{"metadata": {"count": 291310, "page": 1, "per_page": 100}, "data": [{"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T11:07:42+00:00", "cve": "CVE-2026-59296", "id": "CVE-2026-59296", "initial_release_date": "2026-08-21T10:47:25.384000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "io.micrometer/micrometer-registry-statsd: io.micrometer/micrometer-core: Micrometer: Line-protocol and log injection via unsanitized input allows metric and log spoofing", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59296.json", "version": "3", "product_status": {"known_affected": 19, "known_not_affected": 7}, "imported": 1787656062.0, "vulnerability_id": "CVE-2026-59296", "vulnerability_url": "/vuln/CVE-2026-59296"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T11:07:32+00:00", "cve": "CVE-2026-45134", "id": "CVE-2026-45134", "initial_release_date": "2026-05-27T19:35:32.662000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "langsmith-sdk-python: langsmith-sdk-js: LangSmith Client SDKs: Information disclosure via untrusted prompt deserialization", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45134.json", "version": "3", "product_status": {"known_affected": 11}, "imported": 1787656052.0, "vulnerability_id": "CVE-2026-45134", "vulnerability_url": "/vuln/CVE-2026-45134"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T11:07:27+00:00", "cve": "CVE-2026-31635", "id": "CVE-2026-31635", "initial_release_date": "2026-04-24T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: rxrpc: fix oversized RESPONSE authenticator length check", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-31635.json", "version": "3", "product_status": {"known_affected": 76, "known_not_affected": 198}, "imported": 1787656047.0, "vulnerability_id": "CVE-2026-31635", "vulnerability_url": "/vuln/CVE-2026-31635"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T11:07:23+00:00", "cve": "CVE-2024-26586", "id": "CVE-2024-26586", "initial_release_date": "2024-02-22T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: mlxsw: spectrum_acl_tcam: Fix stack corruption", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-26586.json", "version": "3", "product_status": {"fixed": 1362, "known_affected": 22, "known_not_affected": 43}, "imported": 1787656043.0, "vulnerability_id": "CVE-2024-26586", "vulnerability_url": "/vuln/CVE-2024-26586"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T11:06:35+00:00", "cve": "CVE-2026-45447", "id": "CVE-2026-45447", "initial_release_date": "2026-06-09T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45447.json", "version": "3", "product_status": {"fixed": 312, "known_affected": 6, "known_not_affected": 352, "under_investigation": 2}, "imported": 1787655995.0, "vulnerability_id": "CVE-2026-45447", "vulnerability_url": "/vuln/CVE-2026-45447"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T11:06:28+00:00", "cve": "CVE-2026-42264", "id": "CVE-2026-42264", "initial_release_date": "2026-05-08T03:20:24.248000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "axios: Axios: Prototype pollution allows information disclosure and request manipulation", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42264.json", "version": "3", "product_status": {"fixed": 50, "known_affected": 38, "known_not_affected": 271}, "imported": 1787655988.0, "vulnerability_id": "CVE-2026-42264", "vulnerability_url": "/vuln/CVE-2026-42264"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T11:06:11+00:00", "cve": "CVE-2026-27136", "id": "CVE-2026-27136", "initial_release_date": "2026-05-22T15:01:22.111000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27136.json", "version": "3", "product_status": {"fixed": 805, "known_affected": 254, "known_not_affected": 4413}, "imported": 1787655971.0, "vulnerability_id": "CVE-2026-27136", "vulnerability_url": "/vuln/CVE-2026-27136"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T11:06:01+00:00", "cve": "CVE-2026-16723", "id": "CVE-2026-16723", "initial_release_date": "2026-07-23T08:26:24.453000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "com.alibaba/fastjson: Fastjson: Remote Code Execution vulnerability without special configuration", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-16723.json", "version": "3", "product_status": {"known_not_affected": 2}, "imported": 1787655961.0, "vulnerability_id": "CVE-2026-16723", "vulnerability_url": "/vuln/CVE-2026-16723"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T11:05:56+00:00", "cve": "CVE-2026-14669", "id": "CVE-2026-14669", "initial_release_date": "2026-08-13T13:00:04.974000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-14669.json", "version": "3", "product_status": {"known_affected": 186, "known_not_affected": 2}, "imported": 1787655956.0, "vulnerability_id": "CVE-2026-14669", "vulnerability_url": "/vuln/CVE-2026-14669"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T10:48:38+00:00", "cve": "CVE-2026-41240", "id": "CVE-2026-41240", "initial_release_date": "2026-04-23T14:54:32.426000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "DOMPurify: DOMPurify: Cross-Site Scripting (XSS) via inconsistent tag sanitization", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41240.json", "version": "3", "product_status": {"fixed": 49, "known_affected": 17, "known_not_affected": 388}, "imported": 1787654918.0, "vulnerability_id": "CVE-2026-41240", "vulnerability_url": "/vuln/CVE-2026-41240"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T10:48:31+00:00", "cve": "CVE-2026-67313", "id": "CVE-2026-67313", "initial_release_date": "2026-08-01T12:22:16.493000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "axios: axios: Denial of Service via uncontrolled recursion in formDataToJSON", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-67313.json", "version": "3", "product_status": {"fixed": 6, "known_affected": 41, "known_not_affected": 6}, "imported": 1787654911.0, "vulnerability_id": "CVE-2026-67313", "vulnerability_url": "/vuln/CVE-2026-67313"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T10:48:16+00:00", "cve": "CVE-2026-53365", "id": "CVE-2026-53365", "initial_release_date": "2026-07-13T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: vsock/virtio: fix zerocopy completion for multi-skb sends", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53365.json", "version": "3", "product_status": {"known_affected": 184, "known_not_affected": 90}, "imported": 1787654896.0, "vulnerability_id": "CVE-2026-53365", "vulnerability_url": "/vuln/CVE-2026-53365"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T10:48:05+00:00", "cve": "CVE-2026-33186", "id": "CVE-2026-33186", "initial_release_date": "2026-03-20T22:23:32.147000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33186.json", "version": "3", "product_status": {"fixed": 3260, "known_affected": 380, "known_not_affected": 35985}, "imported": 1787654885.0, "vulnerability_id": "CVE-2026-33186", "vulnerability_url": "/vuln/CVE-2026-33186"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T10:36:31+00:00", "cve": "CVE-2026-42504", "id": "CVE-2026-42504", "initial_release_date": "2026-06-02T22:01:37.219000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42504.json", "version": "3", "product_status": {"fixed": 291, "known_affected": 79, "known_not_affected": 940, "under_investigation": 193}, "imported": 1787654191.0, "vulnerability_id": "CVE-2026-42504", "vulnerability_url": "/vuln/CVE-2026-42504"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T10:36:22+00:00", "cve": "CVE-2026-39822", "id": "CVE-2026-39822", "initial_release_date": "2026-07-08T15:46:27.199000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: Go os.Root: Symlink following vulnerability allows directory traversal", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39822.json", "version": "3", "product_status": {"fixed": 242, "known_affected": 12, "known_not_affected": 458}, "imported": 1787654182.0, "vulnerability_id": "CVE-2026-39822", "vulnerability_url": "/vuln/CVE-2026-39822"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T10:36:22+00:00", "cve": "CVE-2026-15809", "id": "CVE-2026-15809", "initial_release_date": "2026-07-15T10:18:17.941000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "github.com/cri-o/cri-o: Fix Bypass for CVE-2022-4318 \u2014 /etc/passwd Injection via HOME env", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-15809.json", "version": "3", "product_status": {"fixed": 13, "known_affected": 3, "known_not_affected": 99}, "imported": 1787654182.0, "vulnerability_id": "CVE-2026-15809", "vulnerability_url": "/vuln/CVE-2026-15809"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T10:25:23+00:00", "cve": "CVE-2026-46113", "id": "CVE-2026-46113", "initial_release_date": "2026-05-28T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46113.json", "version": "3", "product_status": {"fixed": 1318, "known_affected": 22, "known_not_affected": 42}, "imported": 1787653523.0, "vulnerability_id": "CVE-2026-46113", "vulnerability_url": "/vuln/CVE-2026-46113"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T10:19:41+00:00", "cve": "CVE-2026-42013", "id": "CVE-2026-42013", "initial_release_date": "2026-04-29T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "gnutls: gnutls: Certificate validation bypass due to oversized Subject Alternative Name", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42013.json", "version": "3", "product_status": {"fixed": 815, "known_affected": 5, "known_not_affected": 63, "under_investigation": 1}, "imported": 1787653181.0, "vulnerability_id": "CVE-2026-42013", "vulnerability_url": "/vuln/CVE-2026-42013"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T10:19:35+00:00", "cve": "CVE-2026-42011", "id": "CVE-2026-42011", "initial_release_date": "2026-04-29T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "gnutls: gnutls: Security bypass due to incorrect name constraint handling", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42011.json", "version": "3", "product_status": {"fixed": 815, "known_affected": 6, "known_not_affected": 63}, "imported": 1787653175.0, "vulnerability_id": "CVE-2026-42011", "vulnerability_url": "/vuln/CVE-2026-42011"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T10:19:29+00:00", "cve": "CVE-2026-54513", "id": "CVE-2026-54513", "initial_release_date": "2026-06-23T20:53:52.543000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54513.json", "version": "3", "product_status": {"fixed": 587, "known_affected": 22, "known_not_affected": 51, "under_investigation": 57}, "imported": 1787653169.0, "vulnerability_id": "CVE-2026-54513", "vulnerability_url": "/vuln/CVE-2026-54513"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T10:19:15+00:00", "cve": "CVE-2026-49978", "id": "CVE-2026-49978", "initial_release_date": "2026-07-14T20:02:46.263000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "dompurify: DOMPurify: Cross-site scripting vulnerability allows code execution", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-49978.json", "version": "3", "product_status": {"fixed": 64, "known_affected": 31, "known_not_affected": 2796}, "imported": 1787653155.0, "vulnerability_id": "CVE-2026-49978", "vulnerability_url": "/vuln/CVE-2026-49978"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T10:19:10+00:00", "cve": "CVE-2026-44496", "id": "CVE-2026-44496", "initial_release_date": "2026-06-11T15:34:28.492000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44496.json", "version": "3", "product_status": {"fixed": 146, "known_affected": 25, "known_not_affected": 4651}, "imported": 1787653150.0, "vulnerability_id": "CVE-2026-44496", "vulnerability_url": "/vuln/CVE-2026-44496"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T10:18:59+00:00", "cve": "CVE-2026-5260", "id": "CVE-2026-5260", "initial_release_date": "2026-04-29T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "gnutls: gnutls: Information disclosure via heap overread in RSA key exchange", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5260.json", "version": "3", "product_status": {"fixed": 782, "known_affected": 6, "known_not_affected": 62}, "imported": 1787653139.0, "vulnerability_id": "CVE-2026-5260", "vulnerability_url": "/vuln/CVE-2026-5260"}, {"meta_source": "redhat_vex", "current_release_date": "2026-08-25T10:04:58+00:00", "cve": "CVE-2026-56136", "id": "CVE-2026-56136", "initial_release_date": "2026-08-24T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "ntfs-3g: NTFS-3G: Information disclosure due to out-of-bounds read", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-56136.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1787652298.0, "vulnerability_id": "CVE-2026-56136", "vulnerability_url": "/vuln/CVE-2026-56136"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:04:55+00:00", "cve": "CVE-2026-53584", "id": "CVE-2026-53584", "initial_release_date": "2026-08-20T18:35:10.280000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "libgit2: libgit2: Submodule path traversal allows arbitrary directory creation", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53584.json", "version": "3", "product_status": {"fixed": 3, "known_affected": 37}, "imported": 1787652295.0, "vulnerability_id": "CVE-2026-53584", "vulnerability_url": "/vuln/CVE-2026-53584"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:04:54+00:00", "cve": "CVE-2026-55654", "id": "CVE-2026-55654", "initial_release_date": "2026-06-22T23:18:14.750000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openssh: Heap out-of-bounds read in Red Hat Enterprise Linux versions of OpenSSH GSSAPI indicator cleanup due to missing NULL sentinel termination", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-55654.json", "version": "3", "product_status": {"fixed": 185, "known_affected": 26, "known_not_affected": 5, "under_investigation": 1}, "imported": 1787652294.0, "vulnerability_id": "CVE-2026-55654", "vulnerability_url": "/vuln/CVE-2026-55654"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:04:52+00:00", "cve": "CVE-2026-45446", "id": "CVE-2026-45446", "initial_release_date": "2026-06-09T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45446.json", "version": "3", "product_status": {"fixed": 103, "known_affected": 24, "known_not_affected": 29}, "imported": 1787652292.0, "vulnerability_id": "CVE-2026-45446", "vulnerability_url": "/vuln/CVE-2026-45446"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:04:48+00:00", "cve": "CVE-2026-42770", "id": "CVE-2026-42770", "initial_release_date": "2026-06-09T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openssl: FFC-DH Peer Validation Uses Attacker-Supplied q", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42770.json", "version": "3", "product_status": {"fixed": 103, "known_affected": 51, "known_not_affected": 2}, "imported": 1787652288.0, "vulnerability_id": "CVE-2026-42770", "vulnerability_url": "/vuln/CVE-2026-42770"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:04:46+00:00", "cve": "CVE-2026-42769", "id": "CVE-2026-42769", "initial_release_date": "2026-06-09T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42769.json", "version": "3", "product_status": {"fixed": 103, "known_affected": 24, "known_not_affected": 29}, "imported": 1787652286.0, "vulnerability_id": "CVE-2026-42769", "vulnerability_url": "/vuln/CVE-2026-42769"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:04:43+00:00", "cve": "CVE-2026-42768", "id": "CVE-2026-42768", "initial_release_date": "2026-06-09T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42768.json", "version": "3", "product_status": {"fixed": 103, "known_affected": 51, "known_not_affected": 2}, "imported": 1787652283.0, "vulnerability_id": "CVE-2026-42768", "vulnerability_url": "/vuln/CVE-2026-42768"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:04:40+00:00", "cve": "CVE-2026-42767", "id": "CVE-2026-42767", "initial_release_date": "2026-06-09T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42767.json", "version": "3", "product_status": {"fixed": 103, "known_affected": 32, "known_not_affected": 21}, "imported": 1787652280.0, "vulnerability_id": "CVE-2026-42767", "vulnerability_url": "/vuln/CVE-2026-42767"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:04:38+00:00", "cve": "CVE-2026-42766", "id": "CVE-2026-42766", "initial_release_date": "2026-06-09T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openssl: Possible NULL Dereference in Password-Based CMS Decryption", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42766.json", "version": "3", "product_status": {"fixed": 103, "known_affected": 51, "known_not_affected": 2}, "imported": 1787652278.0, "vulnerability_id": "CVE-2026-42766", "vulnerability_url": "/vuln/CVE-2026-42766"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:04:35+00:00", "cve": "CVE-2026-35388", "id": "CVE-2026-35388", "initial_release_date": "2026-04-02T16:57:31.073000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "OpenSSH: OpenSSH: Low integrity impact from unconfirmed proxy-mode multiplexing sessions", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35388.json", "version": "3", "product_status": {"fixed": 964, "known_affected": 18, "known_not_affected": 160}, "imported": 1787652275.0, "vulnerability_id": "CVE-2026-35388", "vulnerability_url": "/vuln/CVE-2026-35388"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:04:33+00:00", "cve": "CVE-2026-35387", "id": "CVE-2026-35387", "initial_release_date": "2026-04-02T16:52:53.623000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "OpenSSH: OpenSSH: Information disclosure due to unintended cryptographic algorithm usage", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35387.json", "version": "3", "product_status": {"fixed": 967, "known_affected": 18, "known_not_affected": 157}, "imported": 1787652273.0, "vulnerability_id": "CVE-2026-35387", "vulnerability_url": "/vuln/CVE-2026-35387"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:04:30+00:00", "cve": "CVE-2026-34181", "id": "CVE-2026-34181", "initial_release_date": "2026-06-09T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34181.json", "version": "3", "product_status": {"fixed": 103, "known_affected": 24, "known_not_affected": 29}, "imported": 1787652270.0, "vulnerability_id": "CVE-2026-34181", "vulnerability_url": "/vuln/CVE-2026-34181"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:04:29+00:00", "cve": "CVE-2026-35386", "id": "CVE-2026-35386", "initial_release_date": "2026-04-02T16:44:27.806000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "OpenSSH: OpenSSH: Arbitrary command execution via shell metacharacters in username", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35386.json", "version": "3", "product_status": {"fixed": 962, "known_affected": 18, "known_not_affected": 162}, "imported": 1787652269.0, "vulnerability_id": "CVE-2026-35386", "vulnerability_url": "/vuln/CVE-2026-35386"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:04:23+00:00", "cve": "CVE-2026-34180", "id": "CVE-2026-34180", "initial_release_date": "2026-06-09T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34180.json", "version": "3", "product_status": {"fixed": 103, "known_affected": 51, "known_not_affected": 2}, "imported": 1787652263.0, "vulnerability_id": "CVE-2026-34180", "vulnerability_url": "/vuln/CVE-2026-34180"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:04:20+00:00", "cve": "CVE-2026-9076", "id": "CVE-2026-9076", "initial_release_date": "2026-06-09T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9076.json", "version": "3", "product_status": {"fixed": 103, "known_affected": 51, "known_not_affected": 2}, "imported": 1787652260.0, "vulnerability_id": "CVE-2026-9076", "vulnerability_url": "/vuln/CVE-2026-9076"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:04:18+00:00", "cve": "CVE-2026-7383", "id": "CVE-2026-7383", "initial_release_date": "2026-06-09T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-7383.json", "version": "3", "product_status": {"fixed": 103, "known_affected": 51, "known_not_affected": 2}, "imported": 1787652258.0, "vulnerability_id": "CVE-2026-7383", "vulnerability_url": "/vuln/CVE-2026-7383"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:04:13+00:00", "cve": "CVE-2026-5419", "id": "CVE-2026-5419", "initial_release_date": "2026-04-29T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "gnutls: gnutls: Information disclosure via timing side-channel in PKCS#7 padding removal", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5419.json", "version": "3", "product_status": {"fixed": 342, "known_affected": 12, "known_not_affected": 36, "under_investigation": 1}, "imported": 1787652253.0, "vulnerability_id": "CVE-2026-5419", "vulnerability_url": "/vuln/CVE-2026-5419"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:04:10+00:00", "cve": "CVE-2026-4438", "id": "CVE-2026-4438", "initial_release_date": "2026-03-20T19:59:06.064000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4438.json", "version": "3", "product_status": {"fixed": 2031, "known_affected": 237, "known_not_affected": 3, "under_investigation": 1}, "imported": 1787652250.0, "vulnerability_id": "CVE-2026-4438", "vulnerability_url": "/vuln/CVE-2026-4438"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:04:07+00:00", "cve": "CVE-2026-3832", "id": "CVE-2026-3832", "initial_release_date": "2026-04-30T17:29:25.738000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "gnutls: gnutls: Security bypass allows acceptance of revoked server certificates via crafted OCSP response", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3832.json", "version": "3", "product_status": {"fixed": 212, "known_affected": 7, "known_not_affected": 21, "under_investigation": 1}, "imported": 1787652247.0, "vulnerability_id": "CVE-2026-3832", "vulnerability_url": "/vuln/CVE-2026-3832"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:04:04+00:00", "cve": "CVE-2026-2297", "id": "CVE-2026-2297", "initial_release_date": "2026-03-04T22:10:43.297000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "cpython: CPython: Logging Bypass in Legacy .pyc File Handling", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2297.json", "version": "3", "product_status": {"fixed": 348, "known_affected": 154, "known_not_affected": 4}, "imported": 1787652244.0, "vulnerability_id": "CVE-2026-2297", "vulnerability_url": "/vuln/CVE-2026-2297"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:04:02+00:00", "cve": "CVE-2025-13151", "id": "CVE-2025-13151", "initial_release_date": "2025-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-13151.json", "version": "3", "product_status": {"fixed": 144, "known_affected": 9, "known_not_affected": 1}, "imported": 1787652242.0, "vulnerability_id": "CVE-2025-13151", "vulnerability_url": "/vuln/CVE-2025-13151"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T10:03:31+00:00", "cve": "CVE-2026-67314", "id": "CVE-2026-67314", "initial_release_date": "2026-08-01T12:22:16.603000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "axios: axios: Outbound Request Tampering via Prototype Pollution in Basic Auth", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-67314.json", "version": "3", "product_status": {"fixed": 6, "known_affected": 37, "known_not_affected": 3}, "imported": 1787652211.0, "vulnerability_id": "CVE-2026-67314", "vulnerability_url": "/vuln/CVE-2026-67314"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T10:03:26+00:00", "cve": "CVE-2026-59649", "id": "CVE-2026-59649", "initial_release_date": "2026-08-03T00:44:24.300000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "org.bouncycastle/bcpg-fips: org.bouncycastle/bcpg-jdk15on: org.bouncycastle/bcpg-jdk18on: Bouncy Castle for Java: Denial of Service due to unbounded OpenPGP user-attribute subpacket length", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59649.json", "version": "3", "product_status": {"known_affected": 13, "known_not_affected": 1}, "imported": 1787652206.0, "vulnerability_id": "CVE-2026-59649", "vulnerability_url": "/vuln/CVE-2026-59649"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T10:03:20+00:00", "cve": "CVE-2026-12143", "id": "CVE-2026-12143", "initial_release_date": "2026-06-12T18:01:30.362000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "form-data: form-data: Form field override via CRLF injection", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12143.json", "version": "3", "product_status": {"fixed": 389, "known_affected": 78, "known_not_affected": 3434}, "imported": 1787652200.0, "vulnerability_id": "CVE-2026-12143", "vulnerability_url": "/vuln/CVE-2026-12143"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:03:16+00:00", "cve": "CVE-2025-6170", "id": "CVE-2025-6170", "initial_release_date": "2025-06-16T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-6170.json", "version": "3", "product_status": {"fixed": 160, "known_affected": 12, "known_not_affected": 1}, "imported": 1787652196.0, "vulnerability_id": "CVE-2025-6170", "vulnerability_url": "/vuln/CVE-2025-6170"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:03:13+00:00", "cve": "CVE-2025-6075", "id": "CVE-2025-6075", "initial_release_date": "2025-10-31T16:41:34.983000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "python: Quadratic complexity in os.path.expandvars() with user-controlled template", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-6075.json", "version": "3", "product_status": {"fixed": 492, "known_affected": 101, "known_not_affected": 24}, "imported": 1787652193.0, "vulnerability_id": "CVE-2025-6075", "vulnerability_url": "/vuln/CVE-2025-6075"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:03:10+00:00", "cve": "CVE-2024-34459", "id": "CVE-2024-34459", "initial_release_date": "2024-05-08T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "libxml2: buffer over-read in xmlHTMLPrintFileContext in xmllint.c", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-34459.json", "version": "3", "product_status": {"fixed": 462, "known_affected": 10, "known_not_affected": 2}, "imported": 1787652190.0, "vulnerability_id": "CVE-2024-34459", "vulnerability_url": "/vuln/CVE-2024-34459"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:03:07+00:00", "cve": "CVE-2026-53923", "id": "CVE-2026-53923", "initial_release_date": "2026-06-22T21:55:42.001000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "vllm: vLLM: Information disclosure via integer truncation", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53923.json", "version": "3", "product_status": {"fixed": 3, "known_not_affected": 22}, "imported": 1787652187.0, "vulnerability_id": "CVE-2026-53923", "vulnerability_url": "/vuln/CVE-2026-53923"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:03:01+00:00", "cve": "CVE-2022-40150", "id": "CVE-2022-40150", "initial_release_date": "2022-09-20T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "jettison: memory exhaustion via user-supplied XML or JSON data", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-40150.json", "version": "3", "product_status": {"fixed": 82, "known_affected": 27, "known_not_affected": 2370}, "imported": 1787652181.0, "vulnerability_id": "CVE-2022-40150", "vulnerability_url": "/vuln/CVE-2022-40150"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:02:56+00:00", "cve": "CVE-2026-74717", "id": "CVE-2026-74717", "initial_release_date": "2026-08-22T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: net/mlx5: fw_tracer, return NULL on create error", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74717.json", "version": "3", "product_status": {"known_affected": 246, "known_not_affected": 28}, "imported": 1787652176.0, "vulnerability_id": "CVE-2026-74717", "vulnerability_url": "/vuln/CVE-2026-74717"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:02:53+00:00", "cve": "CVE-2026-74579", "id": "CVE-2026-74579", "initial_release_date": "2026-08-17T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: netfilter: nft_payload: fix mask build for partial field offload", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74579.json", "version": "3", "product_status": {"known_affected": 232, "known_not_affected": 42}, "imported": 1787652173.0, "vulnerability_id": "CVE-2026-74579", "vulnerability_url": "/vuln/CVE-2026-74579"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:02:48+00:00", "cve": "CVE-2024-21538", "id": "CVE-2024-21538", "initial_release_date": "2024-11-08T05:00:04.695000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "cross-spawn: regular expression denial of service", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-21538.json", "version": "3", "product_status": {"fixed": 1022, "known_affected": 72, "known_not_affected": 2799}, "imported": 1787652168.0, "vulnerability_id": "CVE-2024-21538", "vulnerability_url": "/vuln/CVE-2024-21538"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:02:48+00:00", "cve": "CVE-2021-47313", "id": "CVE-2021-47313", "initial_release_date": "2021-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: cpufreq: CPPC: Fix potential memleak in cppc_cpufreq_cpu_init", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-47313.json", "version": "3", "product_status": {"fixed": 120, "known_affected": 44, "known_not_affected": 122}, "imported": 1787652168.0, "vulnerability_id": "CVE-2021-47313", "vulnerability_url": "/vuln/CVE-2021-47313"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:02:47+00:00", "cve": "CVE-2026-74976", "id": "CVE-2026-74976", "initial_release_date": "2026-08-18T12:23:34.327000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74976.json", "version": "3", "product_status": {"fixed": 43, "known_affected": 16}, "imported": 1787652167.0, "vulnerability_id": "CVE-2026-74976", "vulnerability_url": "/vuln/CVE-2026-74976"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:02:45+00:00", "cve": "CVE-2026-74722", "id": "CVE-2026-74722", "initial_release_date": "2026-08-22T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: btrfs: fix memory leak in btrfs_do_encoded_write()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74722.json", "version": "3", "product_status": {"known_affected": 90, "known_not_affected": 184}, "imported": 1787652165.0, "vulnerability_id": "CVE-2026-74722", "vulnerability_url": "/vuln/CVE-2026-74722"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:02:45+00:00", "cve": "CVE-2026-74728", "id": "CVE-2026-74728", "initial_release_date": "2026-08-22T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: xfs: handle NULL b_addr in xfs_buf_free", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74728.json", "version": "3", "product_status": {"known_affected": 184, "known_not_affected": 90}, "imported": 1787652165.0, "vulnerability_id": "CVE-2026-74728", "vulnerability_url": "/vuln/CVE-2026-74728"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:02:45+00:00", "cve": "CVE-2026-74718", "id": "CVE-2026-74718", "initial_release_date": "2026-08-22T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: devlink: fix net namespace reference leak in reload", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74718.json", "version": "3", "product_status": {"known_affected": 184, "known_not_affected": 90}, "imported": 1787652165.0, "vulnerability_id": "CVE-2026-74718", "vulnerability_url": "/vuln/CVE-2026-74718"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:02:44+00:00", "cve": "CVE-2025-15469", "id": "CVE-2025-15469", "initial_release_date": "2025-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15469.json", "version": "3", "product_status": {"fixed": 107, "known_affected": 58, "known_not_affected": 5}, "imported": 1787652164.0, "vulnerability_id": "CVE-2025-15469", "vulnerability_url": "/vuln/CVE-2025-15469"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:02:44+00:00", "cve": "CVE-2026-74654", "id": "CVE-2026-74654", "initial_release_date": "2026-08-22T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: serial: 8250_dma: Clear stale RX state on shutdown", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74654.json", "version": "3", "product_status": {"known_affected": 232, "known_not_affected": 42}, "imported": 1787652164.0, "vulnerability_id": "CVE-2026-74654", "vulnerability_url": "/vuln/CVE-2026-74654"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:02:42+00:00", "cve": "CVE-2026-74983", "id": "CVE-2026-74983", "initial_release_date": "2026-08-18T12:23:34.590000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "firefox: thunderbird: Mitigation bypass in the Data Loss Prevention component", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74983.json", "version": "3", "product_status": {"fixed": 43, "known_affected": 16}, "imported": 1787652162.0, "vulnerability_id": "CVE-2026-74983", "vulnerability_url": "/vuln/CVE-2026-74983"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:02:42+00:00", "cve": "CVE-2025-15468", "id": "CVE-2025-15468", "initial_release_date": "2025-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15468.json", "version": "3", "product_status": {"fixed": 107, "known_affected": 58, "known_not_affected": 5}, "imported": 1787652162.0, "vulnerability_id": "CVE-2025-15468", "vulnerability_url": "/vuln/CVE-2025-15468"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:02:41+00:00", "cve": "CVE-2026-74678", "id": "CVE-2026-74678", "initial_release_date": "2026-08-22T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74678.json", "version": "3", "product_status": {"known_affected": 232, "known_not_affected": 42}, "imported": 1787652161.0, "vulnerability_id": "CVE-2026-74678", "vulnerability_url": "/vuln/CVE-2026-74678"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:02:40+00:00", "cve": "CVE-2026-74709", "id": "CVE-2026-74709", "initial_release_date": "2026-08-22T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: xsk: clear metadata pointer when no timestamp is requested", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74709.json", "version": "3", "product_status": {"known_affected": 184, "known_not_affected": 90}, "imported": 1787652160.0, "vulnerability_id": "CVE-2026-74709", "vulnerability_url": "/vuln/CVE-2026-74709"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:02:38+00:00", "cve": "CVE-2025-68458", "id": "CVE-2025-68458", "initial_release_date": "2025-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "webpack: webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-68458.json", "version": "3", "product_status": {"fixed": 234, "known_affected": 127, "known_not_affected": 40}, "imported": 1787652158.0, "vulnerability_id": "CVE-2025-68458", "vulnerability_url": "/vuln/CVE-2025-68458"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:02:38+00:00", "cve": "CVE-2026-74653", "id": "CVE-2026-74653", "initial_release_date": "2026-08-22T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74653.json", "version": "3", "product_status": {"known_affected": 232, "known_not_affected": 42}, "imported": 1787652158.0, "vulnerability_id": "CVE-2026-74653", "vulnerability_url": "/vuln/CVE-2026-74653"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:02:38+00:00", "cve": "CVE-2026-50185", "id": "CVE-2026-50185", "initial_release_date": "2026-07-17T18:35:02.078000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "cmov: cmov: Incorrect output due to improper zero-extension in aarch64 conditional move operations", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50185.json", "version": "3", "product_status": {"known_affected": 1, "known_not_affected": 1, "under_investigation": 38}, "imported": 1787652158.0, "vulnerability_id": "CVE-2026-50185", "vulnerability_url": "/vuln/CVE-2026-50185"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:02:37+00:00", "cve": "CVE-2026-74644", "id": "CVE-2026-74644", "initial_release_date": "2026-08-22T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: mm/damon/ops-common: putback folios on invalid migrate nid", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74644.json", "version": "3", "product_status": {"known_affected": 76, "known_not_affected": 198}, "imported": 1787652157.0, "vulnerability_id": "CVE-2026-74644", "vulnerability_url": "/vuln/CVE-2026-74644"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:02:36+00:00", "cve": "CVE-2026-74633", "id": "CVE-2026-74633", "initial_release_date": "2026-08-22T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: tracing: Fix NULL pointer dereference in module event cache removal", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74633.json", "version": "3", "product_status": {"known_affected": 14, "known_not_affected": 260}, "imported": 1787652156.0, "vulnerability_id": "CVE-2026-74633", "vulnerability_url": "/vuln/CVE-2026-74633"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:02:35+00:00", "cve": "CVE-2025-7339", "id": "CVE-2025-7339", "initial_release_date": "2025-07-17T15:47:39.680000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "on-headers: on-headers vulnerable to http response header manipulation", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-7339.json", "version": "3", "product_status": {"fixed": 88, "known_affected": 100, "known_not_affected": 14}, "imported": 1787652155.0, "vulnerability_id": "CVE-2025-7339", "vulnerability_url": "/vuln/CVE-2025-7339"}, {"meta_source": "redhat_vex", "aggregate_severity": "None", "current_release_date": "2026-08-25T10:02:33+00:00", "cve": "CVE-2026-4427", "id": "CVE-2026-4427", "initial_release_date": "2026-03-18T13:00:31+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "github.com/jackc/pgproto3: pgproto3: Denial of Service via negative field length in DataRow message", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4427.json", "version": "3", "product_status": {"fixed": 115, "known_affected": 25, "known_not_affected": 279}, "imported": 1787652153.0, "vulnerability_id": "CVE-2026-4427", "vulnerability_url": "/vuln/CVE-2026-4427"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:02:33+00:00", "cve": "CVE-2026-74622", "id": "CVE-2026-74622", "initial_release_date": "2026-08-22T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: net: atlantic: free RX pages of consumed but not refilled buffers", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74622.json", "version": "3", "product_status": {"known_affected": 232, "known_not_affected": 42}, "imported": 1787652153.0, "vulnerability_id": "CVE-2026-74622", "vulnerability_url": "/vuln/CVE-2026-74622"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T10:01:20+00:00", "cve": "CVE-2026-39820", "id": "CVE-2026-39820", "initial_release_date": "2026-05-07T19:41:19.854000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39820.json", "version": "3", "product_status": {"fixed": 267, "known_affected": 99, "known_not_affected": 2948, "under_investigation": 129}, "imported": 1787652080.0, "vulnerability_id": "CVE-2026-39820", "vulnerability_url": "/vuln/CVE-2026-39820"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:01:16+00:00", "cve": "CVE-2024-21534", "id": "CVE-2024-21534", "initial_release_date": "2024-10-11T05:00:01.824000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "jsonpath-plus: Remote Code Execution in jsonpath-plus via Improper Input Sanitization", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-21534.json", "version": "3", "product_status": {"fixed": 7, "known_affected": 2, "known_not_affected": 34}, "imported": 1787652076.0, "vulnerability_id": "CVE-2024-21534", "vulnerability_url": "/vuln/CVE-2024-21534"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T10:01:15+00:00", "cve": "CVE-2026-33811", "id": "CVE-2026-33811", "initial_release_date": "2026-05-07T19:41:19.285000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33811.json", "version": "3", "product_status": {"fixed": 913, "known_affected": 194, "known_not_affected": 4084, "under_investigation": 5}, "imported": 1787652075.0, "vulnerability_id": "CVE-2026-33811", "vulnerability_url": "/vuln/CVE-2026-33811"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:01:12+00:00", "cve": "CVE-2025-15281", "id": "CVE-2025-15281", "initial_release_date": "2025-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15281.json", "version": "3", "product_status": {"fixed": 2043, "known_affected": 22, "known_not_affected": 1007}, "imported": 1787652072.0, "vulnerability_id": "CVE-2025-15281", "vulnerability_url": "/vuln/CVE-2025-15281"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:01:10+00:00", "cve": "CVE-2025-5889", "id": "CVE-2025-5889", "initial_release_date": "2025-06-09T18:16:01.889000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "brace-expansion: juliangruber brace-expansion index.js expand redos", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-5889.json", "version": "3", "product_status": {"fixed": 497, "known_affected": 144, "known_not_affected": 94}, "imported": 1787652070.0, "vulnerability_id": "CVE-2025-5889", "vulnerability_url": "/vuln/CVE-2025-5889"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:01:10+00:00", "cve": "CVE-2026-74601", "id": "CVE-2026-74601", "initial_release_date": "2026-08-22T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: ring-buffer: Use current_context for safe per-CPU buffer swap", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74601.json", "version": "3", "product_status": {"known_affected": 232, "known_not_affected": 42}, "imported": 1787652070.0, "vulnerability_id": "CVE-2026-74601", "vulnerability_url": "/vuln/CVE-2026-74601"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:01:10+00:00", "cve": "CVE-2026-74708", "id": "CVE-2026-74708", "initial_release_date": "2026-08-22T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: xsk: validate launch-time metadata size", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74708.json", "version": "3", "product_status": {"known_affected": 184, "known_not_affected": 90}, "imported": 1787652070.0, "vulnerability_id": "CVE-2026-74708", "vulnerability_url": "/vuln/CVE-2026-74708"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:01:09+00:00", "cve": "CVE-2025-59436", "id": "CVE-2025-59436", "initial_release_date": "2025-09-16T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "ip: Node ip SSRF", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59436.json", "version": "3", "product_status": {"fixed": 4, "known_affected": 35, "known_not_affected": 24}, "imported": 1787652069.0, "vulnerability_id": "CVE-2025-59436", "vulnerability_url": "/vuln/CVE-2025-59436"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:01:08+00:00", "cve": "CVE-2026-54787", "id": "CVE-2026-54787", "initial_release_date": "2026-07-31T21:58:14.156000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "github.com/sigstore/sigstore-go: sigstore-go: Signature bypass allows acceptance of bundles signed with expired keys", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54787.json", "version": "3", "product_status": {"fixed": 12}, "imported": 1787652068.0, "vulnerability_id": "CVE-2026-54787", "vulnerability_url": "/vuln/CVE-2026-54787"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:01:06+00:00", "cve": "CVE-2026-74698", "id": "CVE-2026-74698", "initial_release_date": "2026-08-22T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: net/mlx5e: fix BQL reset on SQ re-activation", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74698.json", "version": "3", "product_status": {"known_affected": 198, "known_not_affected": 76}, "imported": 1787652066.0, "vulnerability_id": "CVE-2026-74698", "vulnerability_url": "/vuln/CVE-2026-74698"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:01:05+00:00", "cve": "CVE-2026-74733", "id": "CVE-2026-74733", "initial_release_date": "2026-08-22T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74733.json", "version": "3", "product_status": {"known_affected": 184, "known_not_affected": 90}, "imported": 1787652065.0, "vulnerability_id": "CVE-2026-74733", "vulnerability_url": "/vuln/CVE-2026-74733"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:01:04+00:00", "cve": "CVE-2026-39373", "id": "CVE-2026-39373", "initial_release_date": "2026-04-07T19:35:36.071000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "JWCrypto: python-cryptography: python: JWCrypto: Memory exhaustion via crafted compressed JWE tokens", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39373.json", "version": "3", "product_status": {"fixed": 26, "known_affected": 9, "known_not_affected": 1186}, "imported": 1787652064.0, "vulnerability_id": "CVE-2026-39373", "vulnerability_url": "/vuln/CVE-2026-39373"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:01:04+00:00", "cve": "CVE-2025-68157", "id": "CVE-2025-68157", "initial_release_date": "2025-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "webpack: webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-68157.json", "version": "3", "product_status": {"fixed": 234, "known_affected": 127, "known_not_affected": 40}, "imported": 1787652064.0, "vulnerability_id": "CVE-2025-68157", "vulnerability_url": "/vuln/CVE-2025-68157"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:01:03+00:00", "cve": "CVE-2021-44568", "id": "CVE-2021-44568", "initial_release_date": "2021-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "libsolv: heap-overflows in resolve_dependencies function", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-44568.json", "version": "3", "product_status": {"fixed": 8, "known_affected": 7, "known_not_affected": 3488}, "imported": 1787652063.0, "vulnerability_id": "CVE-2021-44568", "vulnerability_url": "/vuln/CVE-2021-44568"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:01:03+00:00", "cve": "CVE-2026-74676", "id": "CVE-2026-74676", "initial_release_date": "2026-08-22T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: vt: add permission check for KDSKBMETA ioctl", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74676.json", "version": "3", "product_status": {"known_affected": 274}, "imported": 1787652063.0, "vulnerability_id": "CVE-2026-74676", "vulnerability_url": "/vuln/CVE-2026-74676"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:01:03+00:00", "cve": "CVE-2026-66338", "id": "CVE-2026-66338", "initial_release_date": "2026-06-05T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "libsoup: libsoup: HTTP Request Smuggling via permissive chunk-size parsing in soup_body_input_stream_read_chunked()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-66338.json", "version": "3", "product_status": {"known_affected": 16}, "imported": 1787652063.0, "vulnerability_id": "CVE-2026-66338", "vulnerability_url": "/vuln/CVE-2026-66338"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:01:02+00:00", "cve": "CVE-2026-22796", "id": "CVE-2026-22796", "initial_release_date": "2026-01-27T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-22796.json", "version": "3", "product_status": {"fixed": 107, "known_affected": 58, "known_not_affected": 5}, "imported": 1787652062.0, "vulnerability_id": "CVE-2026-22796", "vulnerability_url": "/vuln/CVE-2026-22796"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:01:01+00:00", "cve": "CVE-2025-69421", "id": "CVE-2025-69421", "initial_release_date": "2025-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-69421.json", "version": "3", "product_status": {"fixed": 107, "known_affected": 58, "known_not_affected": 5}, "imported": 1787652061.0, "vulnerability_id": "CVE-2025-69421", "vulnerability_url": "/vuln/CVE-2025-69421"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:01:00+00:00", "cve": "CVE-2025-69420", "id": "CVE-2025-69420", "initial_release_date": "2025-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openssl: OpenSSL: Denial of Service via malformed TimeStamp Response", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-69420.json", "version": "3", "product_status": {"fixed": 107, "known_affected": 58, "known_not_affected": 5}, "imported": 1787652060.0, "vulnerability_id": "CVE-2025-69420", "vulnerability_url": "/vuln/CVE-2025-69420"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:00:59+00:00", "cve": "CVE-2025-69418", "id": "CVE-2025-69418", "initial_release_date": "2025-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-69418.json", "version": "3", "product_status": {"fixed": 107, "known_affected": 58, "known_not_affected": 5}, "imported": 1787652059.0, "vulnerability_id": "CVE-2025-69418", "vulnerability_url": "/vuln/CVE-2025-69418"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:00:59+00:00", "cve": "CVE-2025-68160", "id": "CVE-2025-68160", "initial_release_date": "2025-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-68160.json", "version": "3", "product_status": {"fixed": 107, "known_affected": 58, "known_not_affected": 5}, "imported": 1787652059.0, "vulnerability_id": "CVE-2025-68160", "vulnerability_url": "/vuln/CVE-2025-68160"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:00:58+00:00", "cve": "CVE-2026-74663", "id": "CVE-2026-74663", "initial_release_date": "2026-08-22T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: net/sched: reject overly deep qdisc hierarchies", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74663.json", "version": "3", "product_status": {"known_affected": 274}, "imported": 1787652058.0, "vulnerability_id": "CVE-2026-74663", "vulnerability_url": "/vuln/CVE-2026-74663"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:00:58+00:00", "cve": "CVE-2025-66199", "id": "CVE-2025-66199", "initial_release_date": "2025-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-66199.json", "version": "3", "product_status": {"fixed": 107, "known_affected": 1, "known_not_affected": 62}, "imported": 1787652058.0, "vulnerability_id": "CVE-2025-66199", "vulnerability_url": "/vuln/CVE-2025-66199"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:00:55+00:00", "cve": "CVE-2026-74680", "id": "CVE-2026-74680", "initial_release_date": "2026-08-22T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74680.json", "version": "3", "product_status": {"known_affected": 198, "known_not_affected": 76}, "imported": 1787652055.0, "vulnerability_id": "CVE-2026-74680", "vulnerability_url": "/vuln/CVE-2026-74680"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:00:54+00:00", "cve": "CVE-2024-5535", "id": "CVE-2024-5535", "initial_release_date": "2024-06-27T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openssl: SSL_select_next_proto buffer overread", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-5535.json", "version": "3", "product_status": {"fixed": 420, "known_affected": 44, "known_not_affected": 196}, "imported": 1787652054.0, "vulnerability_id": "CVE-2024-5535", "vulnerability_url": "/vuln/CVE-2024-5535"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-25T10:00:53+00:00", "cve": "CVE-2025-11143", "id": "CVE-2025-11143", "initial_release_date": "2025-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "org.eclipse.jetty/jetty-http: org.eclipse.jetty: Security bypass due to differential URI parsing", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-11143.json", "version": "3", "product_status": {"fixed": 2, "known_affected": 33, "known_not_affected": 2}, "imported": 1787652053.0, "vulnerability_id": "CVE-2025-11143", "vulnerability_url": "/vuln/CVE-2025-11143"}]}