09-01" }, "refs": "csaf:SUSE Product Security Team\tCVE-2025-70292\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2025-70292.json;debian:u-boot", "description": "CVE-2025-70292", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "u-boot", "ecosystem": "", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2025-70292.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2025-70292" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-103013", "state": "RESERVED", "public_date": "2026-09-01", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-01" }, "refs": "ghsa-repos:FOSSBilling/FOSSBilling\tGHSA-pj45-h57w-r2p2", "description": "FOSSBilling/FOSSBilling repository advisory GHSA-pj45-h57w-r2p2", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/FOSSBilling/FOSSBilling/security/advisories/GHSA-pj45-h57w-r2p2" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-81877", "state": "RESERVED", "public_date": "2026-09-01", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-01" }, "refs": "ghsa-repos:chamilo/chamilo-lms\tGHSA-cxxm-wpv8-fwh9", "description": "chamilo/chamilo-lms repository advisory GHSA-cxxm-wpv8-fwh9", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-cxxm-wpv8-fwh9" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-95837", "state": "RESERVED", "public_date": "2026-09-01", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-01" }, "refs": "ghsa-repos:containerd/containerd\tGHSA-p7v4-vr35-mj6f", "description": "containerd/containerd repository advisory GHSA-p7v4-vr35-mj6f", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/containerd/containerd/security/advisories/GHSA-p7v4-vr35-mj6f" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-81503", "state": "RESERVED", "public_date": "2026-09-01", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-01" }, "refs": "ghsa-repos:contiki-ng/contiki-ng\tGHSA-fm37-p9mr-558p", "description": "contiki-ng/contiki-ng repository advisory GHSA-fm37-p9mr-558p", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/contiki-ng/contiki-ng/security/advisories/GHSA-fm37-p9mr-558p" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77286", "state": "RESERVED", "public_date": "2026-09-01", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-01" }, "refs": "ghsa-repos:contiki-ng/contiki-ng\tGHSA-7jvc-x6mf-f3vq", "description": "contiki-ng/contiki-ng repository advisory GHSA-7jvc-x6mf-f3vq", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/contiki-ng/contiki-ng/security/advisories/GHSA-7jvc-x6mf-f3vq" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-48057", "state": "RESERVED", "public_date": "2026-09-01", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-01" }, "refs": "ghsa-repos:randombit/botan\tGHSA-3mh2-26h4-wrqc", "description": "randombit/botan repository advisory GHSA-3mh2-26h4-wrqc", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/randombit/botan/security/advisories/GHSA-3mh2-26h4-wrqc" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104267", "state": "RESERVED", "public_date": "2026-09-01", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-01" }, "refs": "ghsa-repos:randombit/botan\tGHSA-36rp-hhp4-wh83", "description": "randombit/botan repository advisory GHSA-36rp-hhp4-wh83", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/randombit/botan/security/advisories/GHSA-36rp-hhp4-wh83" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-45529", "state": "RESERVED", "public_date": "2026-09-01", "sources": "csaf,osv,samsung", "feed_count": 3, "dates": { "osv": "2026-09-01", "csaf": "2026-09-08", "samsung": "2026-09-01" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3251\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3251.json;osv:Android:platform/packages/providers/TelephonyProvider;samsung:SMR-Sep-2026", "description": "In queryInternal of MmsSmsProvider.java, there is a possible way to access MMS/SMS data across user profiles due to a confused deputy.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "platform/packages/providers/TelephonyProvider", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3251.json", "osv": "https://osv.dev/list?q=CVE-2026-45529", "samsung": "https://security.samsungmobile.com/securityUpdate.smsb" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-45517", "state": "RESERVED", "public_date": "2026-09-01", "sources": "csaf,osv,samsung", "feed_count": 3, "dates": { "osv": "2026-09-01", "csaf": "2026-09-08", "samsung": "2026-09-01" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3251\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3251.json;osv:Android:platform/packages/providers/MediaProvider;samsung:SMR-Sep-2026", "description": "In screenArgsForPermissionCheckIfAny of MediaQueryForPreSelection.java, there is a possible way to access the images of other users due to a confused deputy.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "platform/packages/providers/MediaProvider", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3251.json", "osv": "https://osv.dev/list?q=CVE-2026-45517", "samsung": "https://security.samsungmobile.com/securityUpdate.smsb" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-49913", "state": "RESERVED", "public_date": "2026-09-01", "sources": "csaf,osv,samsung", "feed_count": 3, "dates": { "osv": "2026-09-01", "csaf": "2026-09-08", "samsung": "2026-09-01" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3251\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3251.json;osv:Android:platform/hardware/interfaces;samsung:SMR-Sep-2026", "description": "In descramble of DescramblerImpl.cpp, there is a possible arbitrary memory access due to a precondition check failure.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "platform/hardware/interfaces", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3251.json", "osv": "https://osv.dev/list?q=CVE-2026-49913", "samsung": "https://security.samsungmobile.com/securityUpdate.smsb" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-49926", "state": "RESERVED", "public_date": "2026-09-01", "sources": "csaf,osv,samsung", "feed_count": 3, "dates": { "osv": "2026-09-01", "csaf": "2026-09-08", "samsung": "2026-09-01" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3251\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3251.json;osv:Android:platform/external/libjxl;samsung:SMR-Sep-2026", "description": "In libjxl, there is a possible denial of service due to a logic error in the code.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "platform/external/libjxl", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3251.json", "osv": "https://osv.dev/list?q=CVE-2026-49926", "samsung": "https://security.samsungmobile.com/securityUpdate.smsb" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55305", "state": "RESERVED", "public_date": "2026-09-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2026-09-01", "csaf": "2026-09-15" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3407\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3407.json;osv:Android::unknown:", "description": "In Cellular Modem, there is a possible information disclosure due to improper input validation.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3407.json", "osv": "https://osv.dev/list?q=CVE-2026-55305" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-28589", "state": "RESERVED", "public_date": "2026-09-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2026-09-01", "csaf": "2026-09-15" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3407\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3407.json;osv:Android::unknown:", "description": "In onCreate of multiple files, there is a possible unauthorized deletion of face unlock data due to a confused deputy.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3407.json", "osv": "https://osv.dev/list?q=CVE-2026-28589" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-56896", "state": "RESERVED", "public_date": "2026-09-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2026-09-01", "csaf": "2026-09-15" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3407\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3407.json;osv:Android::unknown:", "description": "In SatelliteDatagramReceivedBuilder::Build of satellitedatabuilder.cpp, there is a possible out-of-bounds write due to a missing bounds check.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3407.json", "osv": "https://osv.dev/list?q=CVE-2026-56896" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55358", "state": "RESERVED", "public_date": "2026-09-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2026-09-01", "csaf": "2026-09-15" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3407\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3407.json;osv:Android::unknown:", "description": "In multiple locations, there is a possible out-of-bounds write due to a missing bounds check.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3407.json", "osv": "https://osv.dev/list?q=CVE-2026-55358" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-56900", "state": "RESERVED", "public_date": "2026-09-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2026-09-01", "csaf": "2026-09-15" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3407\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3407.json;osv:Android::unknown:", "description": "In restore_quickboot_csrs_s2m of training.rs, there is a possible out-of-bounds write due to improper input validation.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3407.json", "osv": "https://osv.dev/list?q=CVE-2026-56900" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55326", "state": "RESERVED", "public_date": "2026-09-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2026-09-01", "csaf": "2026-09-15" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3407\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3407.json;osv:Android::unknown:", "description": "In multiple locations, there is a possible escalation of privilege due to a missing permission check.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3407.json", "osv": "https://osv.dev/list?q=CVE-2026-55326" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55329", "state": "RESERVED", "public_date": "2026-09-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2026-09-01", "csaf": "2026-09-15" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3407\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3407.json;osv:Android::unknown:", "description": "In Bootloader, there is a possible permission bypass due to an insecure default value.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3407.json", "osv": "https://osv.dev/list?q=CVE-2026-55329" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55355", "state": "RESERVED", "public_date": "2026-09-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2026-09-01", "csaf": "2026-09-15" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3407\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3407.json;osv:Android::unknown:", "description": "In Bootloader, there is a possible permission bypass due to a logic error in the code.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3407.json", "osv": "https://osv.dev/list?q=CVE-2026-55355" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-56885", "state": "RESERVED", "public_date": "2026-09-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2026-09-01", "csaf": "2026-09-15" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3407\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3407.json;osv:Android::unknown:", "description": "In overrideCarrierRoamingNtnEligibilityChanged of PhoneInterfaceManager.java, there is a possible permission bypass due to a missing permission check.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3407.json", "osv": "https://osv.dev/list?q=CVE-2026-56885" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55337", "state": "RESERVED", "public_date": "2026-09-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2026-09-01", "csaf": "2026-09-15" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3407\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3407.json;osv:Android::unknown:", "description": "In mfw_resource_set_access_by_perm of resources.c, there is a possible out-of-bounds write due to a missing bounds check.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3407.json", "osv": "https://osv.dev/list?q=CVE-2026-55337" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55364", "state": "RESERVED", "public_date": "2026-09-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2026-09-01", "csaf": "2026-09-15" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3407\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3407.json;osv:Android::unknown:", "description": "In multiple locations, there is a possible permission bypass due to a logic error in the code.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3407.json", "osv": "https://osv.dev/list?q=CVE-2026-55364" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55357", "state": "RESERVED", "public_date": "2026-09-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2026-09-01", "csaf": "2026-09-15" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3407\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3407.json;osv:Android::unknown:", "description": "In CPM, there is a possible permission bypass due to an insecure default value.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3407.json", "osv": "https://osv.dev/list?q=CVE-2026-55357" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-56891", "state": "RESERVED", "public_date": "2026-09-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2026-09-01", "csaf": "2026-09-15" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3407\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3407.json;osv:Android::unknown:", "description": "In multiple locations, there is a possible out-of-bounds write due to a missing bounds check.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3407.json", "osv": "https://osv.dev/list?q=CVE-2026-56891" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-56886", "state": "RESERVED", "public_date": "2026-09-01", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2026-09-01", "csaf": "2026-09-15" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3407\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3407.json;osv:Android::unknown:", "description": "In multiple functions of stpropnci_prop_android.cc, there is a possible out-of-bounds write due to a missing bounds check.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "Android", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3407.json", "osv": "https://osv.dev/list?q=CVE-2026-56886" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-48173", "state": "RESERVED", "public_date": "2026-09-01", "sources": "csaf,samsung", "feed_count": 2, "dates": { "csaf": "2026-09-06", "samsung": "2026-09-01" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3206\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3206.json;samsung:SMR-Sep-2026", "description": "CVE-2026-48173", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3206.json", "samsung": "https://security.samsungmobile.com/securityUpdate.smsb" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-20499", "state": "RESERVED", "public_date": "2026-09-01", "sources": "samsung", "feed_count": 1, "dates": { "samsung": "2026-09-01" }, "refs": "samsung:SMR-Sep-2026", "description": "Samsung SMR Sep 2026", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "samsung": "https://security.samsungmobile.com/securityUpdate.smsb" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-28605", "state": "RESERVED", "public_date": "2026-09-01", "sources": "samsung", "feed_count": 1, "dates": { "samsung": "2026-09-01" }, "refs": "samsung:SMR-Sep-2026", "description": "Samsung SMR Sep 2026", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 36, "clock_known": true, "hours_public": 864, "clock_origin": "advisory", "advisory_date": "2026-09-01", "advisory_days_public": 36, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "samsung": "https://security.samsungmobile.com/securityUpdate.smsb" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-17516", "state": "RESERVED", "public_date": "2026-09-02", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-09-02" }, "refs": "alas:CVE-2026-17516;debian:qemu", "description": "qemu", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 35, "clock_known": true, "hours_public": 840, "clock_origin": "advisory", "advisory_date": "2026-09-02", "advisory_days_public": 35, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "qemu", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-17516.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-17516" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-76594", "state": "RESERVED", "public_date": "2026-09-02", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2026-09-02", "csaf": "2026-09-02" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-76594\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-76594.json;redhat:CVE-2026-76594", "description": "advisor-backend: advisor-backend: Unauthenticated /private/import_content/ endpoint allows global rule-catalogue overwrite", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 35, "clock_known": true, "hours_public": 840, "clock_origin": "advisory", "advisory_date": "2026-09-02", "advisory_days_public": 35, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2026-76594", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-76594.json", "redhat": "https://access.redhat.com/security/cve/CVE-2026-76594" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-76595", "state": "RESERVED", "public_date": "2026-09-02", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2026-09-02", "csaf": "2026-09-02" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-76595\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-76595.json;redhat:CVE-2026-76595", "description": "advisor-backend: Unsafe YAML deserialization of associate-editable Task playbook (yaml.Loader)", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 35, "clock_known": true, "hours_public": 840, "clock_origin": "advisory", "advisory_date": "2026-09-02", "advisory_days_public": 35, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2026-76595", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-76595.json", "redhat": "https://access.redhat.com/security/cve/CVE-2026-76595" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84910", "state": "RESERVED", "public_date": "2026-09-02", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2026-09-02", "csaf": "2026-09-02" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3168\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3168.json;osv:Packagist:drupal/advanced_search", "description": "This module enables AJAX updates for advanced search, facet, and search result blocks.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 35, "clock_known": true, "hours_public": 840, "clock_origin": "advisory", "advisory_date": "2026-09-02", "advisory_days_public": 35, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/advanced_search", "ecosystem": "Packagist", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3168.json", "osv": "https://osv.dev/list?q=CVE-2026-84910" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84911", "state": "RESERVED", "public_date": "2026-09-02", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2026-09-02", "csaf": "2026-09-02" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3168\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3168.json;osv:Packagist:drupal/ai", "description": "This AI Chatbot module enables you to have a Chatbot using assistants to help you with your Drupal website.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 35, "clock_known": true, "hours_public": 840, "clock_origin": "advisory", "advisory_date": "2026-09-02", "advisory_days_public": 35, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/ai", "ecosystem": "Packagist", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3168.json", "osv": "https://osv.dev/list?q=CVE-2026-84911" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84912", "state": "RESERVED", "public_date": "2026-09-02", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2026-09-02", "csaf": "2026-09-02" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3168\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3168.json;osv:Packagist:drupal/ai", "description": "This submodule AI Translate enables you to automatically translate entities.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 35, "clock_known": true, "hours_public": 840, "clock_origin": "advisory", "advisory_date": "2026-09-02", "advisory_days_public": 35, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/ai", "ecosystem": "Packagist", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3168.json", "osv": "https://osv.dev/list?q=CVE-2026-84912" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84913", "state": "RESERVED", "public_date": "2026-09-02", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2026-09-02", "csaf": "2026-09-02" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3168\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3168.json;osv:Packagist:drupal/ai_translate", "description": "This module enables you to automatically translate entities.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 35, "clock_known": true, "hours_public": 840, "clock_origin": "advisory", "advisory_date": "2026-09-02", "advisory_days_public": 35, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/ai_translate", "ecosystem": "Packagist", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3168.json", "osv": "https://osv.dev/list?q=CVE-2026-84913" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84914", "state": "RESERVED", "public_date": "2026-09-02", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2026-09-02", "csaf": "2026-09-02" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3168\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3168.json;osv:Packagist:drupal/calculate_working_days", "description": "Calculate Working Days allows you to calculate working days between 2 dates.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 35, "clock_known": true, "hours_public": 840, "clock_origin": "advisory", "advisory_date": "2026-09-02", "advisory_days_public": 35, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/calculate_working_days", "ecosystem": "Packagist", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3168.json", "osv": "https://osv.dev/list?q=CVE-2026-84914" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84915", "state": "RESERVED", "public_date": "2026-09-02", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2026-09-02", "csaf": "2026-09-02" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3168\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3168.json;osv:Packagist:drupal/component_blocks", "description": "This module enables you use UI Patterns with blocks, for use in Layout Builder.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 35, "clock_known": true, "hours_public": 840, "clock_origin": "advisory", "advisory_date": "2026-09-02", "advisory_days_public": 35, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/component_blocks", "ecosystem": "Packagist", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3168.json", "osv": "https://osv.dev/list?q=CVE-2026-84915" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84923", "state": "RESERVED", "public_date": "2026-09-02", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2026-09-02", "csaf": "2026-09-02" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3168\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3168.json;osv:Packagist:drupal/otp_verification", "description": "This module enables you to add extra layer of verification for user registration.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 35, "clock_known": true, "hours_public": 840, "clock_origin": "advisory", "advisory_date": "2026-09-02", "advisory_days_public": 35, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/otp_verification", "ecosystem": "Packagist", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3168.json", "osv": "https://osv.dev/list?q=CVE-2026-84923" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84924", "state": "RESERVED", "public_date": "2026-09-02", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2026-09-02", "csaf": "2026-09-02" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3168\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3168.json;osv:Packagist:drupal/otp_verification", "description": "This module enables you to add an extra layer of verification for user registration.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 35, "clock_known": true, "hours_public": 840, "clock_origin": "advisory", "advisory_date": "2026-09-02", "advisory_days_public": 35, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/otp_verification", "ecosystem": "Packagist", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3168.json", "osv": "https://osv.dev/list?q=CVE-2026-84924" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84916", "state": "RESERVED", "public_date": "2026-09-02", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2026-09-02", "csaf": "2026-09-02" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3168\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3168.json;osv:Packagist:drupal/islandora", "description": "This `islandora_advanced_search` sub module enables AJAX updates for advanced search, facet, and search result blocks.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 35, "clock_known": true, "hours_public": 840, "clock_origin": "advisory", "advisory_date": "2026-09-02", "advisory_days_public": 35, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/islandora", "ecosystem": "Packagist", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3168.json", "osv": "https://osv.dev/list?q=CVE-2026-84916" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84917", "state": "RESERVED", "public_date": "2026-09-02", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2026-09-02", "csaf": "2026-09-02" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3168\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3168.json;osv:Packagist:drupal/jsonapi_role_access", "description": "This module enables you to restrict access to JSON:API routes based on specific user roles.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 35, "clock_known": true, "hours_public": 840, "clock_origin": "advisory", "advisory_date": "2026-09-02", "advisory_days_public": 35, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/jsonapi_role_access", "ecosystem": "Packagist", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3168.json", "osv": "https://osv.dev/list?q=CVE-2026-84917" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-16648", "state": "RESERVED", "public_date": "2026-09-02", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2026-09-02", "csaf": "2026-09-02" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3168\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3168.json;osv:Packagist:drupal/symfony_mailer_log", "description": "This module enables you to log the emails sent by Mailer Plus as content entities, so they can be reviewed at Reports > Mail log.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 35, "clock_known": true, "hours_public": 840, "clock_origin": "advisory", "advisory_date": "2026-09-02", "advisory_days_public": 35, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/symfony_mailer_log", "ecosystem": "Packagist", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3168.json", "osv": "https://osv.dev/list?q=CVE-2026-16648" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-81163", "state": "RESERVED", "public_date": "2026-09-02", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2026-09-02", "csaf": "2026-09-02" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3168\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3168.json;osv:Packagist:drupal/media_library_importer", "description": "A module to import media files into media library.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 35, "clock_known": true, "hours_public": 840, "clock_origin": "advisory", "advisory_date": "2026-09-02", "advisory_days_public": 35, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/media_library_importer", "ecosystem": "Packagist", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3168.json", "osv": "https://osv.dev/list?q=CVE-2026-81163" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84918", "state": "RESERVED", "public_date": "2026-09-02", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2026-09-02", "csaf": "2026-09-02" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3168\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3168.json;osv:Packagist:drupal/monobank", "description": "The Monobank payment API module provides integration with Monobank acquiring payments.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 35, "clock_known": true, "hours_public": 840, "clock_origin": "advisory", "advisory_date": "2026-09-02", "advisory_days_public": 35, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/monobank", "ecosystem": "Packagist", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3168.json", "osv": "https://osv.dev/list?q=CVE-2026-84918" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84919", "state": "RESERVED", "public_date": "2026-09-02", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2026-09-02", "csaf": "2026-09-02" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3168\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3168.json;osv:Packagist:drupal/photoswipe", "description": "This module enables you to add dynamic caption support to PhotoSwipe image galleries.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 35, "clock_known": true, "hours_public": 840, "clock_origin": "advisory", "advisory_date": "2026-09-02", "advisory_days_public": 35, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/photoswipe", "ecosystem": "Packagist", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3168.json", "osv": "https://osv.dev/list?q=CVE-2026-84919" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84920", "state": "RESERVED", "public_date": "2026-09-02", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2026-09-02", "csaf": "2026-09-02" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3168\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3168.json;osv:Packagist:drupal/unpublished_node_permissions", "description": "This module creates permissions per node content type to control access to unpublished content.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 35, "clock_known": true, "hours_public": 840, "clock_origin": "advisory", "advisory_date": "2026-09-02", "advisory_days_public": 35, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/unpublished_node_permissions", "ecosystem": "Packagist", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3168.json", "osv": "https://osv.dev/list?q=CVE-2026-84920" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84921", "state": "RESERVED", "public_date": "2026-09-02", "sources": "csaf,osv", "feed_count": 2, "dates": { "osv": "2026-09-02", "csaf": "2026-09-02" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3168\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3168.json;osv:Packagist:drupal/webform_submissions_delete", "description": "This module enables you to delete Webform submissions in bulk using a specified date range.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 35, "clock_known": true, "hours_public": 840, "clock_origin": "advisory", "advisory_date": "2026-09-02", "advisory_days_public": 35, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/webform_submissions_delete", "ecosystem": "Packagist", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3168.json", "osv": "https://osv.dev/list?q=CVE-2026-84921" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-85218", "state": "RESERVED", "public_date": "2026-09-03", "sources": "alas,csaf,debian,ghsa-repos,redhat", "feed_count": 5, "dates": { "alas": "2026-09-04", "ghsa-repos": "2026-09-03", "redhat": "2026-09-03", "csaf": "2026-09-05" }, "refs": "alas:CVE-2026-85218;csaf:SUSE Product Security Team\tCVE-2026-85218\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-85218.json;debian:bluez;ghsa-repos:bluez/bluez\tGHSA-m2vx-pw5f-rc8v;redhat:CVE-2026-85218", "description": "A double stack-based buffer overflow was found in the BlueZ AVRCP controller implementation.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 34, "clock_known": true, "hours_public": 816, "clock_origin": "advisory", "advisory_date": "2026-09-03", "advisory_days_public": 34, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "bluez", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-85218.html", "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-85218.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-85218", "ghsa-repos": "https://github.com/bluez/bluez/security/advisories/GHSA-m2vx-pw5f-rc8v", "redhat": "https://access.redhat.com/security/cve/CVE-2026-85218" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-71223", "state": "RESERVED", "public_date": "2026-09-03", "sources": "alas,csaf,debian,redhat", "feed_count": 4, "dates": { "alas": "2026-09-04", "redhat": "2026-09-03", "csaf": "2026-09-03" }, "refs": "alas:CVE-2026-71223;csaf:SUSE Product Security Team\tCVE-2026-71223\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-71223.json;debian:gfs2-utils;redhat:CVE-2026-71223", "description": "An integer overflow vulnerability was found in gfs2-utils.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 34, "clock_known": true, "hours_public": 816, "clock_origin": "advisory", "advisory_date": "2026-09-03", "advisory_days_public": 34, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gfs2-utils", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-71223.html", "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-71223.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-71223", "redhat": "https://access.redhat.com/security/cve/CVE-2026-71223" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-80220", "state": "RESERVED", "public_date": "2026-09-03", "sources": "csaf,debian", "feed_count": 2, "dates": { "csaf": "2026-09-03" }, "refs": "csaf:SUSE Product Security Team\tCVE-2026-80220\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-80220.json;debian:prometheus-postgres-exporter", "description": "CVE-2026-80220", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 34, "clock_known": true, "hours_public": 816, "clock_origin": "advisory", "advisory_date": "2026-09-03", "advisory_days_public": 34, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "prometheus-postgres-exporter", "ecosystem": "", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-80220.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-80220" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77276", "state": "RESERVED", "public_date": "2026-09-03", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-03" }, "refs": "ghsa-repos:CollaboraOnline/online\tGHSA-cf9v-hrj7-8p4v", "description": "CollaboraOnline/online repository advisory GHSA-cf9v-hrj7-8p4v", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 34, "clock_known": true, "hours_public": 816, "clock_origin": "advisory", "advisory_date": "2026-09-03", "advisory_days_public": 34, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/CollaboraOnline/online/security/advisories/GHSA-cf9v-hrj7-8p4v" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-81507", "state": "RESERVED", "public_date": "2026-09-03", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-03" }, "refs": "ghsa-repos:espressif/esp-idf\tGHSA-v335-fxwc-rc44", "description": "espressif/esp-idf repository advisory GHSA-v335-fxwc-rc44", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 34, "clock_known": true, "hours_public": 816, "clock_origin": "advisory", "advisory_date": "2026-09-03", "advisory_days_public": 34, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/espressif/esp-idf/security/advisories/GHSA-v335-fxwc-rc44" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-80256", "state": "RESERVED", "public_date": "2026-09-03", "sources": "alpine,csaf", "feed_count": 2, "dates": { "csaf": "2026-09-03" }, "refs": "alpine:curl;csaf:SUSE Product Security Team\tCVE-2026-80256\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-80256.json", "description": "CVE-2026-80256", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 34, "clock_known": true, "hours_public": 816, "clock_origin": "advisory", "advisory_date": "2026-09-03", "advisory_days_public": 34, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "curl", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-80256", "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-80256.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-10478", "state": "RESERVED", "public_date": "2026-09-03", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-03" }, "refs": "csaf:CISA\tICSA-26-246-05\thttps://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsa-26-246-05.json", "description": "Rockwell Automation 1756-ENBT Module", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 34, "clock_known": true, "hours_public": 816, "clock_origin": "advisory", "advisory_date": "2026-09-03", "advisory_days_public": 34, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsa-26-246-05.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77477", "state": "RESERVED", "public_date": "2026-09-03", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-03" }, "refs": "csaf:CISA\tICSA-26-246-01\thttps://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsa-26-246-01.json", "description": "OPCFoundation OPC UA LocalDiscoveryServer (LDS)", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 34, "clock_known": true, "hours_public": 816, "clock_origin": "advisory", "advisory_date": "2026-09-03", "advisory_days_public": 34, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsa-26-246-01.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61408", "state": "RESERVED", "public_date": "2026-09-03", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-03" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3184\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3184.json", "description": "CVE-2026-61408", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 34, "clock_known": true, "hours_public": 816, "clock_origin": "advisory", "advisory_date": "2026-09-03", "advisory_days_public": 34, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3184.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-85498", "state": "RESERVED", "public_date": "2026-09-04", "sources": "alas,csaf,debian,redhat", "feed_count": 4, "dates": { "alas": "2026-09-05", "redhat": "2026-09-04", "csaf": "2026-09-05" }, "refs": "alas:CVE-2026-85498;csaf:SUSE Product Security Team\tCVE-2026-85498\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-85498.json;debian:policykit-1;redhat:CVE-2026-85498", "description": "A flaw was found in polkit.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 33, "clock_known": true, "hours_public": 792, "clock_origin": "advisory", "advisory_date": "2026-09-04", "advisory_days_public": 33, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "policykit-1", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-85498.html", "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-85498.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-85498", "redhat": "https://access.redhat.com/security/cve/CVE-2026-85498" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-65139", "state": "RESERVED", "public_date": "2026-09-04", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-09-04" }, "refs": "alas:CVE-2026-65139;debian:slurm-wlm", "description": "Fix various issues in unsafe operation/queries to the slurmdbd", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 33, "clock_known": true, "hours_public": 792, "clock_origin": "advisory", "advisory_date": "2026-09-04", "advisory_days_public": 33, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "slurm-wlm", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-65139.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-65139" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-65109", "state": "RESERVED", "public_date": "2026-09-04", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-09-04" }, "refs": "alas:CVE-2026-65109;debian:slurm-wlm", "description": "Fix slurmstepd removing files outside the container spool directory when cleaning up an OCI containe, Fix slurmstepd leaving OCI container spool directories behind when ContainerPath contains a task id pattern", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 33, "clock_known": true, "hours_public": 792, "clock_origin": "advisory", "advisory_date": "2026-09-04", "advisory_days_public": 33, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "slurm-wlm", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-65109.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-65109" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-65108", "state": "RESERVED", "public_date": "2026-09-04", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-09-04" }, "refs": "alas:CVE-2026-65108;debian:slurm-wlm", "description": "Fix a slurmstepd stack overflow when a job environment contains an oversized SPANK option variable", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 33, "clock_known": true, "hours_public": 792, "clock_origin": "advisory", "advisory_date": "2026-09-04", "advisory_days_public": 33, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "slurm-wlm", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-65108.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-65108" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-65138", "state": "RESERVED", "public_date": "2026-09-04", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-09-04" }, "refs": "alas:CVE-2026-65138;debian:slurm-wlm", "description": "Fix heap over-read when unpacking a malformed forward data RPC in slurmd.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 33, "clock_known": true, "hours_public": 792, "clock_origin": "advisory", "advisory_date": "2026-09-04", "advisory_days_public": 33, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "slurm-wlm", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-65138.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-65138" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-71196", "state": "RESERVED", "public_date": "2026-09-04", "sources": "csaf,debian,redhat", "feed_count": 3, "dates": { "redhat": "2026-09-04", "csaf": "2026-09-04" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-71196\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-71196.json;debian:glance;redhat:CVE-2026-71196", "description": "openstack-glance: openstack-glance: SSRF via web-download import due to empty default host filters", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 33, "clock_known": true, "hours_public": 792, "clock_origin": "advisory", "advisory_date": "2026-09-04", "advisory_days_public": 33, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "glance", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-71196.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-71196", "redhat": "https://access.redhat.com/security/cve/CVE-2026-71196" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-71197", "state": "RESERVED", "public_date": "2026-09-04", "sources": "csaf,debian,redhat", "feed_count": 3, "dates": { "redhat": "2026-09-04", "csaf": "2026-09-04" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-71197\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-71197.json;debian:glance;redhat:CVE-2026-71197", "description": "openstack-glance: openstack-glance: SSRF blocklist bypass via hostname-to-IP resolution gap in web-download", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 33, "clock_known": true, "hours_public": 792, "clock_origin": "advisory", "advisory_date": "2026-09-04", "advisory_days_public": 33, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "glance", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-71197.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-71197", "redhat": "https://access.redhat.com/security/cve/CVE-2026-71197" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-95838", "state": "RESERVED", "public_date": "2026-09-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-04" }, "refs": "ghsa-repos:containerd/containerd\tGHSA-rp3h-jf77-q9p4", "description": "containerd/containerd repository advisory GHSA-rp3h-jf77-q9p4", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 33, "clock_known": true, "hours_public": 792, "clock_origin": "advisory", "advisory_date": "2026-09-04", "advisory_days_public": 33, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/containerd/containerd/security/advisories/GHSA-rp3h-jf77-q9p4" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-64862", "state": "RESERVED", "public_date": "2026-09-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-04" }, "refs": "ghsa-repos:frappe/hrms\tGHSA-wfc6-cw72-cvhx", "description": "frappe/hrms repository advisory GHSA-wfc6-cw72-cvhx", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 33, "clock_known": true, "hours_public": 792, "clock_origin": "advisory", "advisory_date": "2026-09-04", "advisory_days_public": 33, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/frappe/hrms/security/advisories/GHSA-wfc6-cw72-cvhx" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-85076", "state": "RESERVED", "public_date": "2026-09-04", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-04" }, "refs": "ghsa-repos:jhuckaby/Cronicle\tGHSA-9w42-v8cj-68gq", "description": "jhuckaby/Cronicle repository advisory GHSA-9w42-v8cj-68gq", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 33, "clock_known": true, "hours_public": 792, "clock_origin": "advisory", "advisory_date": "2026-09-04", "advisory_days_public": 33, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/jhuckaby/Cronicle/security/advisories/GHSA-9w42-v8cj-68gq" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-65165", "state": "RESERVED", "public_date": "2026-09-05", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-09-05" }, "refs": "alas:CVE-2026-65165;debian:slurm-wlm", "description": "Fix various issues around job steps and node count discrepancies", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 32, "clock_known": true, "hours_public": 768, "clock_origin": "advisory", "advisory_date": "2026-09-05", "advisory_days_public": 32, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "slurm-wlm", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-65165.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-65165" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84471", "state": "RESERVED", "public_date": "2026-09-05", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-09-05" }, "refs": "alas:CVE-2026-84471;debian:openvpn", "description": "openvpn", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 32, "clock_known": true, "hours_public": 768, "clock_origin": "advisory", "advisory_date": "2026-09-05", "advisory_days_public": 32, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "openvpn", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-84471.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-84471" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-86067", "state": "RESERVED", "public_date": "2026-09-05", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-05" }, "refs": "ghsa-repos:1Panel-dev/KubePi\tGHSA-qpwj-gxgw-5mgp", "description": "1Panel-dev/KubePi repository advisory GHSA-qpwj-gxgw-5mgp", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 32, "clock_known": true, "hours_public": 768, "clock_origin": "advisory", "advisory_date": "2026-09-05", "advisory_days_public": 32, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/1Panel-dev/KubePi/security/advisories/GHSA-qpwj-gxgw-5mgp" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-86005", "state": "RESERVED", "public_date": "2026-09-06", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-06" }, "refs": "ghsa-repos:chartbrew/chartbrew\tGHSA-w8g3-j8rf-qc5j", "description": "chartbrew/chartbrew repository advisory GHSA-w8g3-j8rf-qc5j", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 31, "clock_known": true, "hours_public": 744, "clock_origin": "advisory", "advisory_date": "2026-09-06", "advisory_days_public": 31, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chartbrew/chartbrew/security/advisories/GHSA-w8g3-j8rf-qc5j" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-85736", "state": "RESERVED", "public_date": "2026-09-06", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-06" }, "refs": "ghsa-repos:chartbrew/chartbrew\tGHSA-p5h6-f969-jpfv", "description": "chartbrew/chartbrew repository advisory GHSA-p5h6-f969-jpfv", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 31, "clock_known": true, "hours_public": 744, "clock_origin": "advisory", "advisory_date": "2026-09-06", "advisory_days_public": 31, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chartbrew/chartbrew/security/advisories/GHSA-p5h6-f969-jpfv" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-85726", "state": "RESERVED", "public_date": "2026-09-06", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-06" }, "refs": "ghsa-repos:chartbrew/chartbrew\tGHSA-mr45-2r9x-cgwf", "description": "chartbrew/chartbrew repository advisory GHSA-mr45-2r9x-cgwf", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 31, "clock_known": true, "hours_public": 744, "clock_origin": "advisory", "advisory_date": "2026-09-06", "advisory_days_public": 31, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chartbrew/chartbrew/security/advisories/GHSA-mr45-2r9x-cgwf" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-85712", "state": "RESERVED", "public_date": "2026-09-06", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-06" }, "refs": "ghsa-repos:chartbrew/chartbrew\tGHSA-6gv3-8wxh-6vfq", "description": "chartbrew/chartbrew repository advisory GHSA-6gv3-8wxh-6vfq", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 31, "clock_known": true, "hours_public": 744, "clock_origin": "advisory", "advisory_date": "2026-09-06", "advisory_days_public": 31, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chartbrew/chartbrew/security/advisories/GHSA-6gv3-8wxh-6vfq" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-85708", "state": "RESERVED", "public_date": "2026-09-06", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-06" }, "refs": "ghsa-repos:chartbrew/chartbrew\tGHSA-3chp-cr6f-hp63", "description": "chartbrew/chartbrew repository advisory GHSA-3chp-cr6f-hp63", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 31, "clock_known": true, "hours_public": 744, "clock_origin": "advisory", "advisory_date": "2026-09-06", "advisory_days_public": 31, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chartbrew/chartbrew/security/advisories/GHSA-3chp-cr6f-hp63" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-85295", "state": "RESERVED", "public_date": "2026-09-06", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-06" }, "refs": "ghsa-repos:chartbrew/chartbrew\tGHSA-qvv4-r3q6-8797", "description": "chartbrew/chartbrew repository advisory GHSA-qvv4-r3q6-8797", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 31, "clock_known": true, "hours_public": 744, "clock_origin": "advisory", "advisory_date": "2026-09-06", "advisory_days_public": 31, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chartbrew/chartbrew/security/advisories/GHSA-qvv4-r3q6-8797" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-103974", "state": "RESERVED", "public_date": "2026-09-06", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-06" }, "refs": "ghsa-repos:lichess-org/lila\tGHSA-43g7-r6hp-ccf8", "description": "lichess-org/lila repository advisory GHSA-43g7-r6hp-ccf8", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 31, "clock_known": true, "hours_public": 744, "clock_origin": "advisory", "advisory_date": "2026-09-06", "advisory_days_public": 31, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/lichess-org/lila/security/advisories/GHSA-43g7-r6hp-ccf8" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-102880", "state": "RESERVED", "public_date": "2026-09-06", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-06" }, "refs": "ghsa-repos:thorvg/thorvg\tGHSA-wcpm-fj7g-q6fg", "description": "thorvg/thorvg repository advisory GHSA-wcpm-fj7g-q6fg", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 31, "clock_known": true, "hours_public": 744, "clock_origin": "advisory", "advisory_date": "2026-09-06", "advisory_days_public": 31, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/thorvg/thorvg/security/advisories/GHSA-wcpm-fj7g-q6fg" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-48174", "state": "RESERVED", "public_date": "2026-09-06", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-06" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3206\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3206.json", "description": "CVE-2026-48174", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 31, "clock_known": true, "hours_public": 744, "clock_origin": "advisory", "advisory_date": "2026-09-06", "advisory_days_public": 31, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3206.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-48175", "state": "RESERVED", "public_date": "2026-09-06", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-06" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3206\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3206.json", "description": "CVE-2026-48175", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 31, "clock_known": true, "hours_public": 744, "clock_origin": "advisory", "advisory_date": "2026-09-06", "advisory_days_public": 31, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3206.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-48176", "state": "RESERVED", "public_date": "2026-09-06", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-06" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3206\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3206.json", "description": "CVE-2026-48176", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 31, "clock_known": true, "hours_public": 744, "clock_origin": "advisory", "advisory_date": "2026-09-06", "advisory_days_public": 31, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3206.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-48179", "state": "RESERVED", "public_date": "2026-09-06", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-06" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3206\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3206.json", "description": "CVE-2026-48179", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 31, "clock_known": true, "hours_public": 744, "clock_origin": "advisory", "advisory_date": "2026-09-06", "advisory_days_public": 31, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3206.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-92262", "state": "RESERVED", "public_date": "2026-09-07", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-07" }, "refs": "ghsa-repos:MariaDB/server\tGHSA-65jj-h265-3m7h", "description": "MariaDB/server repository advisory GHSA-65jj-h265-3m7h", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 30, "clock_known": true, "hours_public": 720, "clock_origin": "advisory", "advisory_date": "2026-09-07", "advisory_days_public": 30, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/MariaDB/server/security/advisories/GHSA-65jj-h265-3m7h" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-85745", "state": "RESERVED", "public_date": "2026-09-07", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-07" }, "refs": "ghsa-repos:MariaDB/server\tGHSA-p7v9-24h4-mch8", "description": "MariaDB/server repository advisory GHSA-p7v9-24h4-mch8", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 30, "clock_known": true, "hours_public": 720, "clock_origin": "advisory", "advisory_date": "2026-09-07", "advisory_days_public": 30, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/MariaDB/server/security/advisories/GHSA-p7v9-24h4-mch8" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-85746", "state": "RESERVED", "public_date": "2026-09-07", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-07" }, "refs": "ghsa-repos:MariaDB/server\tGHSA-8fvj-c57c-pggx", "description": "MariaDB/server repository advisory GHSA-8fvj-c57c-pggx", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 30, "clock_known": true, "hours_public": 720, "clock_origin": "advisory", "advisory_date": "2026-09-07", "advisory_days_public": 30, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/MariaDB/server/security/advisories/GHSA-8fvj-c57c-pggx" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-85748", "state": "RESERVED", "public_date": "2026-09-07", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-07" }, "refs": "ghsa-repos:MariaDB/server\tGHSA-mv8g-9f7q-hprm", "description": "MariaDB/server repository advisory GHSA-mv8g-9f7q-hprm", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 30, "clock_known": true, "hours_public": 720, "clock_origin": "advisory", "advisory_date": "2026-09-07", "advisory_days_public": 30, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/MariaDB/server/security/advisories/GHSA-mv8g-9f7q-hprm" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-85985", "state": "RESERVED", "public_date": "2026-09-07", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-07" }, "refs": "ghsa-repos:MariaDB/server\tGHSA-2245-9hm3-wxf6", "description": "MariaDB/server repository advisory GHSA-2245-9hm3-wxf6", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 30, "clock_known": true, "hours_public": 720, "clock_origin": "advisory", "advisory_date": "2026-09-07", "advisory_days_public": 30, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/MariaDB/server/security/advisories/GHSA-2245-9hm3-wxf6" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-86047", "state": "RESERVED", "public_date": "2026-09-07", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-07" }, "refs": "ghsa-repos:MariaDB/server\tGHSA-wxr3-wm3p-7w6p", "description": "MariaDB/server repository advisory GHSA-wxr3-wm3p-7w6p", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 30, "clock_known": true, "hours_public": 720, "clock_origin": "advisory", "advisory_date": "2026-09-07", "advisory_days_public": 30, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/MariaDB/server/security/advisories/GHSA-wxr3-wm3p-7w6p" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-97380", "state": "RESERVED", "public_date": "2026-09-07", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-07" }, "refs": "ghsa-repos:MariaDB/server\tGHSA-625w-4hgq-qwmr", "description": "MariaDB/server repository advisory GHSA-625w-4hgq-qwmr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 30, "clock_known": true, "hours_public": 720, "clock_origin": "advisory", "advisory_date": "2026-09-07", "advisory_days_public": 30, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/MariaDB/server/security/advisories/GHSA-625w-4hgq-qwmr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-102523", "state": "RESERVED", "public_date": "2026-09-07", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-07" }, "refs": "ghsa-repos:MariaDB/server\tGHSA-h4vr-wpff-jfx4", "description": "MariaDB/server repository advisory GHSA-h4vr-wpff-jfx4", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 30, "clock_known": true, "hours_public": 720, "clock_origin": "advisory", "advisory_date": "2026-09-07", "advisory_days_public": 30, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/MariaDB/server/security/advisories/GHSA-h4vr-wpff-jfx4" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-102681", "state": "RESERVED", "public_date": "2026-09-07", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-07" }, "refs": "ghsa-repos:eProsima/Fast-DDS\tGHSA-8g7x-c9fg-g6mh", "description": "eProsima/Fast-DDS repository advisory GHSA-8g7x-c9fg-g6mh", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 30, "clock_known": true, "hours_public": 720, "clock_origin": "advisory", "advisory_date": "2026-09-07", "advisory_days_public": 30, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-8g7x-c9fg-g6mh" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-57582", "state": "RESERVED", "public_date": "2026-09-07", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-07" }, "refs": "csaf:Nationaal Cyber Security Centrum\tNCSC-2026-0343\thttps://advisories.ncsc.nl/csaf/v2/2026/ncsc-2026-0343.json", "description": "CVE-2026-57582", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 30, "clock_known": true, "hours_public": 720, "clock_origin": "advisory", "advisory_date": "2026-09-07", "advisory_days_public": 30, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://advisories.ncsc.nl/csaf/v2/2026/ncsc-2026-0343.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-45092", "state": "RESERVED", "public_date": "2026-09-08", "sources": "debian,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-09-08" }, "refs": "debian:fastdds;ghsa-repos:eProsima/Fast-DDS\tGHSA-mvxp-mfh8-hhv5", "description": "eProsima/Fast-DDS repository advisory GHSA-mvxp-mfh8-hhv5", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 29, "clock_known": true, "hours_public": 696, "clock_origin": "advisory", "advisory_date": "2026-09-08", "advisory_days_public": 29, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "fastdds", "ecosystem": "", "source_urls": { "debian": "https://security-tracker.debian.org/tracker/CVE-2026-45092", "ghsa-repos": "https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-mvxp-mfh8-hhv5" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-45093", "state": "RESERVED", "public_date": "2026-09-08", "sources": "debian,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-09-08" }, "refs": "debian:fastdds;ghsa-repos:eProsima/Fast-DDS\tGHSA-3733-fqj8-39fx", "description": "eProsima/Fast-DDS repository advisory GHSA-3733-fqj8-39fx", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 29, "clock_known": true, "hours_public": 696, "clock_origin": "advisory", "advisory_date": "2026-09-08", "advisory_days_public": 29, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "fastdds", "ecosystem": "", "source_urls": { "debian": "https://security-tracker.debian.org/tracker/CVE-2026-45093", "ghsa-repos": "https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-3733-fqj8-39fx" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-45094", "state": "RESERVED", "public_date": "2026-09-08", "sources": "debian,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-09-08" }, "refs": "debian:fastdds;ghsa-repos:eProsima/Fast-DDS\tGHSA-rg6h-2jch-hwjx", "description": "eProsima/Fast-DDS repository advisory GHSA-rg6h-2jch-hwjx", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 29, "clock_known": true, "hours_public": 696, "clock_origin": "advisory", "advisory_date": "2026-09-08", "advisory_days_public": 29, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "fastdds", "ecosystem": "", "source_urls": { "debian": "https://security-tracker.debian.org/tracker/CVE-2026-45094", "ghsa-repos": "https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-rg6h-2jch-hwjx" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-45095", "state": "RESERVED", "public_date": "2026-09-08", "sources": "debian,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-09-08" }, "refs": "debian:fastdds;ghsa-repos:eProsima/Fast-DDS\tGHSA-r4gh-qh7w-jxqf", "description": "eProsima/Fast-DDS repository advisory GHSA-r4gh-qh7w-jxqf", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 29, "clock_known": true, "hours_public": 696, "clock_origin": "advisory", "advisory_date": "2026-09-08", "advisory_days_public": 29, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "fastdds", "ecosystem": "", "source_urls": { "debian": "https://security-tracker.debian.org/tracker/CVE-2026-45095", "ghsa-repos": "https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-r4gh-qh7w-jxqf" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-45096", "state": "RESERVED", "public_date": "2026-09-08", "sources": "debian,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-09-08" }, "refs": "debian:fastdds;ghsa-repos:eProsima/Fast-DDS\tGHSA-j2w9-582m-j57r", "description": "eProsima/Fast-DDS repository advisory GHSA-j2w9-582m-j57r", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 29, "clock_known": true, "hours_public": 696, "clock_origin": "advisory", "advisory_date": "2026-09-08", "advisory_days_public": 29, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "fastdds", "ecosystem": "", "source_urls": { "debian": "https://security-tracker.debian.org/tracker/CVE-2026-45096", "ghsa-repos": "https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-j2w9-582m-j57r" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-79604", "state": "RESERVED", "public_date": "2026-09-08", "sources": "alpine,csaf,debian", "feed_count": 3, "dates": { "csaf": "2026-09-08" }, "refs": "alpine:xen;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3248\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3248.json;debian:xen", "description": "CVE-2026-79604", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 29, "clock_known": true, "hours_public": 696, "clock_origin": "advisory", "advisory_date": "2026-09-08", "advisory_days_public": 29, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "xen", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-79604", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3248.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-79604" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-66057", "state": "RESERVED", "public_date": "2026-09-08", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-08" }, "refs": "ghsa-repos:frappe/frappe\tGHSA-78c5-55xg-jm7m", "description": "frappe/frappe repository advisory GHSA-78c5-55xg-jm7m", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 29, "clock_known": true, "hours_public": 696, "clock_origin": "advisory", "advisory_date": "2026-09-08", "advisory_days_public": 29, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/frappe/frappe/security/advisories/GHSA-78c5-55xg-jm7m" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-100396", "state": "RESERVED", "public_date": "2026-09-08", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-08" }, "refs": "ghsa-repos:rucio/rucio\tGHSA-89hf-hh2w-258f", "description": "rucio/rucio repository advisory GHSA-89hf-hh2w-258f", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 29, "clock_known": true, "hours_public": 696, "clock_origin": "advisory", "advisory_date": "2026-09-08", "advisory_days_public": 29, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/rucio/rucio/security/advisories/GHSA-89hf-hh2w-258f" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-87053", "state": "RESERVED", "public_date": "2026-09-08", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2026-09-08", "csaf": "2026-09-08" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-87053\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87053.json;redhat:CVE-2026-87053", "description": "operator-sdk-builder: operator-sdk-builder: Final container image runs as root (USER root never reverted)", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 29, "clock_known": true, "hours_public": 696, "clock_origin": "advisory", "advisory_date": "2026-09-08", "advisory_days_public": 29, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2026-87053", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87053.json", "redhat": "https://access.redhat.com/security/cve/CVE-2026-87053" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-87054", "state": "RESERVED", "public_date": "2026-09-08", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2026-09-08", "csaf": "2026-09-08" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-87054\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87054.json;redhat:CVE-2026-87054", "description": "operator-sdk-builder: operator-sdk-builder: containers-policy.json defaults to insecureAcceptAnything for non-Red Hat registries", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 29, "clock_known": true, "hours_public": 696, "clock_origin": "advisory", "advisory_date": "2026-09-08", "advisory_days_public": 29, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2026-87054", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87054.json", "redhat": "https://access.redhat.com/security/cve/CVE-2026-87054" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-87055", "state": "RESERVED", "public_date": "2026-09-08", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2026-09-08", "csaf": "2026-09-08" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-87055\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87055.json;redhat:CVE-2026-87055", "description": "operator-sdk-builder: operator-sdk-builder: Base image referenced by mutable tag rather than sha256 digest", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 29, "clock_known": true, "hours_public": 696, "clock_origin": "advisory", "advisory_date": "2026-09-08", "advisory_days_public": 29, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2026-87055", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87055.json", "redhat": "https://access.redhat.com/security/cve/CVE-2026-87055" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-87056", "state": "RESERVED", "public_date": "2026-09-08", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2026-09-08", "csaf": "2026-09-08" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-87056\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87056.json;redhat:CVE-2026-87056", "description": "operator-sdk-builder: operator-sdk-builder: No automated dependency-update configuration for submodules or Containerfile", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 29, "clock_known": true, "hours_public": 696, "clock_origin": "advisory", "advisory_date": "2026-09-08", "advisory_days_public": 29, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2026-87056", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87056.json", "redhat": "https://access.redhat.com/security/cve/CVE-2026-87056" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-87049", "state": "RESERVED", "public_date": "2026-09-08", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2026-09-08", "csaf": "2026-09-08" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-87049\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87049.json;redhat:CVE-2026-87049", "description": "operator-foundry: operator-foundry: Over-permissive GITHUB_TOKEN and GCP WIF secrets granted to third-party reusable workflow on untrusted-triggerable events", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 29, "clock_known": true, "hours_public": 696, "clock_origin": "advisory", "advisory_date": "2026-09-08", "advisory_days_public": 29, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2026-87049", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87049.json", "redhat": "https://access.redhat.com/security/cve/CVE-2026-87049" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-87050", "state": "RESERVED", "public_date": "2026-09-08", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2026-09-08", "csaf": "2026-09-08" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-87050\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87050.json;redhat:CVE-2026-87050", "description": "operator-foundry: operator-foundry: GitHub Actions and reusable workflow not pinned to commit SHA", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 29, "clock_known": true, "hours_public": 696, "clock_origin": "advisory", "advisory_date": "2026-09-08", "advisory_days_public": 29, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2026-87050", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87050.json", "redhat": "https://access.redhat.com/security/cve/CVE-2026-87050" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-87051", "state": "RESERVED", "public_date": "2026-09-08", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2026-09-08", "csaf": "2026-09-08" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-87051\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87051.json;redhat:CVE-2026-87051", "description": "operator-foundry: operator-foundry: resolveAndValidatePath performs lexical containment only \u2014 symlinks can escape the build context", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 29, "clock_known": true, "hours_public": 696, "clock_origin": "advisory", "advisory_date": "2026-09-08", "advisory_days_public": 29, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2026-87051", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87051.json", "redhat": "https://access.redhat.com/security/cve/CVE-2026-87051" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-87052", "state": "RESERVED", "public_date": "2026-09-08", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2026-09-08", "csaf": "2026-09-08" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-87052\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87052.json;redhat:CVE-2026-87052", "description": "operator-foundry: operator-foundry: No automated dependency-update or vulnerability-scanning configuration", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 29, "clock_known": true, "hours_public": 696, "clock_origin": "advisory", "advisory_date": "2026-09-08", "advisory_days_public": 29, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2026-87052", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87052.json", "redhat": "https://access.redhat.com/security/cve/CVE-2026-87052" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-87057", "state": "RESERVED", "public_date": "2026-09-08", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2026-09-08", "csaf": "2026-09-08" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-87057\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87057.json;redhat:CVE-2026-87057", "description": "olm-operator-konflux-sample: olm-operator-konflux-sample: Runtime base images referenced by mutable floating tags", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 29, "clock_known": true, "hours_public": 696, "clock_origin": "advisory", "advisory_date": "2026-09-08", "advisory_days_public": 29, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2026-87057", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87057.json", "redhat": "https://access.redhat.com/security/cve/CVE-2026-87057" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-87058", "state": "RESERVED", "public_date": "2026-09-08", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2026-09-08", "csaf": "2026-09-08" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-87058\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87058.json;redhat:CVE-2026-87058", "description": "olm-operator-konflux-sample: olm-operator-konflux-sample: Hermetic build disabled by default; bundle build performs live network fetches", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 29, "clock_known": true, "hours_public": 696, "clock_origin": "advisory", "advisory_date": "2026-09-08", "advisory_days_public": 29, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2026-87058", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87058.json", "redhat": "https://access.redhat.com/security/cve/CVE-2026-87058" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-87059", "state": "RESERVED", "public_date": "2026-09-08", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2026-09-08", "csaf": "2026-09-08" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-87059\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87059.json;redhat:CVE-2026-87059", "description": "olm-operator-konflux-sample: olm-operator-konflux-sample: Unpinned pip dependency installation in bundle builder stage", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 29, "clock_known": true, "hours_public": 696, "clock_origin": "advisory", "advisory_date": "2026-09-08", "advisory_days_public": 29, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2026-87059", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87059.json", "redhat": "https://access.redhat.com/security/cve/CVE-2026-87059" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-87060", "state": "RESERVED", "public_date": "2026-09-08", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2026-09-08", "csaf": "2026-09-08" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-87060\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87060.json;redhat:CVE-2026-87060", "description": "olm-operator-konflux-sample: olm-operator-konflux-sample: Renovate automerge enabled with base-image update exclusions", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 29, "clock_known": true, "hours_public": 696, "clock_origin": "advisory", "advisory_date": "2026-09-08", "advisory_days_public": 29, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2026-87060", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87060.json", "redhat": "https://access.redhat.com/security/cve/CVE-2026-87060" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-87061", "state": "RESERVED", "public_date": "2026-09-08", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2026-09-08", "csaf": "2026-09-08" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-87061\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87061.json;redhat:CVE-2026-87061", "description": "olm-operator-konflux-sample: olm-operator-konflux-sample: bundle-hack/update_bundle.sh lacks fail-fast shell options", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 29, "clock_known": true, "hours_public": 696, "clock_origin": "advisory", "advisory_date": "2026-09-08", "advisory_days_public": 29, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2026-87061", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87061.json", "redhat": "https://access.redhat.com/security/cve/CVE-2026-87061" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-87062", "state": "RESERVED", "public_date": "2026-09-08", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2026-09-08", "csaf": "2026-09-08" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-87062\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87062.json;redhat:CVE-2026-87062", "description": "konflux-operator-tasks: konflux-operator-tasks: GitHub Actions referenced by mutable tag/branch instead of commit SHA", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 29, "clock_known": true, "hours_public": 696, "clock_origin": "advisory", "advisory_date": "2026-09-08", "advisory_days_public": 29, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2026-87062", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87062.json", "redhat": "https://access.redhat.com/security/cve/CVE-2026-87062" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-87063", "state": "RESERVED", "public_date": "2026-09-08", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2026-09-08", "csaf": "2026-09-08" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-87063\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87063.json;redhat:CVE-2026-87063", "description": "konflux-operator-tasks: konflux-operator-tasks: tkn CLI installed from network without checksum or signature verification", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 29, "clock_known": true, "hours_public": 696, "clock_origin": "advisory", "advisory_date": "2026-09-08", "advisory_days_public": 29, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2026-87063", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87063.json", "redhat": "https://access.redhat.com/security/cve/CVE-2026-87063" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-87064", "state": "RESERVED", "public_date": "2026-09-08", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2026-09-08", "csaf": "2026-09-08" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-87064\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87064.json;redhat:CVE-2026-87064", "description": "konflux-operator-tasks: konflux-operator-tasks: GitHub workflows lack explicit least-privilege permissions blocks", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 29, "clock_known": true, "hours_public": 696, "clock_origin": "advisory", "advisory_date": "2026-09-08", "advisory_days_public": 29, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2026-87064", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87064.json", "redhat": "https://access.redhat.com/security/cve/CVE-2026-87064" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-87065", "state": "RESERVED", "public_date": "2026-09-08", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2026-09-08", "csaf": "2026-09-08" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-87065\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87065.json;redhat:CVE-2026-87065", "description": "konflux-operator-tasks: konflux-operator-tasks: Tekton task steps run as root without defense-in-depth securityContext hardening", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 29, "clock_known": true, "hours_public": 696, "clock_origin": "advisory", "advisory_date": "2026-09-08", "advisory_days_public": 29, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2026-87065", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-87065.json", "redhat": "https://access.redhat.com/security/cve/CVE-2026-87065" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-79605", "state": "RESERVED", "public_date": "2026-09-08", "sources": "alpine,csaf", "feed_count": 2, "dates": { "csaf": "2026-09-08" }, "refs": "alpine:xen;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3248\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3248.json", "description": "CVE-2026-79605", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 29, "clock_known": true, "hours_public": 696, "clock_origin": "advisory", "advisory_date": "2026-09-08", "advisory_days_public": 29, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "xen", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-79605", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3248.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-79606", "state": "RESERVED", "public_date": "2026-09-08", "sources": "alpine,csaf", "feed_count": 2, "dates": { "csaf": "2026-09-08" }, "refs": "alpine:xen;csaf:SUSE Product Security Team\tCVE-2026-79606\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-79606.json", "description": "CVE-2026-79606", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 29, "clock_known": true, "hours_public": 696, "clock_origin": "advisory", "advisory_date": "2026-09-08", "advisory_days_public": 29, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "xen", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-79606", "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-79606.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-69639", "state": "RESERVED", "public_date": "2026-09-08", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-08" }, "refs": "csaf:Nationaal Cyber Security Centrum\tNCSC-2026-0353\thttps://advisories.ncsc.nl/csaf/v2/2026/ncsc-2026-0353.json", "description": "CVE-2026-69639", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 29, "clock_known": true, "hours_public": 696, "clock_origin": "advisory", "advisory_date": "2026-09-08", "advisory_days_public": 29, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://advisories.ncsc.nl/csaf/v2/2026/ncsc-2026-0353.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-69774", "state": "RESERVED", "public_date": "2026-09-08", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-08" }, "refs": "csaf:Nationaal Cyber Security Centrum\tNCSC-2026-0353\thttps://advisories.ncsc.nl/csaf/v2/2026/ncsc-2026-0353.json", "description": "CVE-2026-69774", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 29, "clock_known": true, "hours_public": 696, "clock_origin": "advisory", "advisory_date": "2026-09-08", "advisory_days_public": 29, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://advisories.ncsc.nl/csaf/v2/2026/ncsc-2026-0353.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-81961", "state": "RESERVED", "public_date": "2026-09-08", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-08" }, "refs": "csaf:Nationaal Cyber Security Centrum\tNCSC-2026-0347\thttps://advisories.ncsc.nl/csaf/v2/2026/ncsc-2026-0347.json", "description": "CVE-2026-81961", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 29, "clock_known": true, "hours_public": 696, "clock_origin": "advisory", "advisory_date": "2026-09-08", "advisory_days_public": 29, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://advisories.ncsc.nl/csaf/v2/2026/ncsc-2026-0347.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-65949", "state": "RESERVED", "public_date": "2026-09-08", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-08" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3253\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3253.json", "description": "CVE-2026-65949", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 29, "clock_known": true, "hours_public": 696, "clock_origin": "advisory", "advisory_date": "2026-09-08", "advisory_days_public": 29, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3253.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-65950", "state": "RESERVED", "public_date": "2026-09-08", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-08" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3253\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3253.json", "description": "CVE-2026-65950", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 29, "clock_known": true, "hours_public": 696, "clock_origin": "advisory", "advisory_date": "2026-09-08", "advisory_days_public": 29, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3253.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-65951", "state": "RESERVED", "public_date": "2026-09-08", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-08" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3253\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3253.json", "description": "CVE-2026-65951", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 29, "clock_known": true, "hours_public": 696, "clock_origin": "advisory", "advisory_date": "2026-09-08", "advisory_days_public": 29, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3253.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-65952", "state": "RESERVED", "public_date": "2026-09-08", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-08" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3253\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3253.json", "description": "CVE-2026-65952", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 29, "clock_known": true, "hours_public": 696, "clock_origin": "advisory", "advisory_date": "2026-09-08", "advisory_days_public": 29, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3253.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-9596", "state": "RESERVED", "public_date": "2026-09-08", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-08" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3239\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3239.json", "description": "CVE-2026-9596", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 29, "clock_known": true, "hours_public": 696, "clock_origin": "advisory", "advisory_date": "2026-09-08", "advisory_days_public": 29, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3239.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-94292", "state": "RESERVED", "public_date": "2026-09-08", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-08" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-94292\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94292.json", "description": "epiphany: Insecure autofill visibility check allows silent exfiltration of sensitive data via CSS-hidden form fields", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 29, "clock_known": true, "hours_public": 696, "clock_origin": "advisory", "advisory_date": "2026-09-08", "advisory_days_public": 29, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94292.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-101895", "state": "RESERVED", "public_date": "2026-09-09", "sources": "ghsa,ghsa-repos,osv", "feed_count": 3, "dates": { "ghsa": "2026-09-28", "ghsa-repos": "2026-09-09", "osv": "2026-09-28" }, "refs": "ghsa-repos:angular/angular\tGHSA-f67j-2jqw-jpq7;ghsa:GHSA-f67j-2jqw-jpq7;osv:npm:@angular/platform-server", "description": "Angular SSR: Denial of Service (DoS) via Infinite Loop on Malformed DOCTYPE", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 28, "clock_known": true, "hours_public": 672, "clock_origin": "advisory", "advisory_date": "2026-09-09", "advisory_days_public": 28, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "@angular/platform-server", "ecosystem": "npm", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-f67j-2jqw-jpq7", "ghsa-repos": "https://github.com/angular/angular/security/advisories/GHSA-f67j-2jqw-jpq7", "osv": "https://osv.dev/list?q=CVE-2026-101895" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-59185", "state": "RESERVED", "public_date": "2026-09-09", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-09-09", "osv": "2026-09-09" }, "refs": "ghsa:GHSA-cp3j-m783-3ph5;osv:Go:github.com/identrail/identrail", "description": "Identrail Cross-tenant IDOR: Client-supplied GitHub App installation_id is bound to the caller's workspace without ownership verification", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 28, "clock_known": true, "hours_public": 672, "clock_origin": "advisory", "advisory_date": "2026-09-09", "advisory_days_public": 28, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "github.com/identrail/identrail", "ecosystem": "Go", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-cp3j-m783-3ph5", "osv": "https://osv.dev/list?q=CVE-2026-59185" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-59179", "state": "RESERVED", "public_date": "2026-09-09", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-09-09", "osv": "2026-09-09" }, "refs": "ghsa:GHSA-g72f-jw3w-mgh7;osv:npm:@openhop/server", "description": "@openhop/server: Path Traversal in Flow ID File Operations", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 28, "clock_known": true, "hours_public": 672, "clock_origin": "advisory", "advisory_date": "2026-09-09", "advisory_days_public": 28, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "@openhop/server", "ecosystem": "npm", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-g72f-jw3w-mgh7", "osv": "https://osv.dev/list?q=CVE-2026-59179" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-59177", "state": "RESERVED", "public_date": "2026-09-09", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-09-09", "osv": "2026-09-09" }, "refs": "ghsa:GHSA-vv4j-m4vr-f3g6;osv:PyPI:esphome-device-builder", "description": "ESPHome Device Builder Dashboard: Unauthenticated dashboard access via the HA add-on ingress site bound to all interfaces", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 28, "clock_known": true, "hours_public": 672, "clock_origin": "advisory", "advisory_date": "2026-09-09", "advisory_days_public": 28, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "esphome-device-builder", "ecosystem": "PyPI", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-vv4j-m4vr-f3g6", "osv": "https://osv.dev/list?q=CVE-2026-59177" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-59176", "state": "RESERVED", "public_date": "2026-09-09", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-09-09", "osv": "2026-09-09" }, "refs": "ghsa:GHSA-wcjj-9m6g-2fr2;osv:npm:functype-mcp-server", "description": "functype-mcp-server: MCP `set_functype_version` Package Alias RCE via Unsanitized pnpm install + Dynamic Import", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 28, "clock_known": true, "hours_public": 672, "clock_origin": "advisory", "advisory_date": "2026-09-09", "advisory_days_public": 28, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "functype-mcp-server", "ecosystem": "npm", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-wcjj-9m6g-2fr2", "osv": "https://osv.dev/list?q=CVE-2026-59176" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-59172", "state": "RESERVED", "public_date": "2026-09-09", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-09-09", "osv": "2026-09-09" }, "refs": "ghsa:GHSA-m835-3cm9-rggg;osv:Go:github.com/candid82/joker", "description": "Joker linter executed project-local .jokerd/linter.* files during linting", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 28, "clock_known": true, "hours_public": 672, "clock_origin": "advisory", "advisory_date": "2026-09-09", "advisory_days_public": 28, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "github.com/candid82/joker", "ecosystem": "Go", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-m835-3cm9-rggg", "osv": "https://osv.dev/list?q=CVE-2026-59172" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-59158", "state": "RESERVED", "public_date": "2026-09-09", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-09-09", "osv": "2026-09-09" }, "refs": "ghsa:GHSA-fxg7-897c-57mp;osv:npm:nuxt-ollama", "description": "Nuxt Ollama: Public Runtime Config Exposes Ollama API Key to Browser Clients", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 28, "clock_known": true, "hours_public": 672, "clock_origin": "advisory", "advisory_date": "2026-09-09", "advisory_days_public": 28, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "nuxt-ollama", "ecosystem": "npm", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-fxg7-897c-57mp", "osv": "https://osv.dev/list?q=CVE-2026-59158" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-58363", "state": "RESERVED", "public_date": "2026-09-09", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-09-09", "osv": "2026-09-09" }, "refs": "ghsa:GHSA-c23q-fw86-9h5x;osv:Go:github.com/lf-edge/ekuiper/v2", "description": "LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 28, "clock_known": true, "hours_public": 672, "clock_origin": "advisory", "advisory_date": "2026-09-09", "advisory_days_public": 28, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "github.com/lf-edge/ekuiper/v2", "ecosystem": "Go", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-c23q-fw86-9h5x", "osv": "https://osv.dev/list?q=CVE-2025-58363" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-24979", "state": "RESERVED", "public_date": "2026-09-09", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-09-09", "osv": "2026-09-09" }, "refs": "ghsa:GHSA-pqqc-8v73-9gg2;osv:Go:github.com/lf-edge/ekuiper/v2", "description": "LF Edge eKuiper: SSRF in External Service", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 28, "clock_known": true, "hours_public": 672, "clock_origin": "advisory", "advisory_date": "2026-09-09", "advisory_days_public": 28, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "github.com/lf-edge/ekuiper/v2", "ecosystem": "Go", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-pqqc-8v73-9gg2", "osv": "https://osv.dev/list?q=CVE-2025-24979" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-24978", "state": "RESERVED", "public_date": "2026-09-09", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-09-09", "osv": "2026-09-09" }, "refs": "ghsa:GHSA-g8rh-fjm6-h2h9;osv:Go:github.com/lf-edge/ekuiper/v2", "description": "LF Edge eKuiper: Self-XSS in External Service Creation", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 28, "clock_known": true, "hours_public": 672, "clock_origin": "advisory", "advisory_date": "2026-09-09", "advisory_days_public": 28, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "github.com/lf-edge/ekuiper/v2", "ecosystem": "Go", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-g8rh-fjm6-h2h9", "osv": "https://osv.dev/list?q=CVE-2025-24978" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55752", "state": "RESERVED", "public_date": "2026-09-09", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-09-09", "csaf": "2026-09-09" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3290\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3290.json;ghsa-repos:PackageKit/PackageKit\tGHSA-x282-cq95-f96w", "description": "PackageKit/PackageKit repository advisory GHSA-x282-cq95-f96w", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 28, "clock_known": true, "hours_public": 672, "clock_origin": "advisory", "advisory_date": "2026-09-09", "advisory_days_public": 28, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3290.json", "ghsa-repos": "https://github.com/PackageKit/PackageKit/security/advisories/GHSA-x282-cq95-f96w" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-102946", "state": "RESERVED", "public_date": "2026-09-09", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-09" }, "refs": "ghsa-repos:authlib/joserfc\tGHSA-4pp3-559j-c5c2", "description": "authlib/joserfc repository advisory GHSA-4pp3-559j-c5c2", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 28, "clock_known": true, "hours_public": 672, "clock_origin": "advisory", "advisory_date": "2026-09-09", "advisory_days_public": 28, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/authlib/joserfc/security/advisories/GHSA-4pp3-559j-c5c2" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-87936", "state": "RESERVED", "public_date": "2026-09-09", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-09" }, "refs": "osv:Packagist:drupal/ai_provider_amazeeio", "description": "**Update 2026-09-11:** Increased risk score to reflect publicly documented methods for developing exploits.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 28, "clock_known": true, "hours_public": 672, "clock_origin": "advisory", "advisory_date": "2026-09-09", "advisory_days_public": 28, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/ai_provider_amazeeio", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-87936" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-87937", "state": "RESERVED", "public_date": "2026-09-09", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-09" }, "refs": "osv:Packagist:drupal/cas_server", "description": "This module enables you to turn a Drupal install into the Central Authentication System (CAS) Server.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 28, "clock_known": true, "hours_public": 672, "clock_origin": "advisory", "advisory_date": "2026-09-09", "advisory_days_public": 28, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/cas_server", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-87937" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-87938", "state": "RESERVED", "public_date": "2026-09-09", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-09" }, "refs": "osv:Packagist:drupal/csp_log", "description": "The CSP Log module enhances any module that adds the CSP header to a site, by providing a reporting endpoint, custom storage, and aggregated reports that can be used to trace issues or adapt the CSP headers.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 28, "clock_known": true, "hours_public": 672, "clock_origin": "advisory", "advisory_date": "2026-09-09", "advisory_days_public": 28, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/csp_log", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-87938" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-87939", "state": "RESERVED", "public_date": "2026-09-09", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-09" }, "refs": "osv:Packagist:drupal/feed_block", "description": "The Feed Block module provides a block content type that displays items pulled from a remote RSS/Atom feed.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 28, "clock_known": true, "hours_public": 672, "clock_origin": "advisory", "advisory_date": "2026-09-09", "advisory_days_public": 28, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/feed_block", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-87939" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-87940", "state": "RESERVED", "public_date": "2026-09-09", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-09" }, "refs": "osv:Packagist:drupal/key_auth", "description": "This module enables you to add key-based authentication on a per-user basis.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 28, "clock_known": true, "hours_public": 672, "clock_origin": "advisory", "advisory_date": "2026-09-09", "advisory_days_public": 28, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/key_auth", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-87940" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-87942", "state": "RESERVED", "public_date": "2026-09-09", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-09" }, "refs": "osv:Packagist:drupal/safedelete", "description": "This module enables you to manage content deletion and provides reports for identifying orphaned content.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 28, "clock_known": true, "hours_public": 672, "clock_origin": "advisory", "advisory_date": "2026-09-09", "advisory_days_public": 28, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/safedelete", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-87942" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-87943", "state": "RESERVED", "public_date": "2026-09-09", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-09" }, "refs": "osv:Packagist:drupal/miniorange_saml", "description": "This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 28, "clock_known": true, "hours_public": 672, "clock_origin": "advisory", "advisory_date": "2026-09-09", "advisory_days_public": 28, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/miniorange_saml", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-87943" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-87944", "state": "RESERVED", "public_date": "2026-09-09", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-09" }, "refs": "osv:Packagist:drupal/miniorange_saml", "description": "This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 28, "clock_known": true, "hours_public": 672, "clock_origin": "advisory", "advisory_date": "2026-09-09", "advisory_days_public": 28, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/miniorange_saml", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-87944" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-87945", "state": "RESERVED", "public_date": "2026-09-09", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-09" }, "refs": "osv:Packagist:drupal/miniorange_saml", "description": "This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 28, "clock_known": true, "hours_public": 672, "clock_origin": "advisory", "advisory_date": "2026-09-09", "advisory_days_public": 28, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/miniorange_saml", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-87945" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-87946", "state": "RESERVED", "public_date": "2026-09-09", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-09" }, "refs": "osv:Packagist:drupal/miniorange_saml", "description": "This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 28, "clock_known": true, "hours_public": 672, "clock_origin": "advisory", "advisory_date": "2026-09-09", "advisory_days_public": 28, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/miniorange_saml", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-87946" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-87947", "state": "RESERVED", "public_date": "2026-09-09", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-09" }, "refs": "osv:Packagist:drupal/miniorange_saml", "description": "This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 28, "clock_known": true, "hours_public": 672, "clock_origin": "advisory", "advisory_date": "2026-09-09", "advisory_days_public": 28, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/miniorange_saml", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-87947" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-87948", "state": "RESERVED", "public_date": "2026-09-09", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-09" }, "refs": "osv:Packagist:drupal/miniorange_saml", "description": "This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 28, "clock_known": true, "hours_public": 672, "clock_origin": "advisory", "advisory_date": "2026-09-09", "advisory_days_public": 28, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/miniorange_saml", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-87948" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-87949", "state": "RESERVED", "public_date": "2026-09-09", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-09" }, "refs": "osv:Packagist:drupal/miniorange_saml", "description": "This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 28, "clock_known": true, "hours_public": 672, "clock_origin": "advisory", "advisory_date": "2026-09-09", "advisory_days_public": 28, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/miniorange_saml", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-87949" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-87950", "state": "RESERVED", "public_date": "2026-09-09", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-09" }, "refs": "osv:Packagist:drupal/miniorange_saml", "description": "This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 28, "clock_known": true, "hours_public": 672, "clock_origin": "advisory", "advisory_date": "2026-09-09", "advisory_days_public": 28, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/miniorange_saml", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-87950" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-87951", "state": "RESERVED", "public_date": "2026-09-09", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-09" }, "refs": "osv:Packagist:drupal/miniorange_saml", "description": "This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 28, "clock_known": true, "hours_public": 672, "clock_origin": "advisory", "advisory_date": "2026-09-09", "advisory_days_public": 28, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/miniorange_saml", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-87951" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-87952", "state": "RESERVED", "public_date": "2026-09-09", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-09" }, "refs": "osv:Packagist:drupal/miniorange_saml", "description": "This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 28, "clock_known": true, "hours_public": 672, "clock_origin": "advisory", "advisory_date": "2026-09-09", "advisory_days_public": 28, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/miniorange_saml", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-87952" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-87953", "state": "RESERVED", "public_date": "2026-09-09", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-09" }, "refs": "osv:Packagist:drupal/miniorange_saml", "description": "This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 28, "clock_known": true, "hours_public": 672, "clock_origin": "advisory", "advisory_date": "2026-09-09", "advisory_days_public": 28, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/miniorange_saml", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-87953" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-87954", "state": "RESERVED", "public_date": "2026-09-09", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-09" }, "refs": "osv:Packagist:drupal/term_glossary", "description": "This module adds automatic highlighting of taxonomy terms in content.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 28, "clock_known": true, "hours_public": 672, "clock_origin": "advisory", "advisory_date": "2026-09-09", "advisory_days_public": 28, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/term_glossary", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-87954" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-87955", "state": "RESERVED", "public_date": "2026-09-09", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-09" }, "refs": "osv:Packagist:drupal/ultimate_table_field", "description": "The Ultimate Table Field module enables you to store table data in a field and edit each table cell through a dialog, using cell field plugins such as text, link, and file.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 28, "clock_known": true, "hours_public": 672, "clock_origin": "advisory", "advisory_date": "2026-09-09", "advisory_days_public": 28, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/ultimate_table_field", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-87955" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-86340", "state": "RESERVED", "public_date": "2026-09-10", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-10" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3315\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3315.json", "description": "CVE-2026-86340", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 27, "clock_known": true, "hours_public": 648, "clock_origin": "advisory", "advisory_date": "2026-09-10", "advisory_days_public": 27, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3315.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-71414", "state": "RESERVED", "public_date": "2026-09-10", "sources": "zdi", "feed_count": 1, "dates": { "zdi": "2026-09-10" }, "refs": "zdi:ZDI-26-654", "description": "ZDI advisory ZDI-26-654", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 27, "clock_known": true, "hours_public": 648, "clock_origin": "advisory", "advisory_date": "2026-09-10", "advisory_days_public": 27, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "zdi": "https://www.zerodayinitiative.com/advisories/ZDI-26-654/" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-71415", "state": "RESERVED", "public_date": "2026-09-10", "sources": "zdi", "feed_count": 1, "dates": { "zdi": "2026-09-10" }, "refs": "zdi:ZDI-26-653", "description": "ZDI advisory ZDI-26-653", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 27, "clock_known": true, "hours_public": 648, "clock_origin": "advisory", "advisory_date": "2026-09-10", "advisory_days_public": 27, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "zdi": "https://www.zerodayinitiative.com/advisories/ZDI-26-653/" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2025-71416", "state": "RESERVED", "public_date": "2026-09-10", "sources": "zdi", "feed_count": 1, "dates": { "zdi": "2026-09-10" }, "refs": "zdi:ZDI-26-652", "description": "ZDI advisory ZDI-26-652", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 27, "clock_known": true, "hours_public": 648, "clock_origin": "advisory", "advisory_date": "2026-09-10", "advisory_days_public": 27, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "zdi": "https://www.zerodayinitiative.com/advisories/ZDI-26-652/" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62439", "state": "RESERVED", "public_date": "2026-09-11", "sources": "alas,csaf,debian", "feed_count": 3, "dates": { "alas": "2026-09-30", "csaf": "2026-09-11" }, "refs": "alas:CVE-2026-62439;csaf:SUSE Product Security Team\tCVE-2026-62439\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-62439.json;debian:gimp", "description": "gimp", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 26, "clock_known": true, "hours_public": 624, "clock_origin": "advisory", "advisory_date": "2026-09-11", "advisory_days_public": 26, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gimp", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-62439.html", "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-62439.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-62439" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62318", "state": "RESERVED", "public_date": "2026-09-11", "sources": "alpine,debian,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-09-11" }, "refs": "alpine:netatalk;debian:netatalk;ghsa-repos:Netatalk/netatalk\tGHSA-5wp7-47vr-j2mh", "description": "Netatalk/netatalk repository advisory GHSA-5wp7-47vr-j2mh", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 26, "clock_known": true, "hours_public": 624, "clock_origin": "advisory", "advisory_date": "2026-09-11", "advisory_days_public": 26, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "netatalk", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-62318", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-62318", "ghsa-repos": "https://github.com/Netatalk/netatalk/security/advisories/GHSA-5wp7-47vr-j2mh" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62319", "state": "RESERVED", "public_date": "2026-09-11", "sources": "alpine,debian,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-09-11" }, "refs": "alpine:netatalk;debian:netatalk;ghsa-repos:Netatalk/netatalk\tGHSA-h2jj-64fr-9grq", "description": "Netatalk/netatalk repository advisory GHSA-h2jj-64fr-9grq", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 26, "clock_known": true, "hours_public": 624, "clock_origin": "advisory", "advisory_date": "2026-09-11", "advisory_days_public": 26, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "netatalk", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-62319", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-62319", "ghsa-repos": "https://github.com/Netatalk/netatalk/security/advisories/GHSA-h2jj-64fr-9grq" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62320", "state": "RESERVED", "public_date": "2026-09-11", "sources": "alpine,debian,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-09-11" }, "refs": "alpine:netatalk;debian:netatalk;ghsa-repos:Netatalk/netatalk\tGHSA-5gqf-6pmp-7932", "description": "Netatalk/netatalk repository advisory GHSA-5gqf-6pmp-7932", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 26, "clock_known": true, "hours_public": 624, "clock_origin": "advisory", "advisory_date": "2026-09-11", "advisory_days_public": 26, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "netatalk", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-62320", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-62320", "ghsa-repos": "https://github.com/Netatalk/netatalk/security/advisories/GHSA-5gqf-6pmp-7932" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62321", "state": "RESERVED", "public_date": "2026-09-11", "sources": "alpine,debian,ghsa-repos", "feed_count": 3, "dates": { "ghsa-repos": "2026-09-11" }, "refs": "alpine:netatalk;debian:netatalk;ghsa-repos:Netatalk/netatalk\tGHSA-42mm-6m68-h9g2", "description": "Netatalk/netatalk repository advisory GHSA-42mm-6m68-h9g2", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 26, "clock_known": true, "hours_public": 624, "clock_origin": "advisory", "advisory_date": "2026-09-11", "advisory_days_public": 26, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "netatalk", "ecosystem": "", "source_urls": { "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-62321", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-62321", "ghsa-repos": "https://github.com/Netatalk/netatalk/security/advisories/GHSA-42mm-6m68-h9g2" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-56828", "state": "RESERVED", "public_date": "2026-09-11", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-09-11", "osv": "2026-09-11" }, "refs": "ghsa:GHSA-j328-xmgp-j4q3;osv:Packagist:shopper/framework", "description": "Shopper: privilege escalation via improper Livewire admin component authorization", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 26, "clock_known": true, "hours_public": 624, "clock_origin": "advisory", "advisory_date": "2026-09-11", "advisory_days_public": 26, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "shopper/framework", "ecosystem": "Packagist", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-j328-xmgp-j4q3", "osv": "https://osv.dev/list?q=CVE-2026-56828" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-56826", "state": "RESERVED", "public_date": "2026-09-11", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-09-11", "osv": "2026-09-11" }, "refs": "ghsa:GHSA-f7h9-qv4x-9x57;osv:Packagist:shopper/framework", "description": "Shopping privilege escalation through missing authorization in Settings components", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 26, "clock_known": true, "hours_public": 624, "clock_origin": "advisory", "advisory_date": "2026-09-11", "advisory_days_public": 26, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "shopper/framework", "ecosystem": "Packagist", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-f7h9-qv4x-9x57", "osv": "https://osv.dev/list?q=CVE-2026-56826" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-103925", "state": "RESERVED", "public_date": "2026-09-11", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-11" }, "refs": "ghsa-repos:FOSSBilling/FOSSBilling\tGHSA-7vcc-24pp-x3wv", "description": "FOSSBilling/FOSSBilling repository advisory GHSA-7vcc-24pp-x3wv", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 26, "clock_known": true, "hours_public": 624, "clock_origin": "advisory", "advisory_date": "2026-09-11", "advisory_days_public": 26, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/FOSSBilling/FOSSBilling/security/advisories/GHSA-7vcc-24pp-x3wv" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-103924", "state": "RESERVED", "public_date": "2026-09-11", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-11" }, "refs": "ghsa-repos:FOSSBilling/FOSSBilling\tGHSA-7g99-jmf3-w4gx", "description": "FOSSBilling/FOSSBilling repository advisory GHSA-7g99-jmf3-w4gx", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 26, "clock_known": true, "hours_public": 624, "clock_origin": "advisory", "advisory_date": "2026-09-11", "advisory_days_public": 26, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/FOSSBilling/FOSSBilling/security/advisories/GHSA-7g99-jmf3-w4gx" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63375", "state": "RESERVED", "public_date": "2026-09-11", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-11" }, "refs": "ghsa-repos:glpi-project/glpi-agent\tGHSA-9qqp-v8rf-fc7f", "description": "glpi-project/glpi-agent repository advisory GHSA-9qqp-v8rf-fc7f", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 26, "clock_known": true, "hours_public": 624, "clock_origin": "advisory", "advisory_date": "2026-09-11", "advisory_days_public": 26, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/glpi-project/glpi-agent/security/advisories/GHSA-9qqp-v8rf-fc7f" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63444", "state": "RESERVED", "public_date": "2026-09-11", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-11" }, "refs": "ghsa-repos:glpi-project/glpi-agent\tGHSA-fh99-rgmp-c623", "description": "glpi-project/glpi-agent repository advisory GHSA-fh99-rgmp-c623", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 26, "clock_known": true, "hours_public": 624, "clock_origin": "advisory", "advisory_date": "2026-09-11", "advisory_days_public": 26, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/glpi-project/glpi-agent/security/advisories/GHSA-fh99-rgmp-c623" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62438", "state": "RESERVED", "public_date": "2026-09-11", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-11" }, "refs": "csaf:SUSE Product Security Team\tCVE-2026-62438\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-62438.json", "description": "CVE-2026-62438", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 26, "clock_known": true, "hours_public": 624, "clock_origin": "advisory", "advisory_date": "2026-09-11", "advisory_days_public": 26, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-62438.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84286", "state": "RESERVED", "public_date": "2026-09-11", "sources": "certcc", "feed_count": 1, "dates": { "certcc": "2026-09-11" }, "refs": "certcc:VU#369611", "description": "ExLlamaV3 contains Denial of Service vulnerability via insufficient bounds checking on kernel dispatch index", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 26, "clock_known": true, "hours_public": 624, "clock_origin": "advisory", "advisory_date": "2026-09-11", "advisory_days_public": 26, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "certcc": "https://www.kb.cert.org/vuls/id/369611" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61642", "state": "RESERVED", "public_date": "2026-09-12", "sources": "alas,csaf,debian,ghsa-repos", "feed_count": 4, "dates": { "alas": "2026-09-18", "ghsa-repos": "2026-09-12", "csaf": "2026-09-13" }, "refs": "alas:CVE-2026-61642;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3329\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3329.json;debian:squid;ghsa-repos:squid-cache/squid\tGHSA-537g-4gfh-w7m6", "description": "Due to a CWE-841 Improper Enforcement of Behavioral Workflow bug Squid is vulnerable to a Request Smuggling attack against HTTP/1.1 Transfer-Encoding.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 25, "clock_known": true, "hours_public": 600, "clock_origin": "advisory", "advisory_date": "2026-09-12", "advisory_days_public": 25, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "squid", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-61642.html", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3329.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-61642", "ghsa-repos": "https://github.com/squid-cache/squid/security/advisories/GHSA-537g-4gfh-w7m6" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62846", "state": "RESERVED", "public_date": "2026-09-12", "sources": "alas,csaf,debian,ghsa-repos", "feed_count": 4, "dates": { "alas": "2026-09-18", "ghsa-repos": "2026-09-12", "csaf": "2026-09-13" }, "refs": "alas:CVE-2026-62846;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3329\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3329.json;debian:squid;ghsa-repos:squid-cache/squid\tGHSA-9vhr-vcrv-x837", "description": "SQUID-2026:9 TODO: check SQUID-2026:9 information not yet public", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 25, "clock_known": true, "hours_public": 600, "clock_origin": "advisory", "advisory_date": "2026-09-12", "advisory_days_public": 25, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "squid", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-62846.html", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3329.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-62846", "ghsa-repos": "https://github.com/squid-cache/squid/security/advisories/GHSA-9vhr-vcrv-x837" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96628", "state": "RESERVED", "public_date": "2026-09-12", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-12" }, "refs": "ghsa-repos:getarcaneapp/arcane\tGHSA-mp22-58ff-6fhr", "description": "getarcaneapp/arcane repository advisory GHSA-mp22-58ff-6fhr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 25, "clock_known": true, "hours_public": 600, "clock_origin": "advisory", "advisory_date": "2026-09-12", "advisory_days_public": 25, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/getarcaneapp/arcane/security/advisories/GHSA-mp22-58ff-6fhr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-28178", "state": "RESERVED", "public_date": "2026-09-12", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-09-12", "csaf": "2026-09-13" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3329\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3329.json;ghsa-repos:squid-cache/squid\tGHSA-7f7w-8cq6-3g42", "description": "squid-cache/squid repository advisory GHSA-7f7w-8cq6-3g42", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 25, "clock_known": true, "hours_public": 600, "clock_origin": "advisory", "advisory_date": "2026-09-12", "advisory_days_public": 25, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3329.json", "ghsa-repos": "https://github.com/squid-cache/squid/security/advisories/GHSA-7f7w-8cq6-3g42" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2024-28177", "state": "RESERVED", "public_date": "2026-09-12", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-09-12", "csaf": "2026-09-13" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3329\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3329.json;ghsa-repos:squid-cache/squid\tGHSA-hpj4-r696-39p2", "description": "squid-cache/squid repository advisory GHSA-hpj4-r696-39p2", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 25, "clock_known": true, "hours_public": 600, "clock_origin": "advisory", "advisory_date": "2026-09-12", "advisory_days_public": 25, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3329.json", "ghsa-repos": "https://github.com/squid-cache/squid/security/advisories/GHSA-hpj4-r696-39p2" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104786", "state": "RESERVED", "public_date": "2026-09-12", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-12" }, "refs": "ghsa-repos:squid-cache/squid\tGHSA-j9pf-q9f6-v44c", "description": "squid-cache/squid repository advisory GHSA-j9pf-q9f6-v44c", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 25, "clock_known": true, "hours_public": 600, "clock_origin": "advisory", "advisory_date": "2026-09-12", "advisory_days_public": 25, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/squid-cache/squid/security/advisories/GHSA-j9pf-q9f6-v44c" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-102940", "state": "RESERVED", "public_date": "2026-09-13", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-13" }, "refs": "ghsa-repos:openemr/openemr\tGHSA-92rh-g949-4mvv", "description": "openemr/openemr repository advisory GHSA-92rh-g949-4mvv", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 24, "clock_known": true, "hours_public": 576, "clock_origin": "advisory", "advisory_date": "2026-09-13", "advisory_days_public": 24, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/openemr/openemr/security/advisories/GHSA-92rh-g949-4mvv" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-102599", "state": "RESERVED", "public_date": "2026-09-14", "sources": "csaf,ghsa,ghsa-repos,osv", "feed_count": 4, "dates": { "ghsa": "2026-09-29", "ghsa-repos": "2026-09-14", "osv": "2026-09-29", "csaf": "2026-10-01" }, "refs": "csaf:SUSE Product Security Team\tCVE-2026-102599\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-102599.json;ghsa-repos:socketio/socket.io\tGHSA-2gc4-cqfq-p2gv;ghsa:GHSA-2gc4-cqfq-p2gv;osv:npm:engine.io", "description": "Socket.IO: Engine.IO Protocol Revision Mismatch DoS", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 23, "clock_known": true, "hours_public": 552, "clock_origin": "advisory", "advisory_date": "2026-09-14", "advisory_days_public": 23, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "engine.io", "ecosystem": "npm", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-102599.json", "ghsa": "https://github.com/advisories/GHSA-2gc4-cqfq-p2gv", "ghsa-repos": "https://github.com/socketio/socket.io/security/advisories/GHSA-2gc4-cqfq-p2gv", "osv": "https://osv.dev/list?q=CVE-2026-102599" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-88985", "state": "RESERVED", "public_date": "2026-09-14", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-14" }, "refs": "ghsa-repos:kubeflow/pipelines\tGHSA-r4mx-2gr2-8277", "description": "kubeflow/pipelines repository advisory GHSA-r4mx-2gr2-8277", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 23, "clock_known": true, "hours_public": 552, "clock_origin": "advisory", "advisory_date": "2026-09-14", "advisory_days_public": 23, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kubeflow/pipelines/security/advisories/GHSA-r4mx-2gr2-8277" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-88986", "state": "RESERVED", "public_date": "2026-09-14", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-14" }, "refs": "ghsa-repos:kubeflow/pipelines\tGHSA-g3qx-frcg-j979", "description": "kubeflow/pipelines repository advisory GHSA-g3qx-frcg-j979", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 23, "clock_known": true, "hours_public": 552, "clock_origin": "advisory", "advisory_date": "2026-09-14", "advisory_days_public": 23, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kubeflow/pipelines/security/advisories/GHSA-g3qx-frcg-j979" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-88984", "state": "RESERVED", "public_date": "2026-09-14", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-14" }, "refs": "ghsa-repos:kubeflow/pipelines\tGHSA-ghgh-57qv-h687", "description": "kubeflow/pipelines repository advisory GHSA-ghgh-57qv-h687", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 23, "clock_known": true, "hours_public": 552, "clock_origin": "advisory", "advisory_date": "2026-09-14", "advisory_days_public": 23, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kubeflow/pipelines/security/advisories/GHSA-ghgh-57qv-h687" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-88983", "state": "RESERVED", "public_date": "2026-09-14", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-14" }, "refs": "ghsa-repos:kubeflow/pipelines\tGHSA-f7vj-6669-qvv4", "description": "kubeflow/pipelines repository advisory GHSA-f7vj-6669-qvv4", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 23, "clock_known": true, "hours_public": 552, "clock_origin": "advisory", "advisory_date": "2026-09-14", "advisory_days_public": 23, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kubeflow/pipelines/security/advisories/GHSA-f7vj-6669-qvv4" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-76654", "state": "RESERVED", "public_date": "2026-09-15", "sources": "alas,csaf,debian,redhat", "feed_count": 4, "dates": { "alas": "2026-09-25", "redhat": "2026-09-15", "csaf": "2026-09-15" }, "refs": "alas:CVE-2026-76654;csaf:Red Hat Product Security\tCVE-2026-76654\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-76654.json;debian:kubernetes;redhat:CVE-2026-76654", "description": "An NTLM coercion vulnerability exists on Windows nodes when the subPath supplied in a pod's volumeMounts is set to a symbolic link that points to an attacker-controlled network share.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 22, "clock_known": true, "hours_public": 528, "clock_origin": "advisory", "advisory_date": "2026-09-15", "advisory_days_public": 22, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "kubernetes", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-76654.html", "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-76654.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-76654", "redhat": "https://access.redhat.com/security/cve/CVE-2026-76654" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-2270", "state": "RESERVED", "public_date": "2026-09-15", "sources": "csaf,debian,redhat", "feed_count": 3, "dates": { "redhat": "2026-09-15", "csaf": "2026-09-25" }, "refs": "csaf:SUSE Product Security Team\tCVE-2026-2270\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-2270.json;debian:kubernetes;redhat:CVE-2026-2270", "description": "kube-controller-manager: kube-controller-manager: StatefulSet and ControllerRevision write permissions allow cross-namespace pod creation", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 22, "clock_known": true, "hours_public": 528, "clock_origin": "advisory", "advisory_date": "2026-09-15", "advisory_days_public": 22, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "kubernetes", "ecosystem": "", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-2270.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-2270", "redhat": "https://access.redhat.com/security/cve/CVE-2026-2270" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-52346", "state": "RESERVED", "public_date": "2026-09-15", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-15" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3381\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3381.json", "description": "CVE-2026-52346", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 22, "clock_known": true, "hours_public": 528, "clock_origin": "advisory", "advisory_date": "2026-09-15", "advisory_days_public": 22, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3381.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-101899", "state": "RESERVED", "public_date": "2026-09-16", "sources": "ghsa,ghsa-repos,osv", "feed_count": 3, "dates": { "ghsa": "2026-09-30", "ghsa-repos": "2026-09-16", "osv": "2026-09-30" }, "refs": "ghsa-repos:axios/axios\tGHSA-44g4-m2mj-wpvx;ghsa:GHSA-44g4-m2mj-wpvx;osv:npm:axios", "description": "Axios: CIDR-form NO_PROXY entries are ignored, causing proxy exclusion bypass for internal IP ranges", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 21, "clock_known": true, "hours_public": 504, "clock_origin": "advisory", "advisory_date": "2026-09-16", "advisory_days_public": 21, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "axios", "ecosystem": "npm", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-44g4-m2mj-wpvx", "ghsa-repos": "https://github.com/axios/axios/security/advisories/GHSA-44g4-m2mj-wpvx", "osv": "https://osv.dev/list?q=CVE-2026-101899" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-53764", "state": "RESERVED", "public_date": "2026-09-16", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-16" }, "refs": "ghsa-repos:OP-TEE/optee_os\tGHSA-9wp2-68g9-8rpv", "description": "OP-TEE/optee_os repository advisory GHSA-9wp2-68g9-8rpv", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 21, "clock_known": true, "hours_public": 504, "clock_origin": "advisory", "advisory_date": "2026-09-16", "advisory_days_public": 21, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/OP-TEE/optee_os/security/advisories/GHSA-9wp2-68g9-8rpv" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-101897", "state": "RESERVED", "public_date": "2026-09-16", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-16" }, "refs": "ghsa-repos:angular/angular\tGHSA-r653-wxfp-pp9c", "description": "angular/angular repository advisory GHSA-r653-wxfp-pp9c", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 21, "clock_known": true, "hours_public": 504, "clock_origin": "advisory", "advisory_date": "2026-09-16", "advisory_days_public": 21, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/angular/angular/security/advisories/GHSA-r653-wxfp-pp9c" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55823", "state": "RESERVED", "public_date": "2026-09-16", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-16" }, "refs": "ghsa-repos:frappe/frappe\tGHSA-mf6r-q34j-pjw7", "description": "frappe/frappe repository advisory GHSA-mf6r-q34j-pjw7", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 21, "clock_known": true, "hours_public": 504, "clock_origin": "advisory", "advisory_date": "2026-09-16", "advisory_days_public": 21, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/frappe/frappe/security/advisories/GHSA-mf6r-q34j-pjw7" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-92218", "state": "RESERVED", "public_date": "2026-09-16", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2026-09-16", "csaf": "2026-09-16" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-92218\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92218.json;redhat:CVE-2026-92218", "description": "release-service-utils: Server-Side Template Injection via two-pass non-sandboxed Jinja render", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 21, "clock_known": true, "hours_public": 504, "clock_origin": "advisory", "advisory_date": "2026-09-16", "advisory_days_public": 21, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2026-92218", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92218.json", "redhat": "https://access.redhat.com/security/cve/CVE-2026-92218" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-92208", "state": "RESERVED", "public_date": "2026-09-16", "sources": "csaf,zdi", "feed_count": 2, "dates": { "csaf": "2026-09-16", "zdi": "2026-09-16" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3414\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3414.json;zdi:ZDI-26-710", "description": "CVE-2026-92208", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 21, "clock_known": true, "hours_public": 504, "clock_origin": "advisory", "advisory_date": "2026-09-16", "advisory_days_public": 21, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3414.json", "zdi": "https://www.zerodayinitiative.com/advisories/ZDI-26-710/" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-92209", "state": "RESERVED", "public_date": "2026-09-16", "sources": "csaf,zdi", "feed_count": 2, "dates": { "csaf": "2026-09-16", "zdi": "2026-09-16" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3414\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3414.json;zdi:ZDI-26-711", "description": "CVE-2026-92209", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 21, "clock_known": true, "hours_public": 504, "clock_origin": "advisory", "advisory_date": "2026-09-16", "advisory_days_public": 21, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3414.json", "zdi": "https://www.zerodayinitiative.com/advisories/ZDI-26-711/" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-92210", "state": "RESERVED", "public_date": "2026-09-16", "sources": "csaf,zdi", "feed_count": 2, "dates": { "csaf": "2026-09-16", "zdi": "2026-09-16" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3414\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3414.json;zdi:ZDI-26-712", "description": "CVE-2026-92210", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 21, "clock_known": true, "hours_public": 504, "clock_origin": "advisory", "advisory_date": "2026-09-16", "advisory_days_public": 21, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3414.json", "zdi": "https://www.zerodayinitiative.com/advisories/ZDI-26-712/" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-92246", "state": "RESERVED", "public_date": "2026-09-16", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-16" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3424\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3424.json", "description": "CVE-2026-92246", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 21, "clock_known": true, "hours_public": 504, "clock_origin": "advisory", "advisory_date": "2026-09-16", "advisory_days_public": 21, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3424.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-92828", "state": "RESERVED", "public_date": "2026-09-16", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-16" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-92828\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92828.json", "description": "service-ca-operator: Operator ServiceAccount bound to cluster-admin", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 21, "clock_known": true, "hours_public": 504, "clock_origin": "advisory", "advisory_date": "2026-09-16", "advisory_days_public": 21, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92828.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-92183", "state": "RESERVED", "public_date": "2026-09-16", "sources": "zdi", "feed_count": 1, "dates": { "zdi": "2026-09-16" }, "refs": "zdi:ZDI-26-713", "description": "ZDI advisory ZDI-26-713", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 21, "clock_known": true, "hours_public": 504, "clock_origin": "advisory", "advisory_date": "2026-09-16", "advisory_days_public": 21, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "zdi": "https://www.zerodayinitiative.com/advisories/ZDI-26-713/" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-92207", "state": "RESERVED", "public_date": "2026-09-16", "sources": "zdi", "feed_count": 1, "dates": { "zdi": "2026-09-16" }, "refs": "zdi:ZDI-26-707", "description": "ZDI advisory ZDI-26-707", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 21, "clock_known": true, "hours_public": 504, "clock_origin": "advisory", "advisory_date": "2026-09-16", "advisory_days_public": 21, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "zdi": "https://www.zerodayinitiative.com/advisories/ZDI-26-707/" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-92206", "state": "RESERVED", "public_date": "2026-09-16", "sources": "zdi", "feed_count": 1, "dates": { "zdi": "2026-09-16" }, "refs": "zdi:ZDI-26-706", "description": "ZDI advisory ZDI-26-706", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 21, "clock_known": true, "hours_public": 504, "clock_origin": "advisory", "advisory_date": "2026-09-16", "advisory_days_public": 21, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "zdi": "https://www.zerodayinitiative.com/advisories/ZDI-26-706/" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-92205", "state": "RESERVED", "public_date": "2026-09-16", "sources": "zdi", "feed_count": 1, "dates": { "zdi": "2026-09-16" }, "refs": "zdi:ZDI-26-705", "description": "ZDI advisory ZDI-26-705", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 21, "clock_known": true, "hours_public": 504, "clock_origin": "advisory", "advisory_date": "2026-09-16", "advisory_days_public": 21, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "zdi": "https://www.zerodayinitiative.com/advisories/ZDI-26-705/" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-92204", "state": "RESERVED", "public_date": "2026-09-16", "sources": "zdi", "feed_count": 1, "dates": { "zdi": "2026-09-16" }, "refs": "zdi:ZDI-26-704", "description": "ZDI advisory ZDI-26-704", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 21, "clock_known": true, "hours_public": 504, "clock_origin": "advisory", "advisory_date": "2026-09-16", "advisory_days_public": 21, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "zdi": "https://www.zerodayinitiative.com/advisories/ZDI-26-704/" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-92203", "state": "RESERVED", "public_date": "2026-09-16", "sources": "zdi", "feed_count": 1, "dates": { "zdi": "2026-09-16" }, "refs": "zdi:ZDI-26-703", "description": "ZDI advisory ZDI-26-703", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 21, "clock_known": true, "hours_public": 504, "clock_origin": "advisory", "advisory_date": "2026-09-16", "advisory_days_public": 21, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "zdi": "https://www.zerodayinitiative.com/advisories/ZDI-26-703/" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-41480", "state": "RESERVED", "public_date": "2026-09-17", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-17" }, "refs": "ghsa-repos:HDFGroup/hdf5\tGHSA-rcvx-8cv8-5xqc", "description": "HDFGroup/hdf5 repository advisory GHSA-rcvx-8cv8-5xqc", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 20, "clock_known": true, "hours_public": 480, "clock_origin": "advisory", "advisory_date": "2026-09-17", "advisory_days_public": 20, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/HDFGroup/hdf5/security/advisories/GHSA-rcvx-8cv8-5xqc" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-86055", "state": "RESERVED", "public_date": "2026-09-17", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-17" }, "refs": "ghsa-repos:Part-DB/Part-DB-server\tGHSA-m9rf-69wp-c56r", "description": "Part-DB/Part-DB-server repository advisory GHSA-m9rf-69wp-c56r", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 20, "clock_known": true, "hours_public": 480, "clock_origin": "advisory", "advisory_date": "2026-09-17", "advisory_days_public": 20, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Part-DB/Part-DB-server/security/advisories/GHSA-m9rf-69wp-c56r" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104190", "state": "RESERVED", "public_date": "2026-09-17", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-17" }, "refs": "ghsa-repos:nextcloud/security-advisories\tGHSA-7hwf-8pcj-33h4", "description": "nextcloud/security-advisories repository advisory GHSA-7hwf-8pcj-33h4", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 20, "clock_known": true, "hours_public": 480, "clock_origin": "advisory", "advisory_date": "2026-09-17", "advisory_days_public": 20, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-7hwf-8pcj-33h4" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-89088", "state": "RESERVED", "public_date": "2026-09-18", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-09-18" }, "refs": "alas:CVE-2026-89088;debian:parted", "description": "heap buffer overflow in duplicate_legacy_root_dir", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 19, "clock_known": true, "hours_public": 456, "clock_origin": "advisory", "advisory_date": "2026-09-18", "advisory_days_public": 19, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "parted", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-89088.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-89088" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-89085", "state": "RESERVED", "public_date": "2026-09-18", "sources": "alas,csaf,debian", "feed_count": 3, "dates": { "alas": "2026-09-18", "csaf": "2026-09-29" }, "refs": "alas:CVE-2026-89085;csaf:SUSE Product Security Team\topenSUSE-SU-2026:11924-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11924-1.json;debian:parted", "description": "heap buffer overflow in _init_fats / fat_table_read", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 19, "clock_known": true, "hours_public": 456, "clock_origin": "advisory", "advisory_date": "2026-09-18", "advisory_days_public": 19, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "parted", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-89085.html", "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11924-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-89085" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-94291", "state": "RESERVED", "public_date": "2026-09-18", "sources": "csaf,debian", "feed_count": 2, "dates": { "csaf": "2026-09-18" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-94291\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94291.json;debian:epiphany-browser", "description": "epiphany: Insecure iframe framing via ephy-reader/view-source schemes allows local file exfiltration", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 19, "clock_known": true, "hours_public": 456, "clock_origin": "advisory", "advisory_date": "2026-09-18", "advisory_days_public": 19, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "epiphany-browser", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-94291.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-94291" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-92148", "state": "RESERVED", "public_date": "2026-09-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-18" }, "refs": "ghsa-repos:NationalSecurityAgency/skills-service\tGHSA-gx26-q78q-6hxr", "description": "NationalSecurityAgency/skills-service repository advisory GHSA-gx26-q78q-6hxr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 19, "clock_known": true, "hours_public": 456, "clock_origin": "advisory", "advisory_date": "2026-09-18", "advisory_days_public": 19, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/NationalSecurityAgency/skills-service/security/advisories/GHSA-gx26-q78q-6hxr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-71854", "state": "RESERVED", "public_date": "2026-09-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-18" }, "refs": "ghsa-repos:OpenAEV-Platform/openaev\tGHSA-47wr-wp4h-8v3f", "description": "OpenAEV-Platform/openaev repository advisory GHSA-47wr-wp4h-8v3f", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 19, "clock_known": true, "hours_public": 456, "clock_origin": "advisory", "advisory_date": "2026-09-18", "advisory_days_public": 19, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/OpenAEV-Platform/openaev/security/advisories/GHSA-47wr-wp4h-8v3f" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-70664", "state": "RESERVED", "public_date": "2026-09-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-18" }, "refs": "ghsa-repos:alfio-event/alf.io\tGHSA-56j3-6qx2-x5hg", "description": "alfio-event/alf.io repository advisory GHSA-56j3-6qx2-x5hg", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 19, "clock_known": true, "hours_public": 456, "clock_origin": "advisory", "advisory_date": "2026-09-18", "advisory_days_public": 19, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/alfio-event/alf.io/security/advisories/GHSA-56j3-6qx2-x5hg" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-70663", "state": "RESERVED", "public_date": "2026-09-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-18" }, "refs": "ghsa-repos:alfio-event/alf.io\tGHSA-35g5-xx5q-4mvr", "description": "alfio-event/alf.io repository advisory GHSA-35g5-xx5q-4mvr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 19, "clock_known": true, "hours_public": 456, "clock_origin": "advisory", "advisory_date": "2026-09-18", "advisory_days_public": 19, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/alfio-event/alf.io/security/advisories/GHSA-35g5-xx5q-4mvr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-70662", "state": "RESERVED", "public_date": "2026-09-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-18" }, "refs": "ghsa-repos:alfio-event/alf.io\tGHSA-6fwc-8jjg-gpfj", "description": "alfio-event/alf.io repository advisory GHSA-6fwc-8jjg-gpfj", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 19, "clock_known": true, "hours_public": 456, "clock_origin": "advisory", "advisory_date": "2026-09-18", "advisory_days_public": 19, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/alfio-event/alf.io/security/advisories/GHSA-6fwc-8jjg-gpfj" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-70661", "state": "RESERVED", "public_date": "2026-09-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-18" }, "refs": "ghsa-repos:alfio-event/alf.io\tGHSA-xrwj-22cq-6mh4", "description": "alfio-event/alf.io repository advisory GHSA-xrwj-22cq-6mh4", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 19, "clock_known": true, "hours_public": 456, "clock_origin": "advisory", "advisory_date": "2026-09-18", "advisory_days_public": 19, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/alfio-event/alf.io/security/advisories/GHSA-xrwj-22cq-6mh4" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77370", "state": "RESERVED", "public_date": "2026-09-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-18" }, "refs": "ghsa-repos:alfio-event/alf.io\tGHSA-gr52-5qp2-v2ww", "description": "alfio-event/alf.io repository advisory GHSA-gr52-5qp2-v2ww", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 19, "clock_known": true, "hours_public": 456, "clock_origin": "advisory", "advisory_date": "2026-09-18", "advisory_days_public": 19, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/alfio-event/alf.io/security/advisories/GHSA-gr52-5qp2-v2ww" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-100413", "state": "RESERVED", "public_date": "2026-09-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-18" }, "refs": "ghsa-repos:seaweedfs/seaweedfs\tGHSA-hqp5-j79g-vr89", "description": "seaweedfs/seaweedfs repository advisory GHSA-hqp5-j79g-vr89", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 19, "clock_known": true, "hours_public": 456, "clock_origin": "advisory", "advisory_date": "2026-09-18", "advisory_days_public": 19, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/seaweedfs/seaweedfs/security/advisories/GHSA-hqp5-j79g-vr89" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-91168", "state": "RESERVED", "public_date": "2026-09-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-18" }, "refs": "ghsa-repos:warp-tech/warpgate\tGHSA-pw7m-635x-pmx7", "description": "warp-tech/warpgate repository advisory GHSA-pw7m-635x-pmx7", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 19, "clock_known": true, "hours_public": 456, "clock_origin": "advisory", "advisory_date": "2026-09-18", "advisory_days_public": 19, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/warp-tech/warpgate/security/advisories/GHSA-pw7m-635x-pmx7" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-91163", "state": "RESERVED", "public_date": "2026-09-18", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-18" }, "refs": "ghsa-repos:warp-tech/warpgate\tGHSA-hrfx-fm67-gv64", "description": "warp-tech/warpgate repository advisory GHSA-hrfx-fm67-gv64", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 19, "clock_known": true, "hours_public": 456, "clock_origin": "advisory", "advisory_date": "2026-09-18", "advisory_days_public": 19, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/warp-tech/warpgate/security/advisories/GHSA-hrfx-fm67-gv64" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-68498", "state": "RESERVED", "public_date": "2026-09-18", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-18" }, "refs": "csaf:SUSE Product Security Team\tCVE-2026-68498\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-68498.json", "description": "CVE-2026-68498", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 19, "clock_known": true, "hours_public": 456, "clock_origin": "advisory", "advisory_date": "2026-09-18", "advisory_days_public": 19, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-68498.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-19772", "state": "RESERVED", "public_date": "2026-09-18", "sources": "zdi", "feed_count": 1, "dates": { "zdi": "2026-09-18" }, "refs": "zdi:ZDI-26-715", "description": "ZDI advisory ZDI-26-715", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 19, "clock_known": true, "hours_public": 456, "clock_origin": "advisory", "advisory_date": "2026-09-18", "advisory_days_public": 19, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "zdi": "https://www.zerodayinitiative.com/advisories/ZDI-26-715/" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96543", "state": "RESERVED", "public_date": "2026-09-19", "sources": "alas,csaf,debian,redhat", "feed_count": 4, "dates": { "alas": "2026-09-24", "redhat": "2026-09-19", "csaf": "2026-09-28" }, "refs": "alas:CVE-2026-96543;csaf:SUSE Product Security Team\topenSUSE-SU-2026:11890-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11890-1.json;debian:gimp;redhat:CVE-2026-96543", "description": "An out-of-bounds heap write flaw was found in GIMP's PVR image loader.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 18, "clock_known": true, "hours_public": 432, "clock_origin": "advisory", "advisory_date": "2026-09-19", "advisory_days_public": 18, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gimp", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-96543.html", "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11890-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-96543", "redhat": "https://access.redhat.com/security/cve/CVE-2026-96543" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96544", "state": "RESERVED", "public_date": "2026-09-19", "sources": "alas,csaf,debian,redhat", "feed_count": 4, "dates": { "alas": "2026-09-24", "redhat": "2026-09-19", "csaf": "2026-09-28" }, "refs": "alas:CVE-2026-96544;csaf:SUSE Product Security Team\topenSUSE-SU-2026:11890-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11890-1.json;debian:gimp;redhat:CVE-2026-96544", "description": "An integer overflow flaw was found in GIMP's PVR image loader.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 18, "clock_known": true, "hours_public": 432, "clock_origin": "advisory", "advisory_date": "2026-09-19", "advisory_days_public": 18, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "gimp", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-96544.html", "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11890-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-96544", "redhat": "https://access.redhat.com/security/cve/CVE-2026-96544" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-103028", "state": "RESERVED", "public_date": "2026-09-19", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-19" }, "refs": "ghsa-repos:drakkan/sftpgo\tGHSA-wwv9-g5x4-966q", "description": "drakkan/sftpgo repository advisory GHSA-wwv9-g5x4-966q", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 18, "clock_known": true, "hours_public": 432, "clock_origin": "advisory", "advisory_date": "2026-09-19", "advisory_days_public": 18, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/drakkan/sftpgo/security/advisories/GHSA-wwv9-g5x4-966q" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-93403", "state": "RESERVED", "public_date": "2026-09-20", "sources": "alas,alpine,debian,ghsa-repos", "feed_count": 4, "dates": { "alas": "2026-09-24", "ghsa-repos": "2026-09-20" }, "refs": "alas:CVE-2026-93403;alpine:rsyslog;debian:rsyslog;ghsa-repos:rsyslog/rsyslog\tGHSA-2whq-6rcm-64m8", "description": "rsyslog versions before 8.2606.0 contain a stack-based buffer overflow in the mmpstrucdata output module.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 17, "clock_known": true, "hours_public": 408, "clock_origin": "advisory", "advisory_date": "2026-09-20", "advisory_days_public": 17, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "rsyslog", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-93403.html", "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-93403", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-93403", "ghsa-repos": "https://github.com/rsyslog/rsyslog/security/advisories/GHSA-2whq-6rcm-64m8" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-68935", "state": "RESERVED", "public_date": "2026-09-20", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-20" }, "refs": "ghsa-repos:chartbrew/chartbrew\tGHSA-4q3v-5r7x-58q2", "description": "chartbrew/chartbrew repository advisory GHSA-4q3v-5r7x-58q2", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 17, "clock_known": true, "hours_public": 408, "clock_origin": "advisory", "advisory_date": "2026-09-20", "advisory_days_public": 17, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chartbrew/chartbrew/security/advisories/GHSA-4q3v-5r7x-58q2" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-69128", "state": "RESERVED", "public_date": "2026-09-20", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-20" }, "refs": "ghsa-repos:chartbrew/chartbrew\tGHSA-jw2r-hrxg-cfgc", "description": "chartbrew/chartbrew repository advisory GHSA-jw2r-hrxg-cfgc", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 17, "clock_known": true, "hours_public": 408, "clock_origin": "advisory", "advisory_date": "2026-09-20", "advisory_days_public": 17, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chartbrew/chartbrew/security/advisories/GHSA-jw2r-hrxg-cfgc" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-68933", "state": "RESERVED", "public_date": "2026-09-20", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-20" }, "refs": "ghsa-repos:chartbrew/chartbrew\tGHSA-crwc-vx5f-mh8x", "description": "chartbrew/chartbrew repository advisory GHSA-crwc-vx5f-mh8x", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 17, "clock_known": true, "hours_public": 408, "clock_origin": "advisory", "advisory_date": "2026-09-20", "advisory_days_public": 17, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/chartbrew/chartbrew/security/advisories/GHSA-crwc-vx5f-mh8x" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104192", "state": "RESERVED", "public_date": "2026-09-20", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-20" }, "refs": "ghsa-repos:dragonflydb/dragonfly\tGHSA-cg35-6jf4-crfh", "description": "dragonflydb/dragonfly repository advisory GHSA-cg35-6jf4-crfh", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 17, "clock_known": true, "hours_public": 408, "clock_origin": "advisory", "advisory_date": "2026-09-20", "advisory_days_public": 17, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/dragonflydb/dragonfly/security/advisories/GHSA-cg35-6jf4-crfh" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-92004", "state": "RESERVED", "public_date": "2026-09-20", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-20" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3485\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3485.json", "description": "CVE-2026-92004", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 17, "clock_known": true, "hours_public": 408, "clock_origin": "advisory", "advisory_date": "2026-09-20", "advisory_days_public": 17, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3485.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84112", "state": "RESERVED", "public_date": "2026-09-21", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-21" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3501\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3501.json", "description": "CVE-2026-84112", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 16, "clock_known": true, "hours_public": 384, "clock_origin": "advisory", "advisory_date": "2026-09-21", "advisory_days_public": 16, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3501.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-93402", "state": "RESERVED", "public_date": "2026-09-22", "sources": "alas,csaf,debian,ghsa-repos,redhat", "feed_count": 5, "dates": { "alas": "2026-09-24", "ghsa-repos": "2026-09-22", "redhat": "2026-09-22", "csaf": "2026-10-01" }, "refs": "alas:CVE-2026-93402;csaf:SUSE Product Security Team\tCVE-2026-93402\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-93402.json;debian:rsyslog;ghsa-repos:rsyslog/rsyslog\tGHSA-8v8w-f8wf-475j;redhat:CVE-2026-93402", "description": "The optional imdtls input module does not enforce tls.permittedpeer after a successful DTLS handshake when configured with tls.authmode=\"name\" or tls.authmode=\"fingerprint\".", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 15, "clock_known": true, "hours_public": 360, "clock_origin": "advisory", "advisory_date": "2026-09-22", "advisory_days_public": 15, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "rsyslog", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-93402.html", "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-93402.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-93402", "ghsa-repos": "https://github.com/rsyslog/rsyslog/security/advisories/GHSA-8v8w-f8wf-475j", "redhat": "https://access.redhat.com/security/cve/CVE-2026-93402" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-95507", "state": "RESERVED", "public_date": "2026-09-22", "sources": "alas,csaf,debian,redhat", "feed_count": 4, "dates": { "alas": "2026-09-23", "redhat": "2026-09-22", "csaf": "2026-09-29" }, "refs": "alas:CVE-2026-95507;csaf:SUSE Product Security Team\topenSUSE-SU-2026:11922-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11922-1.json;debian:libslirp;redhat:CVE-2026-95507", "description": "An out-of-bounds read was found in the NC-SI OEM response handler of libslirp.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 15, "clock_known": true, "hours_public": 360, "clock_origin": "advisory", "advisory_date": "2026-09-22", "advisory_days_public": 15, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "libslirp", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-95507.html", "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11922-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-95507", "redhat": "https://access.redhat.com/security/cve/CVE-2026-95507" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-85495", "state": "RESERVED", "public_date": "2026-09-22", "sources": "alas,alpine,debian", "feed_count": 3, "dates": { "alas": "2026-09-22" }, "refs": "alas:CVE-2026-85495;alpine:ppp;debian:ppp", "description": "A pre-authentication global buffer overflow in pppd's LCP Configure-NAK construction, verified on the 2.5.4-dev master snapshot of 2026-08-13 (latest release: 2.5.3 of 2026-05-26; current master lcp.c still carries the unguarded writes).", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 15, "clock_known": true, "hours_public": 360, "clock_origin": "advisory", "advisory_date": "2026-09-22", "advisory_days_public": 15, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "ppp", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-85495.html", "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-85495", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-85495" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-95516", "state": "RESERVED", "public_date": "2026-09-22", "sources": "csaf,debian,redhat", "feed_count": 3, "dates": { "redhat": "2026-09-22", "csaf": "2026-09-23" }, "refs": "csaf:SUSE Product Security Team\tCVE-2026-95516\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-95516.json;debian:zbar;redhat:CVE-2026-95516", "description": "zbar: zbar: heap-buffer-overflow write in Structured-Append QR text extraction", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 15, "clock_known": true, "hours_public": 360, "clock_origin": "advisory", "advisory_date": "2026-09-22", "advisory_days_public": 15, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "zbar", "ecosystem": "", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-95516.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-95516", "redhat": "https://access.redhat.com/security/cve/CVE-2026-95516" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-91159", "state": "RESERVED", "public_date": "2026-09-22", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-22" }, "refs": "ghsa-repos:discourse/discourse\tGHSA-f9jx-vv33-4282", "description": "discourse/discourse repository advisory GHSA-f9jx-vv33-4282", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 15, "clock_known": true, "hours_public": 360, "clock_origin": "advisory", "advisory_date": "2026-09-22", "advisory_days_public": 15, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/discourse/discourse/security/advisories/GHSA-f9jx-vv33-4282" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-91157", "state": "RESERVED", "public_date": "2026-09-22", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-22" }, "refs": "ghsa-repos:discourse/discourse\tGHSA-298h-xgw6-4pv3", "description": "discourse/discourse repository advisory GHSA-298h-xgw6-4pv3", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 15, "clock_known": true, "hours_public": 360, "clock_origin": "advisory", "advisory_date": "2026-09-22", "advisory_days_public": 15, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/discourse/discourse/security/advisories/GHSA-298h-xgw6-4pv3" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-91156", "state": "RESERVED", "public_date": "2026-09-22", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-22" }, "refs": "ghsa-repos:discourse/discourse\tGHSA-gh4f-qr62-vx8q", "description": "discourse/discourse repository advisory GHSA-gh4f-qr62-vx8q", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 15, "clock_known": true, "hours_public": 360, "clock_origin": "advisory", "advisory_date": "2026-09-22", "advisory_days_public": 15, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/discourse/discourse/security/advisories/GHSA-gh4f-qr62-vx8q" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-82402", "state": "RESERVED", "public_date": "2026-09-22", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-22" }, "refs": "ghsa-repos:gogs/gogs\tGHSA-3g28-2vwg-gxq6", "description": "gogs/gogs repository advisory GHSA-3g28-2vwg-gxq6", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 15, "clock_known": true, "hours_public": 360, "clock_origin": "advisory", "advisory_date": "2026-09-22", "advisory_days_public": 15, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/gogs/gogs/security/advisories/GHSA-3g28-2vwg-gxq6" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104254", "state": "RESERVED", "public_date": "2026-09-22", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-22" }, "refs": "ghsa-repos:open-quantum-safe/liboqs\tGHSA-wh5q-mpc8-67wf", "description": "open-quantum-safe/liboqs repository advisory GHSA-wh5q-mpc8-67wf", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 15, "clock_known": true, "hours_public": 360, "clock_origin": "advisory", "advisory_date": "2026-09-22", "advisory_days_public": 15, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/open-quantum-safe/liboqs/security/advisories/GHSA-wh5q-mpc8-67wf" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-88841", "state": "RESERVED", "public_date": "2026-09-23", "sources": "csaf,debian,redhat", "feed_count": 3, "dates": { "redhat": "2026-09-23", "csaf": "2026-10-02" }, "refs": "csaf:SUSE Product Security Team\topenSUSE-SU-2026:11954-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11954-1.json;debian:busybox;redhat:CVE-2026-88841", "description": "busybox: busybox: dpkg write_status_file() stale cursor causes out-of-bounds read and status file corruption", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "busybox", "ecosystem": "", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11954-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-88841", "redhat": "https://access.redhat.com/security/cve/CVE-2026-88841" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-101896", "state": "RESERVED", "public_date": "2026-09-23", "sources": "ghsa,ghsa-repos,osv", "feed_count": 3, "dates": { "ghsa": "2026-09-30", "ghsa-repos": "2026-09-23", "osv": "2026-09-30" }, "refs": "ghsa-repos:angular/angular\tGHSA-ff3f-86qr-9cv3;ghsa:GHSA-ff3f-86qr-9cv3;osv:npm:@angular/router", "description": "Angular Server-Side Rendering (SSR): Denial of Service via Numeric URL Matrix Parameters", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "@angular/router", "ecosystem": "npm", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-ff3f-86qr-9cv3", "ghsa-repos": "https://github.com/angular/angular/security/advisories/GHSA-ff3f-86qr-9cv3", "osv": "https://osv.dev/list?q=CVE-2026-101896" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-86009", "state": "RESERVED", "public_date": "2026-09-23", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-23" }, "refs": "ghsa-repos:Mailu/Mailu\tGHSA-crww-m82r-2wfm", "description": "Mailu/Mailu repository advisory GHSA-crww-m82r-2wfm", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Mailu/Mailu/security/advisories/GHSA-crww-m82r-2wfm" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-86008", "state": "RESERVED", "public_date": "2026-09-23", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-23" }, "refs": "ghsa-repos:Mailu/Mailu\tGHSA-9pv5-rm76-3qwj", "description": "Mailu/Mailu repository advisory GHSA-9pv5-rm76-3qwj", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Mailu/Mailu/security/advisories/GHSA-9pv5-rm76-3qwj" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-76822", "state": "RESERVED", "public_date": "2026-09-23", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-23" }, "refs": "ghsa-repos:OpenCTI-Platform/opencti\tGHSA-w45v-76pj-xggm", "description": "OpenCTI-Platform/opencti repository advisory GHSA-w45v-76pj-xggm", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/OpenCTI-Platform/opencti/security/advisories/GHSA-w45v-76pj-xggm" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-45706", "state": "RESERVED", "public_date": "2026-09-23", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-23" }, "refs": "ghsa-repos:RoastSlav/quickdrop\tGHSA-q8mc-vr6g-xjwg", "description": "RoastSlav/quickdrop repository advisory GHSA-q8mc-vr6g-xjwg", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/RoastSlav/quickdrop/security/advisories/GHSA-q8mc-vr6g-xjwg" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-35609", "state": "RESERVED", "public_date": "2026-09-23", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-23" }, "refs": "ghsa-repos:RoastSlav/quickdrop\tGHSA-q9xf-5rwh-9hmm", "description": "RoastSlav/quickdrop repository advisory GHSA-q9xf-5rwh-9hmm", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/RoastSlav/quickdrop/security/advisories/GHSA-q9xf-5rwh-9hmm" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-39986", "state": "RESERVED", "public_date": "2026-09-23", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-23" }, "refs": "ghsa-repos:aces/Loris\tGHSA-9h4g-m8c4-x84p", "description": "aces/Loris repository advisory GHSA-9h4g-m8c4-x84p", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/aces/Loris/security/advisories/GHSA-9h4g-m8c4-x84p" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-85747", "state": "RESERVED", "public_date": "2026-09-23", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-23" }, "refs": "ghsa-repos:distribution/distribution\tGHSA-685w-q87j-wqw3", "description": "distribution/distribution repository advisory GHSA-685w-q87j-wqw3", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/distribution/distribution/security/advisories/GHSA-685w-q87j-wqw3" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-78231", "state": "RESERVED", "public_date": "2026-09-23", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-23" }, "refs": "ghsa-repos:go-gitea/gitea\tGHSA-8vmh-w35x-73qr", "description": "go-gitea/gitea repository advisory GHSA-8vmh-w35x-73qr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/go-gitea/gitea/security/advisories/GHSA-8vmh-w35x-73qr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84679", "state": "RESERVED", "public_date": "2026-09-23", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2026-09-23", "csaf": "2026-09-23" }, "refs": "csaf:Red Hat Product Security\tRHSA-2026:71179\thttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_71179.json;redhat:CVE-2026-84679", "description": "automation-controller: automation-controller-container: automation-controller: the AWX_TASK_ENV setting applies arbitrary environment variables to the control-plane web and task processes, enabling TLS interception of external credentials", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2026-84679", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_71179.json", "redhat": "https://access.redhat.com/security/cve/CVE-2026-84679" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-91182", "state": "RESERVED", "public_date": "2026-09-23", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2026-09-23", "csaf": "2026-09-23" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-91182\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91182.json;redhat:CVE-2026-91182", "description": "open-cluster-management: Open-Cluster-Management: Privilege escalation and unauthorized resource modification in gRPC broker", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2026-91182", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91182.json", "redhat": "https://access.redhat.com/security/cve/CVE-2026-91182" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84475", "state": "RESERVED", "public_date": "2026-09-23", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2026-09-23", "csaf": "2026-09-23" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3555\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3555.json;redhat:CVE-2026-84475", "description": "automation-controller: automation-controller-container: automation-controller: InventorySource.source_vars lacks prevent_search, enabling zero-privilege cross-tenant extraction of inline inventory-plugin credentials via the", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2026-84475", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3555.json", "redhat": "https://access.redhat.com/security/cve/CVE-2026-84475" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84638", "state": "RESERVED", "public_date": "2026-09-23", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2026-09-23", "csaf": "2026-09-23" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3555\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3555.json;redhat:CVE-2026-84638", "description": "automation-controller: automation-controller-container: automation-controller: instance group attachment to schedules and workflow job template nodes checks only read permission, allowing use of restricted (controlplane / other-tenant)", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2026-84638", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3555.json", "redhat": "https://access.redhat.com/security/cve/CVE-2026-84638" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84643", "state": "RESERVED", "public_date": "2026-09-23", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2026-09-23", "csaf": "2026-09-23" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3555\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3555.json;redhat:CVE-2026-84643", "description": "automation-controller: automation-controller-container: automation-controller: missing use_role authorization on the project signature validation credential foreign key allows a project administrator to bind and use another organization's", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2026-84643", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3555.json", "redhat": "https://access.redhat.com/security/cve/CVE-2026-84643" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84644", "state": "RESERVED", "public_date": "2026-09-23", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2026-09-23", "csaf": "2026-09-23" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3555\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3555.json;redhat:CVE-2026-84644", "description": "automation-controller-container: automation-controller: automation-controller: server-side request forgery via the Thycotic Secret Server external credential plugin test endpoint (caller-controlled server_url, backend executed in the", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2026-84644", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3555.json", "redhat": "https://access.redhat.com/security/cve/CVE-2026-84644" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84678", "state": "RESERVED", "public_date": "2026-09-23", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2026-09-23", "csaf": "2026-09-23" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3555\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3555.json;redhat:CVE-2026-84678", "description": "automation-controller: automation-controller-container: automation-controller: GALAXY_TASK_ENV setting is not filtered for dynamic-linker / interpreter environment variables, allowing a system administrator to achieve code execution in the", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2026-84678", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3555.json", "redhat": "https://access.redhat.com/security/cve/CVE-2026-84678" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84680", "state": "RESERVED", "public_date": "2026-09-23", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2026-09-23", "csaf": "2026-09-23" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3555\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3555.json;redhat:CVE-2026-84680", "description": "automation-controller: automation-controller-container: automation-controller: organization galaxy credential attachment checks only read permission on the credential, allowing an organization admin with read-only visibility to bind and", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2026-84680", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3555.json", "redhat": "https://access.redhat.com/security/cve/CVE-2026-84680" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84684", "state": "RESERVED", "public_date": "2026-09-23", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2026-09-23", "csaf": "2026-09-23" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3555\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3555.json;redhat:CVE-2026-84684", "description": "automation-controller: automation-controller-container: automation-controller: constructed inventory input inventory attachment checks only read permission on the source inventory, allowing a read-only user to clone another tenant's hosts", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2026-84684", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3555.json", "redhat": "https://access.redhat.com/security/cve/CVE-2026-84684" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84686", "state": "RESERVED", "public_date": "2026-09-23", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2026-09-23", "csaf": "2026-09-23" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3555\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3555.json;redhat:CVE-2026-84686", "description": "automation-controller: automation-controller-container: automation-controller: notification template password fields can be decrypted by a notification-template administrator by replaying encrypted values across subfields, exposing", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2026-84686", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3555.json", "redhat": "https://access.redhat.com/security/cve/CVE-2026-84686" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84689", "state": "RESERVED", "public_date": "2026-09-23", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2026-09-23", "csaf": "2026-09-23" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3555\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3555.json;redhat:CVE-2026-84689", "description": "automation-controller: automation-controller-container: automation-controller: bulk job launch allows setting a workflow node's job reference to an arbitrary unified job, enabling a low-privileged user to cancel and read metadata of jobs", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2026-84689", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3555.json", "redhat": "https://access.redhat.com/security/cve/CVE-2026-84689" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84692", "state": "RESERVED", "public_date": "2026-09-23", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2026-09-23", "csaf": "2026-09-23" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3555\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3555.json;redhat:CVE-2026-84692", "description": "automation-controller: automation-controller-container: automation-controller: workflow job template node execute permission check bypassed by creating a node with a null unified_job_template and then patching it, allowing a single", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2026-84692", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3555.json", "redhat": "https://access.redhat.com/security/cve/CVE-2026-84692" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84703", "state": "RESERVED", "public_date": "2026-09-23", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2026-09-23", "csaf": "2026-09-23" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3555\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3555.json;redhat:CVE-2026-84703", "description": "automation-controller: automation-controller-container: automation-controller: execution environment credential foreign key is not use-permission checked, allowing an organization execution-environment admin to bind and disclose another", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2026-84703", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3555.json", "redhat": "https://access.redhat.com/security/cve/CVE-2026-84703" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84707", "state": "RESERVED", "public_date": "2026-09-23", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2026-09-23", "csaf": "2026-09-23" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3555\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3555.json;redhat:CVE-2026-84707", "description": "automation-controller: automation-controller-container: automation-controller: host_filter SmartFilter ORM traversal exposes JobEvent/AdHocCommandEvent event_data and stdout to users without permission on the job, enabling blind", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2026-84707", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3555.json", "redhat": "https://access.redhat.com/security/cve/CVE-2026-84707" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84708", "state": "RESERVED", "public_date": "2026-09-23", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2026-09-23", "csaf": "2026-09-23" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3555\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3555.json;redhat:CVE-2026-84708", "description": "automation-controller: automation-controller-container: automation-controller: container group pod_spec_override mints the automation-controller ServiceAccount token and mounts control-plane namespace secrets into job pods, bypassing", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2026-84708", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3555.json", "redhat": "https://access.redhat.com/security/cve/CVE-2026-84708" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84709", "state": "RESERVED", "public_date": "2026-09-23", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2026-09-23", "csaf": "2026-09-23" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3555\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3555.json;redhat:CVE-2026-84709", "description": "automation-controller: automation-controller: CredentialType injector validation renders attacker-supplied Jinja2 templates synchronously in the web worker, allowing uncontrolled resource consumption (denial of service) and an", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2026-84709", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3555.json", "redhat": "https://access.redhat.com/security/cve/CVE-2026-84709" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-84711", "state": "RESERVED", "public_date": "2026-09-23", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2026-09-23", "csaf": "2026-09-23" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3555\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3555.json;redhat:CVE-2026-84711", "description": "automation-controller: automation-controller: Project scm_branch/scm_refspec argument injection into git during project sync allows arbitrary file read on the sync host (control-plane ServiceAccount token, SECRET_KEY, and DB credentials on", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2026-84711", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3555.json", "redhat": "https://access.redhat.com/security/cve/CVE-2026-84711" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96360", "state": "RESERVED", "public_date": "2026-09-23", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-23" }, "refs": "osv:Packagist:drupal/webform", "description": "The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/webform", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-96360" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96361", "state": "RESERVED", "public_date": "2026-09-23", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-23" }, "refs": "osv:Packagist:drupal/webform", "description": "The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/webform", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-96361" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96358", "state": "RESERVED", "public_date": "2026-09-23", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-23" }, "refs": "osv:Packagist:drupal/webform", "description": "The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/webform", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-96358" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96359", "state": "RESERVED", "public_date": "2026-09-23", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-23" }, "refs": "osv:Packagist:drupal/webform", "description": "The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/webform", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-96359" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96362", "state": "RESERVED", "public_date": "2026-09-23", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-23" }, "refs": "osv:Packagist:drupal/webform", "description": "The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/webform", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-96362" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96363", "state": "RESERVED", "public_date": "2026-09-23", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-23" }, "refs": "osv:Packagist:drupal/webform", "description": "The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/webform", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-96363" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96367", "state": "RESERVED", "public_date": "2026-09-23", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-23" }, "refs": "osv:Packagist:drupal/webform", "description": "The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/webform", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-96367" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96368", "state": "RESERVED", "public_date": "2026-09-23", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-23" }, "refs": "osv:Packagist:drupal/webform", "description": "The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/webform", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-96368" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96370", "state": "RESERVED", "public_date": "2026-09-23", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-23" }, "refs": "osv:Packagist:drupal/webform", "description": "The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/webform", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-96370" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96369", "state": "RESERVED", "public_date": "2026-09-23", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-23" }, "refs": "osv:Packagist:drupal/webform", "description": "The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/webform", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-96369" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96371", "state": "RESERVED", "public_date": "2026-09-23", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-23" }, "refs": "osv:Packagist:drupal/webform", "description": "The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/webform", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-96371" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96372", "state": "RESERVED", "public_date": "2026-09-23", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-23" }, "refs": "osv:Packagist:drupal/webform", "description": "The Webform module enables site builders to create forms and collect submissions.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/webform", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-96372" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96373", "state": "RESERVED", "public_date": "2026-09-23", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-23" }, "refs": "osv:Packagist:drupal/webform", "description": "The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/webform", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-96373" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96366", "state": "RESERVED", "public_date": "2026-09-23", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-23" }, "refs": "osv:Packagist:drupal/webform", "description": "The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/webform", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-96366" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96365", "state": "RESERVED", "public_date": "2026-09-23", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-23" }, "refs": "osv:Packagist:drupal/webform", "description": "The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/webform", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-96365" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96364", "state": "RESERVED", "public_date": "2026-09-23", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-23" }, "refs": "osv:Packagist:drupal/webform", "description": "The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/webform", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-96364" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96357", "state": "RESERVED", "public_date": "2026-09-23", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-23" }, "refs": "osv:Packagist:drupal/webform", "description": "The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/webform", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-96357" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96398", "state": "RESERVED", "public_date": "2026-09-23", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-23" }, "refs": "osv:Packagist:drupal/webform", "description": "The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/webform", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-96398" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96356", "state": "RESERVED", "public_date": "2026-09-23", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-23" }, "refs": "osv:Packagist:drupal/webform", "description": "The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/webform", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-96356" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96355", "state": "RESERVED", "public_date": "2026-09-23", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-23" }, "refs": "osv:Packagist:drupal/webform", "description": "The Webform module allows site builders to create forms, collect submissions, and render submitted values in configurable formats.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/webform", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-96355" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96375", "state": "RESERVED", "public_date": "2026-09-23", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-23" }, "refs": "osv:Packagist:drupal/cloud", "description": "The Cloud module enables users to manage cloud infrastructure through Drupal.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/cloud", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-96375" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96376", "state": "RESERVED", "public_date": "2026-09-23", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-23" }, "refs": "osv:Packagist:drupal/cloud", "description": "The Cloud module enables users to manage cloud resources through Drupal.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/cloud", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-96376" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96374", "state": "RESERVED", "public_date": "2026-09-23", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-23" }, "refs": "osv:Packagist:drupal/project_browser", "description": "The Project Browser module enables you to apply recipes and enable modules from the web user interface.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/project_browser", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-96374" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96378", "state": "RESERVED", "public_date": "2026-09-23", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-23" }, "refs": "osv:Packagist:drupal/commerce_decoupled_checkout", "description": "This module enables REST endpoints for a decoupled Commerce experience which allow for remote order creation.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/commerce_decoupled_checkout", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-96378" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96384", "state": "RESERVED", "public_date": "2026-09-23", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-23" }, "refs": "osv:Packagist:drupal/mermaid_diagram_field", "description": "This module enables you to add mermaid diagram that displays either inline on an entity or optionally in a modal.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/mermaid_diagram_field", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-96384" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96379", "state": "RESERVED", "public_date": "2026-09-23", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-23" }, "refs": "osv:Packagist:drupal/cookiecuttr", "description": "This module enables you to provide information and options about cookie usage.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/cookiecuttr", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-96379" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96385", "state": "RESERVED", "public_date": "2026-09-23", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-23" }, "refs": "osv:Packagist:drupal/rest_api_authentication", "description": "This module enables you to add an extra authentication layer to the API. The module does not sufficiently validate authentication requirements for all API requests, which can result in an access bypass vulnerability.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/rest_api_authentication", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-96385" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96387", "state": "RESERVED", "public_date": "2026-09-23", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-23" }, "refs": "osv:Packagist:drupal/stop_admin", "description": "This module enables sites to block access for the administrative user account (user 1) or users with the administrator role.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/stop_admin", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-96387" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96388", "state": "RESERVED", "public_date": "2026-09-23", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-23" }, "refs": "osv:Packagist:drupal/tawk_to", "description": "This module provides integration of the tawk.to live chat for Drupal sites.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/tawk_to", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-96388" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96390", "state": "RESERVED", "public_date": "2026-09-23", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-23" }, "refs": "osv:Packagist:drupal/editoria11y", "description": "This module runs a client-side accessibility checker that automatically reports results to dashboard views over an API. The module incorrectly described a permission as a \"view\" permission when it grants edit and delete access to module data, resulting in a potential access bypass.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/editoria11y", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-96390" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96391", "state": "RESERVED", "public_date": "2026-09-23", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-23" }, "refs": "osv:Packagist:drupal/webform_rest", "description": "This module enables you to retrieve and submit webforms via REST. The module doesn't sufficiently check permission to webform and webform submission entities when retrieving webform elements or fields.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/webform_rest", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-96391" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96392", "state": "RESERVED", "public_date": "2026-09-23", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-23" }, "refs": "osv:Packagist:drupal/ai_ckeditor", "description": "This module enables you to use AI to fill in or replace text in CKEditor.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/ai_ckeditor", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-96392" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96377", "state": "RESERVED", "public_date": "2026-09-23", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-23" }, "refs": "osv:Packagist:drupal/combined_image_style", "description": "This module enables you to combine multiple image styles into a single image derivative.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/combined_image_style", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-96377" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96380", "state": "RESERVED", "public_date": "2026-09-23", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-23" }, "refs": "osv:Packagist:drupal/css_usage_analyzer", "description": "This module lets a frontend scanner post CSS-usage measurements to the site so admin reports can show real-page statistics.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/css_usage_analyzer", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-96380" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96386", "state": "RESERVED", "public_date": "2026-09-23", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-23" }, "refs": "osv:Packagist:drupal/smart_content", "description": "This module enables you to personalize content for anonymous and authenticated users by showing different blocks to visitors based on client-side conditions.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/smart_content", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-96386" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96382", "state": "RESERVED", "public_date": "2026-09-23", "sources": "osv", "feed_count": 1, "dates": { "osv": "2026-09-23" }, "refs": "osv:Packagist:drupal/diba_carousel", "description": "The Diba Carousel Slider adds a Bootstrap carousel slider block that can be used directly without creating a View or custom integration.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "drupal/diba_carousel", "ecosystem": "Packagist", "source_urls": { "osv": "https://osv.dev/list?q=CVE-2026-96382" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-92202", "state": "RESERVED", "public_date": "2026-09-23", "sources": "zdi", "feed_count": 1, "dates": { "zdi": "2026-09-23" }, "refs": "zdi:ZDI-26-748", "description": "ZDI advisory ZDI-26-748", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 14, "clock_known": true, "hours_public": 336, "clock_origin": "advisory", "advisory_date": "2026-09-23", "advisory_days_public": 14, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "zdi": "https://www.zerodayinitiative.com/advisories/ZDI-26-748/" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-95622", "state": "RESERVED", "public_date": "2026-09-24", "sources": "alas,csaf,debian,redhat", "feed_count": 4, "dates": { "alas": "2026-09-25", "redhat": "2026-09-24", "csaf": "2026-09-26" }, "refs": "alas:CVE-2026-95622;csaf:SUSE Product Security Team\tCVE-2026-95622\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-95622.json;debian:modemmanager;redhat:CVE-2026-95622", "description": "A flaw was found in ModemManager.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 13, "clock_known": true, "hours_public": 312, "clock_origin": "advisory", "advisory_date": "2026-09-24", "advisory_days_public": 13, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "modemmanager", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-95622.html", "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-95622.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-95622", "redhat": "https://access.redhat.com/security/cve/CVE-2026-95622" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63673", "state": "RESERVED", "public_date": "2026-09-24", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-24" }, "refs": "ghsa-repos:datacycle-engine/dataCycle-CORE\tGHSA-x347-v96v-fmr2", "description": "datacycle-engine/dataCycle-CORE repository advisory GHSA-x347-v96v-fmr2", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 13, "clock_known": true, "hours_public": 312, "clock_origin": "advisory", "advisory_date": "2026-09-24", "advisory_days_public": 13, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/datacycle-engine/dataCycle-CORE/security/advisories/GHSA-x347-v96v-fmr2" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63674", "state": "RESERVED", "public_date": "2026-09-24", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-24" }, "refs": "ghsa-repos:datacycle-engine/dataCycle-CORE\tGHSA-7m86-5wfg-gxcq", "description": "datacycle-engine/dataCycle-CORE repository advisory GHSA-7m86-5wfg-gxcq", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 13, "clock_known": true, "hours_public": 312, "clock_origin": "advisory", "advisory_date": "2026-09-24", "advisory_days_public": 13, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/datacycle-engine/dataCycle-CORE/security/advisories/GHSA-7m86-5wfg-gxcq" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63675", "state": "RESERVED", "public_date": "2026-09-24", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-24" }, "refs": "ghsa-repos:datacycle-engine/dataCycle-CORE\tGHSA-mx6c-hwj6-j9fm", "description": "datacycle-engine/dataCycle-CORE repository advisory GHSA-mx6c-hwj6-j9fm", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 13, "clock_known": true, "hours_public": 312, "clock_origin": "advisory", "advisory_date": "2026-09-24", "advisory_days_public": 13, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/datacycle-engine/dataCycle-CORE/security/advisories/GHSA-mx6c-hwj6-j9fm" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-64658", "state": "RESERVED", "public_date": "2026-09-24", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-24" }, "refs": "ghsa-repos:datacycle-engine/dataCycle-CORE\tGHSA-v795-qvh9-9gfr", "description": "datacycle-engine/dataCycle-CORE repository advisory GHSA-v795-qvh9-9gfr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 13, "clock_known": true, "hours_public": 312, "clock_origin": "advisory", "advisory_date": "2026-09-24", "advisory_days_public": 13, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/datacycle-engine/dataCycle-CORE/security/advisories/GHSA-v795-qvh9-9gfr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-64659", "state": "RESERVED", "public_date": "2026-09-24", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-24" }, "refs": "ghsa-repos:datacycle-engine/dataCycle-CORE\tGHSA-p2rc-g8h5-jmq3", "description": "datacycle-engine/dataCycle-CORE repository advisory GHSA-p2rc-g8h5-jmq3", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 13, "clock_known": true, "hours_public": 312, "clock_origin": "advisory", "advisory_date": "2026-09-24", "advisory_days_public": 13, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/datacycle-engine/dataCycle-CORE/security/advisories/GHSA-p2rc-g8h5-jmq3" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-64660", "state": "RESERVED", "public_date": "2026-09-24", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-24" }, "refs": "ghsa-repos:datacycle-engine/dataCycle-CORE\tGHSA-9q9j-xcw4-rwqx", "description": "datacycle-engine/dataCycle-CORE repository advisory GHSA-9q9j-xcw4-rwqx", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 13, "clock_known": true, "hours_public": 312, "clock_origin": "advisory", "advisory_date": "2026-09-24", "advisory_days_public": 13, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/datacycle-engine/dataCycle-CORE/security/advisories/GHSA-9q9j-xcw4-rwqx" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-86002", "state": "RESERVED", "public_date": "2026-09-24", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-24" }, "refs": "ghsa-repos:dokku/dokku\tGHSA-fccf-j7qf-2xp9", "description": "dokku/dokku repository advisory GHSA-fccf-j7qf-2xp9", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 13, "clock_known": true, "hours_public": 312, "clock_origin": "advisory", "advisory_date": "2026-09-24", "advisory_days_public": 13, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/dokku/dokku/security/advisories/GHSA-fccf-j7qf-2xp9" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-76083", "state": "RESERVED", "public_date": "2026-09-24", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-24" }, "refs": "ghsa-repos:getredash/redash\tGHSA-m723-r867-wfgw", "description": "getredash/redash repository advisory GHSA-m723-r867-wfgw", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 13, "clock_known": true, "hours_public": 312, "clock_origin": "advisory", "advisory_date": "2026-09-24", "advisory_days_public": 13, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/getredash/redash/security/advisories/GHSA-m723-r867-wfgw" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77371", "state": "RESERVED", "public_date": "2026-09-24", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-24" }, "refs": "ghsa-repos:getredash/redash\tGHSA-cr68-3xxj-cg9f", "description": "getredash/redash repository advisory GHSA-cr68-3xxj-cg9f", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 13, "clock_known": true, "hours_public": 312, "clock_origin": "advisory", "advisory_date": "2026-09-24", "advisory_days_public": 13, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/getredash/redash/security/advisories/GHSA-cr68-3xxj-cg9f" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-42093", "state": "RESERVED", "public_date": "2026-09-24", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-24" }, "refs": "ghsa-repos:getredash/redash\tGHSA-v43x-rgcc-wh77", "description": "getredash/redash repository advisory GHSA-v43x-rgcc-wh77", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 13, "clock_known": true, "hours_public": 312, "clock_origin": "advisory", "advisory_date": "2026-09-24", "advisory_days_public": 13, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/getredash/redash/security/advisories/GHSA-v43x-rgcc-wh77" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-85278", "state": "RESERVED", "public_date": "2026-09-24", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-24" }, "refs": "csaf:SUSE Product Security Team\topenSUSE-SU-2026:11879-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11879-1.json", "description": "CVE-2026-85278", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 13, "clock_known": true, "hours_public": 312, "clock_origin": "advisory", "advisory_date": "2026-09-24", "advisory_days_public": 13, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11879-1.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-94659", "state": "RESERVED", "public_date": "2026-09-24", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-24" }, "refs": "csaf:SUSE Product Security Team\tCVE-2026-94659\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-94659.json", "description": "CVE-2026-94659", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 13, "clock_known": true, "hours_public": 312, "clock_origin": "advisory", "advisory_date": "2026-09-24", "advisory_days_public": 13, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-94659.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-94660", "state": "RESERVED", "public_date": "2026-09-24", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-24" }, "refs": "csaf:SUSE Product Security Team\tCVE-2026-94660\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-94660.json", "description": "CVE-2026-94660", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 13, "clock_known": true, "hours_public": 312, "clock_origin": "advisory", "advisory_date": "2026-09-24", "advisory_days_public": 13, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-94660.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-82987", "state": "RESERVED", "public_date": "2026-09-24", "sources": "certcc", "feed_count": 1, "dates": { "certcc": "2026-09-24" }, "refs": "certcc:VU#234131", "description": "ViewSonic vCast media streaming service allows unauthenticated screen exfiltration and device compromise", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 13, "clock_known": true, "hours_public": 312, "clock_origin": "advisory", "advisory_date": "2026-09-24", "advisory_days_public": 13, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "certcc": "https://www.kb.cert.org/vuls/id/234131" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-42394", "state": "RESERVED", "public_date": "2026-09-25", "sources": "alas,debian", "feed_count": 2, "dates": { "alas": "2026-09-25" }, "refs": "alas:CVE-2026-42394;debian:dovecot", "description": "Pigeonhole's file storage followed any symlink encountered while resolving a script path, including symlinks in personal (user-writable) storage whose target lay outside the storage directory.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 12, "clock_known": true, "hours_public": 288, "clock_origin": "advisory", "advisory_date": "2026-09-25", "advisory_days_public": 12, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "dovecot", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-42394.html", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-42394" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55243", "state": "RESERVED", "public_date": "2026-09-25", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-25" }, "refs": "ghsa-repos:CollaboraOnline/online\tGHSA-2g97-qwj5-fj7f", "description": "CollaboraOnline/online repository advisory GHSA-2g97-qwj5-fj7f", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 12, "clock_known": true, "hours_public": 288, "clock_origin": "advisory", "advisory_date": "2026-09-25", "advisory_days_public": 12, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/CollaboraOnline/online/security/advisories/GHSA-2g97-qwj5-fj7f" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-103026", "state": "RESERVED", "public_date": "2026-09-25", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-25" }, "refs": "ghsa-repos:Paymenter/Paymenter\tGHSA-prhx-9q2h-ph2x", "description": "Paymenter/Paymenter repository advisory GHSA-prhx-9q2h-ph2x", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 12, "clock_known": true, "hours_public": 288, "clock_origin": "advisory", "advisory_date": "2026-09-25", "advisory_days_public": 12, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/Paymenter/Paymenter/security/advisories/GHSA-prhx-9q2h-ph2x" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104784", "state": "RESERVED", "public_date": "2026-09-25", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-25" }, "refs": "ghsa-repos:e107inc/e107\tGHSA-wq9c-9fw4-3fg2", "description": "e107inc/e107 repository advisory GHSA-wq9c-9fw4-3fg2", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 12, "clock_known": true, "hours_public": 288, "clock_origin": "advisory", "advisory_date": "2026-09-25", "advisory_days_public": 12, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/e107inc/e107/security/advisories/GHSA-wq9c-9fw4-3fg2" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104783", "state": "RESERVED", "public_date": "2026-09-25", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-25" }, "refs": "ghsa-repos:e107inc/e107\tGHSA-rfq3-mc44-648g", "description": "e107inc/e107 repository advisory GHSA-rfq3-mc44-648g", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 12, "clock_known": true, "hours_public": 288, "clock_origin": "advisory", "advisory_date": "2026-09-25", "advisory_days_public": 12, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/e107inc/e107/security/advisories/GHSA-rfq3-mc44-648g" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104785", "state": "RESERVED", "public_date": "2026-09-25", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-25" }, "refs": "ghsa-repos:e107inc/e107\tGHSA-wmqr-5mw9-hx7x", "description": "e107inc/e107 repository advisory GHSA-wmqr-5mw9-hx7x", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 12, "clock_known": true, "hours_public": 288, "clock_origin": "advisory", "advisory_date": "2026-09-25", "advisory_days_public": 12, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/e107inc/e107/security/advisories/GHSA-wmqr-5mw9-hx7x" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-105685", "state": "RESERVED", "public_date": "2026-09-25", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-25" }, "refs": "ghsa-repos:penpot/penpot\tGHSA-cjm5-wh82-hwr2", "description": "penpot/penpot repository advisory GHSA-cjm5-wh82-hwr2", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 12, "clock_known": true, "hours_public": 288, "clock_origin": "advisory", "advisory_date": "2026-09-25", "advisory_days_public": 12, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/penpot/penpot/security/advisories/GHSA-cjm5-wh82-hwr2" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-100395", "state": "RESERVED", "public_date": "2026-09-26", "sources": "debian,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-09-26" }, "refs": "debian:lxc;ghsa-repos:lxc/lxc\tGHSA-r23j-58gg-pjjc", "description": "lxc/lxc repository advisory GHSA-r23j-58gg-pjjc", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 11, "clock_known": true, "hours_public": 264, "clock_origin": "advisory", "advisory_date": "2026-09-26", "advisory_days_public": 11, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "lxc", "ecosystem": "", "source_urls": { "debian": "https://security-tracker.debian.org/tracker/CVE-2026-100395", "ghsa-repos": "https://github.com/lxc/lxc/security/advisories/GHSA-r23j-58gg-pjjc" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-59977", "state": "RESERVED", "public_date": "2026-09-26", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-26" }, "refs": "ghsa-repos:C4illin/ConvertX\tGHSA-63w7-h5q8-hcrj", "description": "C4illin/ConvertX repository advisory GHSA-63w7-h5q8-hcrj", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 11, "clock_known": true, "hours_public": 264, "clock_origin": "advisory", "advisory_date": "2026-09-26", "advisory_days_public": 11, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/C4illin/ConvertX/security/advisories/GHSA-63w7-h5q8-hcrj" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-59976", "state": "RESERVED", "public_date": "2026-09-26", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-26" }, "refs": "ghsa-repos:C4illin/ConvertX\tGHSA-pvqw-vc5x-266j", "description": "C4illin/ConvertX repository advisory GHSA-pvqw-vc5x-266j", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 11, "clock_known": true, "hours_public": 264, "clock_origin": "advisory", "advisory_date": "2026-09-26", "advisory_days_public": 11, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/C4illin/ConvertX/security/advisories/GHSA-pvqw-vc5x-266j" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96623", "state": "RESERVED", "public_date": "2026-09-27", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-27" }, "refs": "ghsa-repos:fedify-dev/fedify\tGHSA-mc44-6cfg-2v6w", "description": "fedify-dev/fedify repository advisory GHSA-mc44-6cfg-2v6w", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 10, "clock_known": true, "hours_public": 240, "clock_origin": "advisory", "advisory_date": "2026-09-27", "advisory_days_public": 10, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/fedify-dev/fedify/security/advisories/GHSA-mc44-6cfg-2v6w" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96624", "state": "RESERVED", "public_date": "2026-09-27", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-27" }, "refs": "ghsa-repos:fedify-dev/fedify\tGHSA-f59r-8gcj-68f2", "description": "fedify-dev/fedify repository advisory GHSA-f59r-8gcj-68f2", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 10, "clock_known": true, "hours_public": 240, "clock_origin": "advisory", "advisory_date": "2026-09-27", "advisory_days_public": 10, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/fedify-dev/fedify/security/advisories/GHSA-f59r-8gcj-68f2" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-96625", "state": "RESERVED", "public_date": "2026-09-27", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-27" }, "refs": "ghsa-repos:fedify-dev/fedify\tGHSA-q9f8-5hc7-898f", "description": "fedify-dev/fedify repository advisory GHSA-q9f8-5hc7-898f", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 10, "clock_known": true, "hours_public": 240, "clock_origin": "advisory", "advisory_date": "2026-09-27", "advisory_days_public": 10, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/fedify-dev/fedify/security/advisories/GHSA-q9f8-5hc7-898f" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-70660", "state": "RESERVED", "public_date": "2026-09-27", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-27" }, "refs": "ghsa-repos:leejet/stable-diffusion.cpp\tGHSA-v2m4-h57v-fr6w", "description": "leejet/stable-diffusion.cpp repository advisory GHSA-v2m4-h57v-fr6w", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 10, "clock_known": true, "hours_public": 240, "clock_origin": "advisory", "advisory_date": "2026-09-27", "advisory_days_public": 10, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/leejet/stable-diffusion.cpp/security/advisories/GHSA-v2m4-h57v-fr6w" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-70659", "state": "RESERVED", "public_date": "2026-09-27", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-27" }, "refs": "ghsa-repos:leejet/stable-diffusion.cpp\tGHSA-6q7q-2v9c-x8m7", "description": "leejet/stable-diffusion.cpp repository advisory GHSA-6q7q-2v9c-x8m7", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 10, "clock_known": true, "hours_public": 240, "clock_origin": "advisory", "advisory_date": "2026-09-27", "advisory_days_public": 10, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/leejet/stable-diffusion.cpp/security/advisories/GHSA-6q7q-2v9c-x8m7" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-91128", "state": "RESERVED", "public_date": "2026-09-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-28" }, "refs": "ghsa-repos:ChurchCRM/CRM\tGHSA-9fgc-76p2-8mxh", "description": "ChurchCRM/CRM repository advisory GHSA-9fgc-76p2-8mxh", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/ChurchCRM/CRM/security/advisories/GHSA-9fgc-76p2-8mxh" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-49437", "state": "RESERVED", "public_date": "2026-09-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-28" }, "refs": "ghsa-repos:InvoicePlane/InvoicePlane\tGHSA-vphv-wmr3-68fp", "description": "InvoicePlane/InvoicePlane repository advisory GHSA-vphv-wmr3-68fp", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/InvoicePlane/InvoicePlane/security/advisories/GHSA-vphv-wmr3-68fp" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55104", "state": "RESERVED", "public_date": "2026-09-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-28" }, "refs": "ghsa-repos:InvoicePlane/InvoicePlane\tGHSA-vm87-2qmm-rhg8", "description": "InvoicePlane/InvoicePlane repository advisory GHSA-vm87-2qmm-rhg8", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/InvoicePlane/InvoicePlane/security/advisories/GHSA-vm87-2qmm-rhg8" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55589", "state": "RESERVED", "public_date": "2026-09-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-28" }, "refs": "ghsa-repos:InvoicePlane/InvoicePlane\tGHSA-jg68-6mqc-hxcr", "description": "InvoicePlane/InvoicePlane repository advisory GHSA-jg68-6mqc-hxcr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/InvoicePlane/InvoicePlane/security/advisories/GHSA-jg68-6mqc-hxcr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61562", "state": "RESERVED", "public_date": "2026-09-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-28" }, "refs": "ghsa-repos:InvoicePlane/InvoicePlane\tGHSA-7r3g-fppx-2p79", "description": "InvoicePlane/InvoicePlane repository advisory GHSA-7r3g-fppx-2p79", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/InvoicePlane/InvoicePlane/security/advisories/GHSA-7r3g-fppx-2p79" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-65961", "state": "RESERVED", "public_date": "2026-09-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-28" }, "refs": "ghsa-repos:InvoicePlane/InvoicePlane\tGHSA-35qh-94hc-hm2w", "description": "InvoicePlane/InvoicePlane repository advisory GHSA-35qh-94hc-hm2w", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/InvoicePlane/InvoicePlane/security/advisories/GHSA-35qh-94hc-hm2w" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-65977", "state": "RESERVED", "public_date": "2026-09-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-28" }, "refs": "ghsa-repos:InvoicePlane/InvoicePlane\tGHSA-j89p-m59x-86r9", "description": "InvoicePlane/InvoicePlane repository advisory GHSA-j89p-m59x-86r9", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/InvoicePlane/InvoicePlane/security/advisories/GHSA-j89p-m59x-86r9" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-41209", "state": "RESERVED", "public_date": "2026-09-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-28" }, "refs": "ghsa-repos:InvoicePlane/InvoicePlane\tGHSA-xvrc-hv8j-8v8w", "description": "InvoicePlane/InvoicePlane repository advisory GHSA-xvrc-hv8j-8v8w", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/InvoicePlane/InvoicePlane/security/advisories/GHSA-xvrc-hv8j-8v8w" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-49354", "state": "RESERVED", "public_date": "2026-09-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-28" }, "refs": "ghsa-repos:InvoicePlane/InvoicePlane\tGHSA-x66r-7wf6-wgv7", "description": "InvoicePlane/InvoicePlane repository advisory GHSA-x66r-7wf6-wgv7", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/InvoicePlane/InvoicePlane/security/advisories/GHSA-x66r-7wf6-wgv7" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-43932", "state": "RESERVED", "public_date": "2026-09-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-28" }, "refs": "ghsa-repos:InvoicePlane/InvoicePlane\tGHSA-wj6q-j965-2w2v", "description": "InvoicePlane/InvoicePlane repository advisory GHSA-wj6q-j965-2w2v", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/InvoicePlane/InvoicePlane/security/advisories/GHSA-wj6q-j965-2w2v" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-43933", "state": "RESERVED", "public_date": "2026-09-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-28" }, "refs": "ghsa-repos:InvoicePlane/InvoicePlane\tGHSA-phh5-3jc3-pm6w", "description": "InvoicePlane/InvoicePlane repository advisory GHSA-phh5-3jc3-pm6w", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/InvoicePlane/InvoicePlane/security/advisories/GHSA-phh5-3jc3-pm6w" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-43931", "state": "RESERVED", "public_date": "2026-09-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-28" }, "refs": "ghsa-repos:InvoicePlane/InvoicePlane\tGHSA-f95x-25mh-wcxv", "description": "InvoicePlane/InvoicePlane repository advisory GHSA-f95x-25mh-wcxv", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/InvoicePlane/InvoicePlane/security/advisories/GHSA-f95x-25mh-wcxv" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-41420", "state": "RESERVED", "public_date": "2026-09-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-28" }, "refs": "ghsa-repos:InvoicePlane/InvoicePlane\tGHSA-jx5h-6r8f-m2h3", "description": "InvoicePlane/InvoicePlane repository advisory GHSA-jx5h-6r8f-m2h3", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/InvoicePlane/InvoicePlane/security/advisories/GHSA-jx5h-6r8f-m2h3" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-49438", "state": "RESERVED", "public_date": "2026-09-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-28" }, "refs": "ghsa-repos:InvoicePlane/InvoicePlane\tGHSA-9hx6-6h6f-2wq3", "description": "InvoicePlane/InvoicePlane repository advisory GHSA-9hx6-6h6f-2wq3", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/InvoicePlane/InvoicePlane/security/advisories/GHSA-9hx6-6h6f-2wq3" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-39978", "state": "RESERVED", "public_date": "2026-09-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-28" }, "refs": "ghsa-repos:InvoicePlane/InvoicePlane\tGHSA-45vj-9p52-f8mq", "description": "InvoicePlane/InvoicePlane repository advisory GHSA-45vj-9p52-f8mq", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/InvoicePlane/InvoicePlane/security/advisories/GHSA-45vj-9p52-f8mq" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-40297", "state": "RESERVED", "public_date": "2026-09-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-28" }, "refs": "ghsa-repos:InvoicePlane/InvoicePlane\tGHSA-ffq5-mw9f-mv6j", "description": "InvoicePlane/InvoicePlane repository advisory GHSA-ffq5-mw9f-mv6j", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/InvoicePlane/InvoicePlane/security/advisories/GHSA-ffq5-mw9f-mv6j" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-39982", "state": "RESERVED", "public_date": "2026-09-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-28" }, "refs": "ghsa-repos:InvoicePlane/InvoicePlane\tGHSA-2j6j-6f6q-57vq", "description": "InvoicePlane/InvoicePlane repository advisory GHSA-2j6j-6f6q-57vq", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/InvoicePlane/InvoicePlane/security/advisories/GHSA-2j6j-6f6q-57vq" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-35510", "state": "RESERVED", "public_date": "2026-09-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-28" }, "refs": "ghsa-repos:InvoicePlane/InvoicePlane\tGHSA-4wqv-84px-8jc6", "description": "InvoicePlane/InvoicePlane repository advisory GHSA-4wqv-84px-8jc6", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/InvoicePlane/InvoicePlane/security/advisories/GHSA-4wqv-84px-8jc6" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-34199", "state": "RESERVED", "public_date": "2026-09-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-28" }, "refs": "ghsa-repos:InvoicePlane/InvoicePlane\tGHSA-jfgr-778p-m943", "description": "InvoicePlane/InvoicePlane repository advisory GHSA-jfgr-778p-m943", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/InvoicePlane/InvoicePlane/security/advisories/GHSA-jfgr-778p-m943" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-34407", "state": "RESERVED", "public_date": "2026-09-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-28" }, "refs": "ghsa-repos:InvoicePlane/InvoicePlane\tGHSA-x6rh-cr7q-5w7j", "description": "InvoicePlane/InvoicePlane repository advisory GHSA-x6rh-cr7q-5w7j", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/InvoicePlane/InvoicePlane/security/advisories/GHSA-x6rh-cr7q-5w7j" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-34201", "state": "RESERVED", "public_date": "2026-09-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-28" }, "refs": "ghsa-repos:InvoicePlane/InvoicePlane\tGHSA-vgq9-469p-q7j3", "description": "InvoicePlane/InvoicePlane repository advisory GHSA-vgq9-469p-q7j3", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/InvoicePlane/InvoicePlane/security/advisories/GHSA-vgq9-469p-q7j3" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-34440", "state": "RESERVED", "public_date": "2026-09-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-28" }, "refs": "ghsa-repos:InvoicePlane/InvoicePlane\tGHSA-6cpc-hr8h-xgr2", "description": "InvoicePlane/InvoicePlane repository advisory GHSA-6cpc-hr8h-xgr2", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/InvoicePlane/InvoicePlane/security/advisories/GHSA-6cpc-hr8h-xgr2" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-33878", "state": "RESERVED", "public_date": "2026-09-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-28" }, "refs": "ghsa-repos:InvoicePlane/InvoicePlane\tGHSA-37pr-q48j-46gg", "description": "InvoicePlane/InvoicePlane repository advisory GHSA-37pr-q48j-46gg", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/InvoicePlane/InvoicePlane/security/advisories/GHSA-37pr-q48j-46gg" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-55561", "state": "RESERVED", "public_date": "2026-09-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-28" }, "refs": "ghsa-repos:InvoicePlane/InvoicePlane\tGHSA-6xj3-274m-4mvg", "description": "InvoicePlane/InvoicePlane repository advisory GHSA-6xj3-274m-4mvg", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/InvoicePlane/InvoicePlane/security/advisories/GHSA-6xj3-274m-4mvg" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-33629", "state": "RESERVED", "public_date": "2026-09-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-28" }, "refs": "ghsa-repos:InvoicePlane/InvoicePlane\tGHSA-pjf5-c2m5-7m4x", "description": "InvoicePlane/InvoicePlane repository advisory GHSA-pjf5-c2m5-7m4x", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/InvoicePlane/InvoicePlane/security/advisories/GHSA-pjf5-c2m5-7m4x" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-100402", "state": "RESERVED", "public_date": "2026-09-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-28" }, "refs": "ghsa-repos:aiven/aiven-extras\tGHSA-fgq4-g68g-8662", "description": "aiven/aiven-extras repository advisory GHSA-fgq4-g68g-8662", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/aiven/aiven-extras/security/advisories/GHSA-fgq4-g68g-8662" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-100407", "state": "RESERVED", "public_date": "2026-09-28", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-09-28", "csaf": "2026-09-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3611\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3611.json;ghsa-repos:git-for-windows/git\tGHSA-v3h4-vrpr-rh9x", "description": "git-for-windows/git repository advisory GHSA-v3h4-vrpr-rh9x", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3611.json", "ghsa-repos": "https://github.com/git-for-windows/git/security/advisories/GHSA-v3h4-vrpr-rh9x" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-100408", "state": "RESERVED", "public_date": "2026-09-28", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-09-28", "csaf": "2026-09-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3611\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3611.json;ghsa-repos:git-for-windows/git\tGHSA-5j7x-r6vf-jhq2", "description": "git-for-windows/git repository advisory GHSA-5j7x-r6vf-jhq2", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3611.json", "ghsa-repos": "https://github.com/git-for-windows/git/security/advisories/GHSA-5j7x-r6vf-jhq2" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-102981", "state": "RESERVED", "public_date": "2026-09-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-28" }, "refs": "ghsa-repos:makeplane/plane\tGHSA-gf48-p6jp-cwc4", "description": "makeplane/plane repository advisory GHSA-gf48-p6jp-cwc4", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/makeplane/plane/security/advisories/GHSA-gf48-p6jp-cwc4" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-102982", "state": "RESERVED", "public_date": "2026-09-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-28" }, "refs": "ghsa-repos:makeplane/plane\tGHSA-6qrq-f73q-r67j", "description": "makeplane/plane repository advisory GHSA-6qrq-f73q-r67j", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/makeplane/plane/security/advisories/GHSA-6qrq-f73q-r67j" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-102987", "state": "RESERVED", "public_date": "2026-09-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-28" }, "refs": "ghsa-repos:makeplane/plane\tGHSA-gcpp-8php-g682", "description": "makeplane/plane repository advisory GHSA-gcpp-8php-g682", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/makeplane/plane/security/advisories/GHSA-gcpp-8php-g682" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-102986", "state": "RESERVED", "public_date": "2026-09-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-28" }, "refs": "ghsa-repos:makeplane/plane\tGHSA-8688-h9x2-v83m", "description": "makeplane/plane repository advisory GHSA-8688-h9x2-v83m", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/makeplane/plane/security/advisories/GHSA-8688-h9x2-v83m" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-102985", "state": "RESERVED", "public_date": "2026-09-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-28" }, "refs": "ghsa-repos:makeplane/plane\tGHSA-25gg-cxm8-g7h9", "description": "makeplane/plane repository advisory GHSA-25gg-cxm8-g7h9", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/makeplane/plane/security/advisories/GHSA-25gg-cxm8-g7h9" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-102988", "state": "RESERVED", "public_date": "2026-09-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-28" }, "refs": "ghsa-repos:makeplane/plane\tGHSA-2r95-c453-vxmr", "description": "makeplane/plane repository advisory GHSA-2r95-c453-vxmr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/makeplane/plane/security/advisories/GHSA-2r95-c453-vxmr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-102980", "state": "RESERVED", "public_date": "2026-09-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-28" }, "refs": "ghsa-repos:makeplane/plane\tGHSA-ghcr-frqr-6pqr", "description": "makeplane/plane repository advisory GHSA-ghcr-frqr-6pqr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/makeplane/plane/security/advisories/GHSA-ghcr-frqr-6pqr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-97378", "state": "RESERVED", "public_date": "2026-09-28", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-28" }, "refs": "ghsa-repos:music-assistant/server\tGHSA-hc8p-f7fx-828m", "description": "music-assistant/server repository advisory GHSA-hc8p-f7fx-828m", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/music-assistant/server/security/advisories/GHSA-hc8p-f7fx-828m" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-74246", "state": "RESERVED", "public_date": "2026-09-28", "sources": "csaf,redhat", "feed_count": 2, "dates": { "redhat": "2026-09-28", "csaf": "2026-09-28" }, "refs": "csaf:Red Hat Product Security\tCVE-2026-74246\thttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74246.json;redhat:CVE-2026-74246", "description": "quay: Local file inclusion via file:// scheme in Quay custom build trigger", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "CVE-2026-74246", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74246.json", "redhat": "https://access.redhat.com/security/cve/CVE-2026-74246" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-13257", "state": "RESERVED", "public_date": "2026-09-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3623\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json", "description": "CVE-2026-13257", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-13258", "state": "RESERVED", "public_date": "2026-09-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3623\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json", "description": "CVE-2026-13258", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-14269", "state": "RESERVED", "public_date": "2026-09-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3623\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json", "description": "CVE-2026-14269", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-14273", "state": "RESERVED", "public_date": "2026-09-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3623\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json", "description": "CVE-2026-14273", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-14496", "state": "RESERVED", "public_date": "2026-09-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3623\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json", "description": "CVE-2026-14496", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-14497", "state": "RESERVED", "public_date": "2026-09-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3623\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json", "description": "CVE-2026-14497", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-14502", "state": "RESERVED", "public_date": "2026-09-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3623\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json", "description": "CVE-2026-14502", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-14507", "state": "RESERVED", "public_date": "2026-09-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3623\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json", "description": "CVE-2026-14507", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-14508", "state": "RESERVED", "public_date": "2026-09-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3623\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json", "description": "CVE-2026-14508", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-14509", "state": "RESERVED", "public_date": "2026-09-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3623\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json", "description": "CVE-2026-14509", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-14888", "state": "RESERVED", "public_date": "2026-09-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3623\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json", "description": "CVE-2026-14888", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-14905", "state": "RESERVED", "public_date": "2026-09-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3623\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json", "description": "CVE-2026-14905", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-14988", "state": "RESERVED", "public_date": "2026-09-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3623\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json", "description": "CVE-2026-14988", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-14990", "state": "RESERVED", "public_date": "2026-09-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3623\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json", "description": "CVE-2026-14990", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-14991", "state": "RESERVED", "public_date": "2026-09-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3623\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json", "description": "CVE-2026-14991", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-14992", "state": "RESERVED", "public_date": "2026-09-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3623\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json", "description": "CVE-2026-14992", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-14999", "state": "RESERVED", "public_date": "2026-09-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3623\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json", "description": "CVE-2026-14999", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-15762", "state": "RESERVED", "public_date": "2026-09-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3623\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json", "description": "CVE-2026-15762", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-15781", "state": "RESERVED", "public_date": "2026-09-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3623\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json", "description": "CVE-2026-15781", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-15784", "state": "RESERVED", "public_date": "2026-09-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3623\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json", "description": "CVE-2026-15784", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-15819", "state": "RESERVED", "public_date": "2026-09-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3623\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json", "description": "CVE-2026-15819", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-15822", "state": "RESERVED", "public_date": "2026-09-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3623\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json", "description": "CVE-2026-15822", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-15824", "state": "RESERVED", "public_date": "2026-09-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3623\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json", "description": "CVE-2026-15824", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-16111", "state": "RESERVED", "public_date": "2026-09-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3623\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json", "description": "CVE-2026-16111", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-16159", "state": "RESERVED", "public_date": "2026-09-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3623\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json", "description": "CVE-2026-16159", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-16161", "state": "RESERVED", "public_date": "2026-09-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3623\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json", "description": "CVE-2026-16161", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-16163", "state": "RESERVED", "public_date": "2026-09-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3623\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json", "description": "CVE-2026-16163", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-16164", "state": "RESERVED", "public_date": "2026-09-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3623\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json", "description": "CVE-2026-16164", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-16165", "state": "RESERVED", "public_date": "2026-09-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3623\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json", "description": "CVE-2026-16165", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-16167", "state": "RESERVED", "public_date": "2026-09-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3623\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json", "description": "CVE-2026-16167", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-16169", "state": "RESERVED", "public_date": "2026-09-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3623\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json", "description": "CVE-2026-16169", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-16170", "state": "RESERVED", "public_date": "2026-09-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3623\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json", "description": "CVE-2026-16170", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-16176", "state": "RESERVED", "public_date": "2026-09-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3623\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json", "description": "CVE-2026-16176", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-16177", "state": "RESERVED", "public_date": "2026-09-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3623\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json", "description": "CVE-2026-16177", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-16178", "state": "RESERVED", "public_date": "2026-09-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3623\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json", "description": "CVE-2026-16178", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-16179", "state": "RESERVED", "public_date": "2026-09-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3623\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json", "description": "CVE-2026-16179", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-16181", "state": "RESERVED", "public_date": "2026-09-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3623\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json", "description": "CVE-2026-16181", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-16182", "state": "RESERVED", "public_date": "2026-09-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3623\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json", "description": "CVE-2026-16182", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-16340", "state": "RESERVED", "public_date": "2026-09-28", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-28" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3623\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json", "description": "CVE-2026-16340", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 9, "clock_known": true, "hours_public": 216, "clock_origin": "advisory", "advisory_date": "2026-09-28", "advisory_days_public": 9, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3623.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61813", "state": "RESERVED", "public_date": "2026-09-29", "sources": "alas,csaf,debian,ghsa-repos", "feed_count": 4, "dates": { "alas": "2026-10-03", "ghsa-repos": "2026-09-30", "csaf": "2026-09-29" }, "refs": "alas:CVE-2026-61813;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3666\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3666.json;debian:modsecurity;ghsa-repos:owasp-modsecurity/ModSecurity\tGHSA-2vqc-36qp-", "description": "GHSA-2vqc-36qp-ccmw: Weak libcurl TLS hostname verification setting when fetching over HTTPS", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 8, "clock_known": true, "hours_public": 192, "clock_origin": "advisory", "advisory_date": "2026-09-29", "advisory_days_public": 8, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "modsecurity", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-61813.html", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3666.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-61813", "ghsa-repos": "https://github.com/owasp-modsecurity/ModSecurity/security/advisories/GHSA-2vqc-36qp-" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-73856", "state": "RESERVED", "public_date": "2026-09-29", "sources": "alas,csaf,debian,ghsa-repos", "feed_count": 4, "dates": { "alas": "2026-10-02", "ghsa-repos": "2026-09-30", "csaf": "2026-09-29" }, "refs": "alas:CVE-2026-73856;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3666\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3666.json;debian:modsecurity;ghsa-repos:owasp-modsecurity/ModSecurity\tGHSA-vmg8-j66p-", "description": "GHSA-vmg8-j66p-vgvw: Response body inspection bypass via non-canonical Content-Type casing", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 8, "clock_known": true, "hours_public": 192, "clock_origin": "advisory", "advisory_date": "2026-09-29", "advisory_days_public": 8, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "modsecurity", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-73856.html", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3666.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-73856", "ghsa-repos": "https://github.com/owasp-modsecurity/ModSecurity/security/advisories/GHSA-vmg8-j66p-" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-73857", "state": "RESERVED", "public_date": "2026-09-29", "sources": "alas,csaf,debian,ghsa-repos", "feed_count": 4, "dates": { "alas": "2026-10-02", "ghsa-repos": "2026-09-30", "csaf": "2026-09-29" }, "refs": "alas:CVE-2026-73857;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3666\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3666.json;debian:modsecurity;ghsa-repos:owasp-modsecurity/ModSecurity\tGHSA-jx3r-phvx-", "description": "GHSA-jx3r-phvx-2jmj: XML request body processor dereferences an uninitialized parser context pointer", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 8, "clock_known": true, "hours_public": 192, "clock_origin": "advisory", "advisory_date": "2026-09-29", "advisory_days_public": 8, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "modsecurity", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-73857.html", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3666.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-73857", "ghsa-repos": "https://github.com/owasp-modsecurity/ModSecurity/security/advisories/GHSA-jx3r-phvx-" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-61812", "state": "RESERVED", "public_date": "2026-09-29", "sources": "alas,csaf,debian,ghsa-repos", "feed_count": 4, "dates": { "alas": "2026-10-02", "ghsa-repos": "2026-09-30", "csaf": "2026-09-29" }, "refs": "alas:CVE-2026-61812;csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3666\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3666.json;debian:modsecurity;ghsa-repos:owasp-modsecurity/ModSecurity\tGHSA-cxqf-vgrr-", "description": "GHSA-cxqf-vgrr-xxrv: HTML decoder missing entities, leading to evasion", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 8, "clock_known": true, "hours_public": 192, "clock_origin": "advisory", "advisory_date": "2026-09-29", "advisory_days_public": 8, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "modsecurity", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-61812.html", "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3666.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-61812", "ghsa-repos": "https://github.com/owasp-modsecurity/ModSecurity/security/advisories/GHSA-cxqf-vgrr-" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-94603", "state": "RESERVED", "public_date": "2026-09-29", "sources": "alas,alpine,csaf,debian,ghsa-repos,redhat", "feed_count": 6, "dates": { "alas": "2026-10-01", "ghsa-repos": "2026-09-29", "redhat": "2026-09-29", "csaf": "2026-10-01" }, "refs": "alas:CVE-2026-94603;alpine:podman;csaf:SUSE Product Security Team\tCVE-2026-94603\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-94603.json;debian:podman;ghsa-repos:podman-container-tools/podman\tGHSA-2cvf-wqm6-wr9g;redhat:CVE-2026-94603", "description": "A flaw was found in Podman.", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 8, "clock_known": true, "hours_public": 192, "clock_origin": "advisory", "advisory_date": "2026-09-29", "advisory_days_public": 8, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "podman", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-94603.html", "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-94603", "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-94603.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-94603", "ghsa-repos": "https://github.com/podman-container-tools/podman/security/advisories/GHSA-2cvf-wqm6-wr9g", "redhat": "https://access.redhat.com/security/cve/CVE-2026-94603" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-46675", "state": "RESERVED", "public_date": "2026-09-29", "sources": "alas,alpine,csaf,debian,ghsa-repos", "feed_count": 5, "dates": { "alas": "2026-10-01", "ghsa-repos": "2026-09-29", "csaf": "2026-10-04" }, "refs": "alas:CVE-2026-46675;alpine:libpng;csaf:SUSE Product Security Team\topenSUSE-SU-2026:11984-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11984-1.json;debian:libpng1.6;ghsa-repos:pnggroup/libpng\tGHSA-qvg3-h654-xq3j", "description": "Use-after-free of zlib input in `png_read_end` after incomplete zTXt, iTXt or iCCP decompression", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 8, "clock_known": true, "hours_public": 192, "clock_origin": "advisory", "advisory_date": "2026-09-29", "advisory_days_public": 8, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "libpng", "ecosystem": "", "source_urls": { "alas": "https://explore.alas.aws.amazon.com/CVE-2026-46675.html", "alpine": "https://security.alpinelinux.org/vuln/CVE-2026-46675", "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11984-1.json", "debian": "https://security-tracker.debian.org/tracker/CVE-2026-46675", "ghsa-repos": "https://github.com/pnggroup/libpng/security/advisories/GHSA-qvg3-h654-xq3j" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-102342", "state": "RESERVED", "public_date": "2026-09-29", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-09-29", "osv": "2026-09-29" }, "refs": "ghsa:GHSA-m6mh-2hw2-555x;osv:crates.io:ammonia", "description": "Ammonia: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 8, "clock_known": true, "hours_public": 192, "clock_origin": "advisory", "advisory_date": "2026-09-29", "advisory_days_public": 8, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "ammonia", "ecosystem": "crates.io", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-m6mh-2hw2-555x", "osv": "https://osv.dev/list?q=CVE-2026-102342" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-65954", "state": "RESERVED", "public_date": "2026-09-29", "sources": "ghsa,osv", "feed_count": 2, "dates": { "ghsa": "2026-09-29", "osv": "2026-09-29" }, "refs": "ghsa:GHSA-r6hr-vr92-vv28;osv:Packagist:phpcsstandards/phpcsutils", "description": "PHPCSUtils: Remote code execution via eval() in AbstractArrayDeclarationSniff::getActualArrayKey()", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 8, "clock_known": true, "hours_public": 192, "clock_origin": "advisory", "advisory_date": "2026-09-29", "advisory_days_public": 8, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "phpcsstandards/phpcsutils", "ecosystem": "Packagist", "source_urls": { "ghsa": "https://github.com/advisories/GHSA-r6hr-vr92-vv28", "osv": "https://osv.dev/list?q=CVE-2026-65954" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-49265", "state": "RESERVED", "public_date": "2026-09-29", "sources": "csaf,ghsa,osv", "feed_count": 3, "dates": { "ghsa": "2026-09-29", "osv": "2026-09-29", "csaf": "2026-10-01" }, "refs": "csaf:SUSE Product Security Team\tCVE-2026-49265\thttps://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-49265.json;ghsa:GHSA-xpv3-w29h-x7cv;osv:PyPI:oauthlib", "description": "Oauthlib: Timing Attack Vulnerability in PKCE code_verifier Comparison (CWE-208)", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 8, "clock_known": true, "hours_public": 192, "clock_origin": "advisory", "advisory_date": "2026-09-29", "advisory_days_public": 8, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "oauthlib", "ecosystem": "PyPI", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-49265.json", "ghsa": "https://github.com/advisories/GHSA-xpv3-w29h-x7cv", "osv": "https://osv.dev/list?q=CVE-2026-49265" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-49264", "state": "RESERVED", "public_date": "2026-09-29", "sources": "csaf,ghsa,osv", "feed_count": 3, "dates": { "ghsa": "2026-09-29", "osv": "2026-09-29", "csaf": "2026-10-02" }, "refs": "csaf:SUSE Product Security Team\topenSUSE-SU-2026:11973-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11973-1.json;ghsa:GHSA-hj66-6f7g-4r5v;osv:PyPI:oauthlib", "description": "Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 8, "clock_known": true, "hours_public": 192, "clock_origin": "advisory", "advisory_date": "2026-09-29", "advisory_days_public": 8, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "oauthlib", "ecosystem": "PyPI", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11973-1.json", "ghsa": "https://github.com/advisories/GHSA-hj66-6f7g-4r5v", "osv": "https://osv.dev/list?q=CVE-2026-49264" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-79656", "state": "RESERVED", "public_date": "2026-09-29", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-29" }, "refs": "csaf:SUSE Product Security Team\topenSUSE-SU-2026:11920-1\thttps://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11920-1.json", "description": "CVE-2026-79656", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 8, "clock_known": true, "hours_public": 192, "clock_origin": "advisory", "advisory_date": "2026-09-29", "advisory_days_public": 8, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11920-1.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-101302", "state": "RESERVED", "public_date": "2026-09-29", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-29" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3664\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3664.json", "description": "CVE-2026-101302", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 8, "clock_known": true, "hours_public": 192, "clock_origin": "advisory", "advisory_date": "2026-09-29", "advisory_days_public": 8, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3664.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-101303", "state": "RESERVED", "public_date": "2026-09-29", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-29" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3664\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3664.json", "description": "CVE-2026-101303", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 8, "clock_known": true, "hours_public": 192, "clock_origin": "advisory", "advisory_date": "2026-09-29", "advisory_days_public": 8, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3664.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-101304", "state": "RESERVED", "public_date": "2026-09-29", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-29" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3664\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3664.json", "description": "CVE-2026-101304", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 8, "clock_known": true, "hours_public": 192, "clock_origin": "advisory", "advisory_date": "2026-09-29", "advisory_days_public": 8, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3664.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-101305", "state": "RESERVED", "public_date": "2026-09-29", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-29" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3664\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3664.json", "description": "CVE-2026-101305", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 8, "clock_known": true, "hours_public": 192, "clock_origin": "advisory", "advisory_date": "2026-09-29", "advisory_days_public": 8, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3664.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-101306", "state": "RESERVED", "public_date": "2026-09-29", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-29" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3664\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3664.json", "description": "CVE-2026-101306", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 8, "clock_known": true, "hours_public": 192, "clock_origin": "advisory", "advisory_date": "2026-09-29", "advisory_days_public": 8, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3664.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-102488", "state": "RESERVED", "public_date": "2026-09-29", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-29" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3639\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3639.json", "description": "CVE-2026-102488", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 8, "clock_known": true, "hours_public": 192, "clock_origin": "advisory", "advisory_date": "2026-09-29", "advisory_days_public": 8, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3639.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-17484", "state": "RESERVED", "public_date": "2026-09-29", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-29" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3659\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3659.json", "description": "CVE-2026-17484", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 8, "clock_known": true, "hours_public": 192, "clock_origin": "advisory", "advisory_date": "2026-09-29", "advisory_days_public": 8, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3659.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-17487", "state": "RESERVED", "public_date": "2026-09-29", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-29" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3659\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3659.json", "description": "CVE-2026-17487", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 8, "clock_known": true, "hours_public": 192, "clock_origin": "advisory", "advisory_date": "2026-09-29", "advisory_days_public": 8, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3659.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-18318", "state": "RESERVED", "public_date": "2026-09-29", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-29" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3659\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3659.json", "description": "CVE-2026-18318", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 8, "clock_known": true, "hours_public": 192, "clock_origin": "advisory", "advisory_date": "2026-09-29", "advisory_days_public": 8, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3659.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-58098", "state": "RESERVED", "public_date": "2026-09-29", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-29" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3664\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3664.json", "description": "CVE-2026-58098", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 8, "clock_known": true, "hours_public": 192, "clock_origin": "advisory", "advisory_date": "2026-09-29", "advisory_days_public": 8, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3664.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-58099", "state": "RESERVED", "public_date": "2026-09-29", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-29" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3664\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3664.json", "description": "CVE-2026-58099", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 8, "clock_known": true, "hours_public": 192, "clock_origin": "advisory", "advisory_date": "2026-09-29", "advisory_days_public": 8, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3664.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-58100", "state": "RESERVED", "public_date": "2026-09-29", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-29" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3664\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3664.json", "description": "CVE-2026-58100", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 8, "clock_known": true, "hours_public": 192, "clock_origin": "advisory", "advisory_date": "2026-09-29", "advisory_days_public": 8, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3664.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-75762", "state": "RESERVED", "public_date": "2026-09-29", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-29" }, "refs": "csaf:Red Hat Product Security\tRHSA-2026:73419\thttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_73419.json", "description": "multicluster-global-hub: Manager trusts self-asserted evt.Source() for leaf-hub identity in all status handlers", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 8, "clock_known": true, "hours_public": 192, "clock_origin": "advisory", "advisory_date": "2026-09-29", "advisory_days_public": 8, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_73419.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77849", "state": "RESERVED", "public_date": "2026-09-29", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-29" }, "refs": "csaf:Red Hat Product Security\tRHSA-2026:73419\thttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_73419.json", "description": "grafana-global-hub: grafana-global-hub: Hardcoded Grafana admin credentials (admin / admin) in `pkg/specsyncer`", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 8, "clock_known": true, "hours_public": 192, "clock_origin": "advisory", "advisory_date": "2026-09-29", "advisory_days_public": 8, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_73419.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-80221", "state": "RESERVED", "public_date": "2026-09-29", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-29" }, "refs": "csaf:Red Hat Product Security\tRHSA-2026:73419\thttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_73419.json", "description": "grafana-global-hub: grafana-global-hub: Direct database connection string with embedded credentials passed as environment variable", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 8, "clock_known": true, "hours_public": 192, "clock_origin": "advisory", "advisory_date": "2026-09-29", "advisory_days_public": 8, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_73419.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-103932", "state": "RESERVED", "public_date": "2026-09-30", "sources": "debian,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "debian:modsecurity;ghsa-repos:owasp-modsecurity/ModSecurity\tGHSA-5m93-4h75-3p2w", "description": "owasp-modsecurity/ModSecurity repository advisory GHSA-5m93-4h75-3p2w", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "modsecurity", "ecosystem": "", "source_urls": { "debian": "https://security-tracker.debian.org/tracker/CVE-2026-103932", "ghsa-repos": "https://github.com/owasp-modsecurity/ModSecurity/security/advisories/GHSA-5m93-4h75-3p2w" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104259", "state": "RESERVED", "public_date": "2026-09-30", "sources": "debian,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "debian:modsecurity;ghsa-repos:owasp-modsecurity/ModSecurity\tGHSA-qrch-pjfr-9g47", "description": "owasp-modsecurity/ModSecurity repository advisory GHSA-qrch-pjfr-9g47", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "modsecurity", "ecosystem": "", "source_urls": { "debian": "https://security-tracker.debian.org/tracker/CVE-2026-104259", "ghsa-repos": "https://github.com/owasp-modsecurity/ModSecurity/security/advisories/GHSA-qrch-pjfr-9g47" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-104269", "state": "RESERVED", "public_date": "2026-09-30", "sources": "debian,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "debian:modsecurity;ghsa-repos:owasp-modsecurity/ModSecurity\tGHSA-5pww-8rfg-9crf", "description": "owasp-modsecurity/ModSecurity repository advisory GHSA-5pww-8rfg-9crf", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "modsecurity", "ecosystem": "", "source_urls": { "debian": "https://security-tracker.debian.org/tracker/CVE-2026-104269", "ghsa-repos": "https://github.com/owasp-modsecurity/ModSecurity/security/advisories/GHSA-5pww-8rfg-9crf" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-76823", "state": "RESERVED", "public_date": "2026-09-30", "sources": "csaf,ghsa-repos", "feed_count": 2, "dates": { "ghsa-repos": "2026-09-30", "csaf": "2026-09-30" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3685\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3685.json;ghsa-repos:OpenCTI-Platform/opencti\tGHSA-mwfc-578p-fccc", "description": "OpenCTI-Platform/opencti repository advisory GHSA-mwfc-578p-fccc", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3685.json", "ghsa-repos": "https://github.com/OpenCTI-Platform/opencti/security/advisories/GHSA-mwfc-578p-fccc" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-46613", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-77fw-7jwf-7c9w", "description": "kiteworks/security-advisories repository advisory GHSA-77fw-7jwf-7c9w", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-77fw-7jwf-7c9w" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62158", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-h575-f4w3-c8pr", "description": "kiteworks/security-advisories repository advisory GHSA-h575-f4w3-c8pr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-h575-f4w3-c8pr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62159", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-wwx9-vvxv-rrr3", "description": "kiteworks/security-advisories repository advisory GHSA-wwx9-vvxv-rrr3", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-wwx9-vvxv-rrr3" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62161", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-mf3v-4wrj-jjwc", "description": "kiteworks/security-advisories repository advisory GHSA-mf3v-4wrj-jjwc", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-mf3v-4wrj-jjwc" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-62244", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-c669-hm9h-cr6m", "description": "kiteworks/security-advisories repository advisory GHSA-c669-hm9h-cr6m", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-c669-hm9h-cr6m" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-63486", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-cj2q-mggw-76v5", "description": "kiteworks/security-advisories repository advisory GHSA-cj2q-mggw-76v5", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-cj2q-mggw-76v5" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-77428", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-vm9w-h57c-m9pj", "description": "kiteworks/security-advisories repository advisory GHSA-vm9w-h57c-m9pj", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-vm9w-h57c-m9pj" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-85065", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-h669-jj53-h764", "description": "kiteworks/security-advisories repository advisory GHSA-h669-jj53-h764", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-h669-jj53-h764" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-85066", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-rwpq-5xfv-54pv", "description": "kiteworks/security-advisories repository advisory GHSA-rwpq-5xfv-54pv", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-rwpq-5xfv-54pv" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-85067", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-377c-mj94-f4q4", "description": "kiteworks/security-advisories repository advisory GHSA-377c-mj94-f4q4", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-377c-mj94-f4q4" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-85069", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-j4px-xvp8-jf7v", "description": "kiteworks/security-advisories repository advisory GHSA-j4px-xvp8-jf7v", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-j4px-xvp8-jf7v" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-85060", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-8f3f-mrfx-cxqx", "description": "kiteworks/security-advisories repository advisory GHSA-8f3f-mrfx-cxqx", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-8f3f-mrfx-cxqx" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-95841", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-phpv-mw9m-r8vh", "description": "kiteworks/security-advisories repository advisory GHSA-phpv-mw9m-r8vh", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-phpv-mw9m-r8vh" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-97372", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-q874-j4f7-j389", "description": "kiteworks/security-advisories repository advisory GHSA-q874-j4f7-j389", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-q874-j4f7-j389" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-23637", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-pvrw-7xvc-rhqx", "description": "kiteworks/security-advisories repository advisory GHSA-pvrw-7xvc-rhqx", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-pvrw-7xvc-rhqx" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-23639", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-6f69-x6m3-423g", "description": "kiteworks/security-advisories repository advisory GHSA-6f69-x6m3-423g", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-6f69-x6m3-423g" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-23641", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-69p9-gvr6-4v3h", "description": "kiteworks/security-advisories repository advisory GHSA-69p9-gvr6-4v3h", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-69p9-gvr6-4v3h" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-24757", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-f74p-54cj-vmwr", "description": "kiteworks/security-advisories repository advisory GHSA-f74p-54cj-vmwr", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-f74p-54cj-vmwr" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-24758", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-3fg3-7v72-jphv", "description": "kiteworks/security-advisories repository advisory GHSA-3fg3-7v72-jphv", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-3fg3-7v72-jphv" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-24759", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-p32q-2x9j-x6p3", "description": "kiteworks/security-advisories repository advisory GHSA-p32q-2x9j-x6p3", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-p32q-2x9j-x6p3" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-24760", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-x7pr-6vvv-968f", "description": "kiteworks/security-advisories repository advisory GHSA-x7pr-6vvv-968f", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-x7pr-6vvv-968f" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-23642", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-mvq7-2w7x-8f93", "description": "kiteworks/security-advisories repository advisory GHSA-mvq7-2w7x-8f93", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-mvq7-2w7x-8f93" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-27712", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-568h-fm2w-5vmh", "description": "kiteworks/security-advisories repository advisory GHSA-568h-fm2w-5vmh", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-568h-fm2w-5vmh" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-27713", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-mgjp-rp7q-99pq", "description": "kiteworks/security-advisories repository advisory GHSA-mgjp-rp7q-99pq", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-mgjp-rp7q-99pq" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-27714", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-v65v-rp5x-hx7m", "description": "kiteworks/security-advisories repository advisory GHSA-v65v-rp5x-hx7m", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-v65v-rp5x-hx7m" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-27724", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-cc25-73qr-v779", "description": "kiteworks/security-advisories repository advisory GHSA-cc25-73qr-v779", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-cc25-73qr-v779" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-27725", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-9fqq-qjqh-vh4w", "description": "kiteworks/security-advisories repository advisory GHSA-9fqq-qjqh-vh4w", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-9fqq-qjqh-vh4w" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-27726", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-qf29-vjq2-x9g3", "description": "kiteworks/security-advisories repository advisory GHSA-qf29-vjq2-x9g3", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-qf29-vjq2-x9g3" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-28283", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-7q9c-5w7m-q7hh", "description": "kiteworks/security-advisories repository advisory GHSA-7q9c-5w7m-q7hh", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-7q9c-5w7m-q7hh" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-28340", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-52j2-x94v-6j7j", "description": "kiteworks/security-advisories repository advisory GHSA-52j2-x94v-6j7j", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-52j2-x94v-6j7j" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-28341", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-g35w-2vjp-4qrw", "description": "kiteworks/security-advisories repository advisory GHSA-g35w-2vjp-4qrw", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-g35w-2vjp-4qrw" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-28344", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-7cf8-2jh9-gfr2", "description": "kiteworks/security-advisories repository advisory GHSA-7cf8-2jh9-gfr2", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-7cf8-2jh9-gfr2" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-28345", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-3j2j-qg64-r2vx", "description": "kiteworks/security-advisories repository advisory GHSA-3j2j-qg64-r2vx", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-3j2j-qg64-r2vx" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-28346", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-439p-4774-3c6x", "description": "kiteworks/security-advisories repository advisory GHSA-439p-4774-3c6x", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-439p-4774-3c6x" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-28347", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-pcg3-c3qc-p63m", "description": "kiteworks/security-advisories repository advisory GHSA-pcg3-c3qc-p63m", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-pcg3-c3qc-p63m" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-28349", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-r6v3-9qp8-mpg2", "description": "kiteworks/security-advisories repository advisory GHSA-r6v3-9qp8-mpg2", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-r6v3-9qp8-mpg2" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-29094", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-59wm-m8qm-qmmp", "description": "kiteworks/security-advisories repository advisory GHSA-59wm-m8qm-qmmp", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-59wm-m8qm-qmmp" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-29095", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-x4wp-fg9m-h26v", "description": "kiteworks/security-advisories repository advisory GHSA-x4wp-fg9m-h26v", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-x4wp-fg9m-h26v" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-31810", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-mhp2-8996-6m54", "description": "kiteworks/security-advisories repository advisory GHSA-mhp2-8996-6m54", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-mhp2-8996-6m54" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-31811", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-4329-62qf-m6g6", "description": "kiteworks/security-advisories repository advisory GHSA-4329-62qf-m6g6", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-4329-62qf-m6g6" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-33059", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-2g84-7w63-p97g", "description": "kiteworks/security-advisories repository advisory GHSA-2g84-7w63-p97g", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-2g84-7w63-p97g" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-34843", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-mhc9-4pph-2r9x", "description": "kiteworks/security-advisories repository advisory GHSA-mhc9-4pph-2r9x", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-mhc9-4pph-2r9x" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-34844", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-fhw7-9r27-3vhf", "description": "kiteworks/security-advisories repository advisory GHSA-fhw7-9r27-3vhf", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-fhw7-9r27-3vhf" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-34845", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-p2qr-477v-4hhm", "description": "kiteworks/security-advisories repository advisory GHSA-p2qr-477v-4hhm", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-p2qr-477v-4hhm" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-34846", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-2mcm-29fw-qp59", "description": "kiteworks/security-advisories repository advisory GHSA-2mcm-29fw-qp59", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-2mcm-29fw-qp59" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-42240", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-xfqc-6h7q-ww7g", "description": "kiteworks/security-advisories repository advisory GHSA-xfqc-6h7q-ww7g", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-xfqc-6h7q-ww7g" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-42242", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-f26q-22vc-8h92", "description": "kiteworks/security-advisories repository advisory GHSA-f26q-22vc-8h92", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-f26q-22vc-8h92" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-42243", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-6c8h-46v5-xcmw", "description": "kiteworks/security-advisories repository advisory GHSA-6c8h-46v5-xcmw", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-6c8h-46v5-xcmw" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-42244", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-wc3f-rgqc-j8h8", "description": "kiteworks/security-advisories repository advisory GHSA-wc3f-rgqc-j8h8", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-wc3f-rgqc-j8h8" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-42262", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-j2ww-9646-4f8x", "description": "kiteworks/security-advisories repository advisory GHSA-j2ww-9646-4f8x", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-j2ww-9646-4f8x" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-42263", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-r7wv-gpw3-x3wj", "description": "kiteworks/security-advisories repository advisory GHSA-r7wv-gpw3-x3wj", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-r7wv-gpw3-x3wj" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-44674", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-wcv7-7pv8-f5cv", "description": "kiteworks/security-advisories repository advisory GHSA-wcv7-7pv8-f5cv", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-wcv7-7pv8-f5cv" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-44675", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-c68j-jxcc-vjv2", "description": "kiteworks/security-advisories repository advisory GHSA-c68j-jxcc-vjv2", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-c68j-jxcc-vjv2" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-44676", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-7xp3-9v5f-p878", "description": "kiteworks/security-advisories repository advisory GHSA-7xp3-9v5f-p878", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-7xp3-9v5f-p878" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-44677", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-4g45-9wr2-65g3", "description": "kiteworks/security-advisories repository advisory GHSA-4g45-9wr2-65g3", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-4g45-9wr2-65g3" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-50140", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-xh92-xq4f-c859", "description": "kiteworks/security-advisories repository advisory GHSA-xh92-xq4f-c859", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-xh92-xq4f-c859" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-50150", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-9f6g-9fhj-37h4", "description": "kiteworks/security-advisories repository advisory GHSA-9f6g-9fhj-37h4", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-9f6g-9fhj-37h4" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-50153", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-gchc-7cpv-wjm9", "description": "kiteworks/security-advisories repository advisory GHSA-gchc-7cpv-wjm9", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-gchc-7cpv-wjm9" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-50155", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-8r6p-486v-7r22", "description": "kiteworks/security-advisories repository advisory GHSA-8r6p-486v-7r22", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-8r6p-486v-7r22" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-52818", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-m7j3-gr65-2f8p", "description": "kiteworks/security-advisories repository advisory GHSA-m7j3-gr65-2f8p", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-m7j3-gr65-2f8p" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-50156", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-f996-hx3h-gp68", "description": "kiteworks/security-advisories repository advisory GHSA-f996-hx3h-gp68", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-f996-hx3h-gp68" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-54152", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-qp4p-jx57-xp4j", "description": "kiteworks/security-advisories repository advisory GHSA-qp4p-jx57-xp4j", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-qp4p-jx57-xp4j" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-54153", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-4fj7-g9r3-9wjq", "description": "kiteworks/security-advisories repository advisory GHSA-4fj7-g9r3-9wjq", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-4fj7-g9r3-9wjq" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-54154", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:kiteworks/security-advisories\tGHSA-5xhq-9wq3-rvj6", "description": "kiteworks/security-advisories repository advisory GHSA-5xhq-9wq3-rvj6", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/kiteworks/security-advisories/security/advisories/GHSA-5xhq-9wq3-rvj6" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-102944", "state": "RESERVED", "public_date": "2026-09-30", "sources": "ghsa-repos", "feed_count": 1, "dates": { "ghsa-repos": "2026-09-30" }, "refs": "ghsa-repos:yhirose/cpp-httplib\tGHSA-22mf-w2v3-r2jv", "description": "yhirose/cpp-httplib repository advisory GHSA-22mf-w2v3-r2jv", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "ghsa-repos": "https://github.com/yhirose/cpp-httplib/security/advisories/GHSA-22mf-w2v3-r2jv" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-18343", "state": "RESERVED", "public_date": "2026-09-30", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-30" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3690\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3690.json", "description": "CVE-2026-18343", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3690.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-47609", "state": "RESERVED", "public_date": "2026-09-30", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-30" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3680\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3680.json", "description": "CVE-2026-47609", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3680.json" }, "veto_evaluated": false, "owner_nameable": false }, { "cve_id": "CVE-2026-81858", "state": "RESERVED", "public_date": "2026-09-30", "sources": "csaf", "feed_count": 1, "dates": { "csaf": "2026-09-30" }, "refs": "csaf:Bundesamt f\u00fcr Sicherheit in der Informationstechnik\tWID-SEC-W-2026-3690\thttps://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3690.json", "description": "CVE-2026-81858", "state_verified_this_run": true, "public_date_origin": "feed", "days_public": 7, "clock_known": true, "hours_public": 168, "clock_origin": "advisory", "advisory_date": "2026-09-30", "advisory_days_public": 7, "past_expectation": true, "disclosure_order": "unmeasurable", "self_disclosed": false, "rule": "4.5.1.6", "rule_strength": "SHOULD", "rule_basis": "unattributed", "rule_certainty": "unmeasurable", "package": "", "ecosystem": "", "source_urls": { "csaf": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3690.json" }, "veto_evaluated": false, "owner_nameable": false } ] }