{"metadata": {"count": 317795, "page": 1, "per_page": 100}, "data": [{"meta_source": "redhat_vex", "current_release_date": "2026-11-10T11:47:03+00:00", "cve": "CVE-2026-118768", "id": "CVE-2026-118768", "initial_release_date": "2026-10-29T17:20:05.577000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "botan: botan: Certificate validation bypass via missing OCSP response signature verification", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-118768.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1794311223.0, "vulnerability_id": "CVE-2026-118768", "vulnerability_url": "/vuln/CVE-2026-118768"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-10T11:44:11+00:00", "cve": "CVE-2026-56862", "id": "CVE-2026-56862", "initial_release_date": "2026-08-13T21:58:53.216000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-56862.json", "version": "3", "product_status": {"fixed": 8708, "known_affected": 182, "known_not_affected": 5260}, "imported": 1794311051.0, "vulnerability_id": "CVE-2026-56862", "vulnerability_url": "/vuln/CVE-2026-56862"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-10T11:43:02+00:00", "cve": "CVE-2026-56860", "id": "CVE-2026-56860", "initial_release_date": "2026-08-13T21:58:53.731000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-56860.json", "version": "3", "product_status": {"fixed": 8799, "known_affected": 182, "known_not_affected": 5343}, "imported": 1794310982.0, "vulnerability_id": "CVE-2026-56860", "vulnerability_url": "/vuln/CVE-2026-56860"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-10T11:39:36+00:00", "cve": "CVE-2026-33818", "id": "CVE-2026-33818", "initial_release_date": "2026-08-13T21:58:52.821000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33818.json", "version": "3", "product_status": {"fixed": 8584, "known_affected": 263, "known_not_affected": 4876}, "imported": 1794310776.0, "vulnerability_id": "CVE-2026-33818", "vulnerability_url": "/vuln/CVE-2026-33818"}, {"meta_source": "redhat_vex", "current_release_date": "2026-11-10T11:35:15+00:00", "cve": "CVE-2026-102702", "id": "CVE-2026-102702", "initial_release_date": "2026-10-13T15:45:13.125000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "xen: Xen: Memory corruption via cache flush on read-only grant mappings", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102702.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1794310515.0, "vulnerability_id": "CVE-2026-102702", "vulnerability_url": "/vuln/CVE-2026-102702"}, {"meta_source": "redhat_vex", "current_release_date": "2026-11-10T11:35:11+00:00", "cve": "CVE-2026-102700", "id": "CVE-2026-102700", "initial_release_date": "2026-10-13T15:45:27.794000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "xen: xen: Denial of Service via page reference leak in cache flush error path", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102700.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1794310511.0, "vulnerability_id": "CVE-2026-102700", "vulnerability_url": "/vuln/CVE-2026-102700"}, {"meta_source": "redhat_vex", "current_release_date": "2026-11-10T11:35:11+00:00", "cve": "CVE-2026-112061", "id": "CVE-2026-112061", "initial_release_date": "2026-10-18T12:19:51.237000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "rtmpdump: rtmpdump: Denial of Service via heap-based out-of-bounds read in AMFProp_Decode", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112061.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1794310511.0, "vulnerability_id": "CVE-2026-112061", "vulnerability_url": "/vuln/CVE-2026-112061"}, {"meta_source": "redhat_vex", "current_release_date": "2026-11-10T11:35:11+00:00", "cve": "CVE-2026-116731", "id": "CVE-2026-116731", "initial_release_date": "2026-10-26T21:52:32.953000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "furnace: Furnace: Denial of Service via out-of-bounds write during FamiTracker module parsing", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116731.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1794310511.0, "vulnerability_id": "CVE-2026-116731", "vulnerability_url": "/vuln/CVE-2026-116731"}, {"meta_source": "redhat_vex", "current_release_date": "2026-11-10T11:35:11+00:00", "cve": "CVE-2026-116730", "id": "CVE-2026-116730", "initial_release_date": "2026-10-26T21:52:32.251000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "furnace: Furnace: Denial of Service via crafted FamiTracker module import", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116730.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1794310511.0, "vulnerability_id": "CVE-2026-116730", "vulnerability_url": "/vuln/CVE-2026-116730"}, {"meta_source": "redhat_vex", "current_release_date": "2026-11-10T11:35:11+00:00", "cve": "CVE-2026-112060", "id": "CVE-2026-112060", "initial_release_date": "2026-10-18T12:19:50.440000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "rtmpdump: rtmpdump: Heap memory corruption via improper AMF3 decoding", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112060.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1794310511.0, "vulnerability_id": "CVE-2026-112060", "vulnerability_url": "/vuln/CVE-2026-112060"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-10T11:35:10+00:00", "cve": "CVE-2026-111943", "id": "CVE-2026-111943", "initial_release_date": "2026-10-20T02:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111943.json", "version": "3", "product_status": {"fixed": 7963, "known_affected": 223, "known_not_affected": 2233}, "imported": 1794310510.0, "vulnerability_id": "CVE-2026-111943", "vulnerability_url": "/vuln/CVE-2026-111943"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T11:23:17+00:00", "cve": "CVE-2026-125709", "id": "CVE-2026-125709", "initial_release_date": "2026-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "libstdc++: overflow leaves streambuf in inconsistent state on I/O error.", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-125709.json", "version": "3", "product_status": {"known_affected": 203}, "imported": 1794309797.0, "vulnerability_id": "CVE-2026-125709", "vulnerability_url": "/vuln/CVE-2026-125709"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T11:23:13+00:00", "cve": "CVE-2026-125707", "id": "CVE-2026-125707", "initial_release_date": "2026-05-11T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "gst-plugins-bad: gst-plugins-bad: off-by-one write in MXF demuxer temporal offset table", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-125707.json", "version": "3", "product_status": {"known_affected": 21}, "imported": 1794309793.0, "vulnerability_id": "CVE-2026-125707", "vulnerability_url": "/vuln/CVE-2026-125707"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T11:23:08+00:00", "cve": "CVE-2026-125706", "id": "CVE-2026-125706", "initial_release_date": "2026-05-11T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "gst-plugins-bad: gst-plugins-bad: missing bounds checks in MPEG PS PES header parsing", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-125706.json", "version": "3", "product_status": {"known_affected": 21}, "imported": 1794309788.0, "vulnerability_id": "CVE-2026-125706", "vulnerability_url": "/vuln/CVE-2026-125706"}, {"meta_source": "redhat_vex", "current_release_date": "2026-11-10T11:23:08+00:00", "cve": "CVE-2026-79607", "id": "CVE-2026-79607", "initial_release_date": "2026-10-13T15:43:43.425000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "xen: xen: Denial of Service via Xenstore live update state corruption", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-79607.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1794309788.0, "vulnerability_id": "CVE-2026-79607", "vulnerability_url": "/vuln/CVE-2026-79607"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T11:22:59+00:00", "cve": "CVE-2026-37236", "id": "CVE-2026-37236", "initial_release_date": "2026-08-28T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "github.com/grpc-ecosystem/grpc-gateway: github.com/grpc-ecosystem/grpc-gateway/v2: grpc-gateway: Access control bypass via X-HTTP-Method-Override header", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-37236.json", "version": "3", "product_status": {"fixed": 8, "known_affected": 54, "known_not_affected": 348}, "imported": 1794309779.0, "vulnerability_id": "CVE-2026-37236", "vulnerability_url": "/vuln/CVE-2026-37236"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-10T11:22:56+00:00", "cve": "CVE-2026-125712", "id": "CVE-2026-125712", "initial_release_date": "2026-06-12T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "gst-plugins-base: gst-plugins-base: Missing bounds checks in RTCP SDES packet parsing", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-125712.json", "version": "3", "product_status": {"known_affected": 21}, "imported": 1794309776.0, "vulnerability_id": "CVE-2026-125712", "vulnerability_url": "/vuln/CVE-2026-125712"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-10T11:22:50+00:00", "cve": "CVE-2026-83589", "id": "CVE-2026-83589", "initial_release_date": "2026-08-31T20:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "oauth-proxy: Open Redirect via /\\ and /\\t Bypass in Post-Login Redirect", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-83589.json", "version": "3", "product_status": {"fixed": 33, "known_not_affected": 5390}, "imported": 1794309770.0, "vulnerability_id": "CVE-2026-83589", "vulnerability_url": "/vuln/CVE-2026-83589"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-10T11:22:47+00:00", "cve": "CVE-2026-76641", "id": "CVE-2026-76641", "initial_release_date": "2026-08-20T17:31:10.610000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "expat: Expat: Denial of Service via XML external entity parsing", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-76641.json", "version": "3", "product_status": {"fixed": 7, "known_affected": 27, "known_not_affected": 14, "under_investigation": 1}, "imported": 1794309767.0, "vulnerability_id": "CVE-2026-76641", "vulnerability_url": "/vuln/CVE-2026-76641"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-10T11:22:35+00:00", "cve": "CVE-2026-56853", "id": "CVE-2026-56853", "initial_release_date": "2026-08-13T21:58:53.092000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-56853.json", "version": "3", "product_status": {"fixed": 3305, "known_affected": 178, "known_not_affected": 3564}, "imported": 1794309755.0, "vulnerability_id": "CVE-2026-56853", "vulnerability_url": "/vuln/CVE-2026-56853"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T11:22:30+00:00", "cve": "CVE-2026-7017", "id": "CVE-2026-7017", "initial_release_date": "2026-07-07T17:41:48.989000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "perl-HTTP-Tiny: HTTP::Tiny: Information disclosure via cross-origin redirect of credential headers", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-7017.json", "version": "3", "product_status": {"known_affected": 7}, "imported": 1794309750.0, "vulnerability_id": "CVE-2026-7017", "vulnerability_url": "/vuln/CVE-2026-7017"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-10T11:22:30+00:00", "cve": "CVE-2026-32280", "id": "CVE-2026-32280", "initial_release_date": "2026-04-08T01:06:58.595000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32280.json", "version": "3", "product_status": {"fixed": 4792, "known_affected": 124, "known_not_affected": 7585}, "imported": 1794309750.0, "vulnerability_id": "CVE-2026-32280", "vulnerability_url": "/vuln/CVE-2026-32280"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-10T11:22:30+00:00", "cve": "CVE-2026-13697", "id": "CVE-2026-13697", "initial_release_date": "2026-07-29T16:32:39.519000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "undici: undici: Information disclosure and Denial of Service via malformed Cache-Control directives", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-13697.json", "version": "3", "product_status": {"fixed": 59, "known_affected": 21, "known_not_affected": 485}, "imported": 1794309750.0, "vulnerability_id": "CVE-2026-13697", "vulnerability_url": "/vuln/CVE-2026-13697"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T11:13:46+00:00", "cve": "CVE-2026-101760", "id": "CVE-2026-101760", "initial_release_date": "2026-10-20T21:22:45.688000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mysql: mysql: Denial of service in InnoDB", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-101760.json", "version": "3", "product_status": {"known_affected": 33, "known_not_affected": 2}, "imported": 1794309226.0, "vulnerability_id": "CVE-2026-101760", "vulnerability_url": "/vuln/CVE-2026-101760"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T11:13:43+00:00", "cve": "CVE-2026-101724", "id": "CVE-2026-101724", "initial_release_date": "2026-10-20T21:22:31.763000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mysql: mysql: Denial of Service in InnoDB component", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-101724.json", "version": "3", "product_status": {"known_affected": 33, "known_not_affected": 2}, "imported": 1794309223.0, "vulnerability_id": "CVE-2026-101724", "vulnerability_url": "/vuln/CVE-2026-101724"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T11:13:42+00:00", "cve": "CVE-2026-101747", "id": "CVE-2026-101747", "initial_release_date": "2026-10-20T21:22:40.446000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mysql: mysql: Denial of Service in InnoDB", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-101747.json", "version": "3", "product_status": {"known_affected": 33, "known_not_affected": 2}, "imported": 1794309222.0, "vulnerability_id": "CVE-2026-101747", "vulnerability_url": "/vuln/CVE-2026-101747"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T11:13:35+00:00", "cve": "CVE-2026-101627", "id": "CVE-2026-101627", "initial_release_date": "2026-10-20T21:21:58.696000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mysql: mysql: Denial of Service in InnoDB component", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-101627.json", "version": "3", "product_status": {"known_affected": 33, "known_not_affected": 2}, "imported": 1794309215.0, "vulnerability_id": "CVE-2026-101627", "vulnerability_url": "/vuln/CVE-2026-101627"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T11:13:32+00:00", "cve": "CVE-2026-101624", "id": "CVE-2026-101624", "initial_release_date": "2026-10-20T21:21:57.598000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mysql: mysql: Denial of service via InnoDB storage engine", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-101624.json", "version": "3", "product_status": {"known_affected": 33, "known_not_affected": 2}, "imported": 1794309212.0, "vulnerability_id": "CVE-2026-101624", "vulnerability_url": "/vuln/CVE-2026-101624"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T11:13:30+00:00", "cve": "CVE-2026-101622", "id": "CVE-2026-101622", "initial_release_date": "2026-10-20T21:21:56.824000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mysql: mysql: Denial of Service in InnoDB", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-101622.json", "version": "3", "product_status": {"known_affected": 33, "known_not_affected": 2}, "imported": 1794309210.0, "vulnerability_id": "CVE-2026-101622", "vulnerability_url": "/vuln/CVE-2026-101622"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T11:13:25+00:00", "cve": "CVE-2026-101621", "id": "CVE-2026-101621", "initial_release_date": "2026-10-20T21:21:56.450000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mysql: mysql: Denial of Service in InnoDB", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-101621.json", "version": "3", "product_status": {"known_affected": 33, "known_not_affected": 2}, "imported": 1794309205.0, "vulnerability_id": "CVE-2026-101621", "vulnerability_url": "/vuln/CVE-2026-101621"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T11:13:22+00:00", "cve": "CVE-2026-101619", "id": "CVE-2026-101619", "initial_release_date": "2026-10-20T21:21:55.703000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mysql: mysql: Denial of Service in InnoDB", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-101619.json", "version": "3", "product_status": {"known_affected": 33, "known_not_affected": 2}, "imported": 1794309202.0, "vulnerability_id": "CVE-2026-101619", "vulnerability_url": "/vuln/CVE-2026-101619"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T11:13:17+00:00", "cve": "CVE-2026-101618", "id": "CVE-2026-101618", "initial_release_date": "2026-10-20T21:21:55.329000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mysql: mysql: Denial of Service in InnoDB", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-101618.json", "version": "3", "product_status": {"known_affected": 33, "known_not_affected": 2}, "imported": 1794309197.0, "vulnerability_id": "CVE-2026-101618", "vulnerability_url": "/vuln/CVE-2026-101618"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T11:13:15+00:00", "cve": "CVE-2026-101617", "id": "CVE-2026-101617", "initial_release_date": "2026-10-20T21:21:54.961000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mysql: mysql: Denial of Service in InnoDB", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-101617.json", "version": "3", "product_status": {"known_affected": 33, "known_not_affected": 2}, "imported": 1794309195.0, "vulnerability_id": "CVE-2026-101617", "vulnerability_url": "/vuln/CVE-2026-101617"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T11:13:10+00:00", "cve": "CVE-2026-101615", "id": "CVE-2026-101615", "initial_release_date": "2026-10-20T21:21:54.194000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mysql: mysql: Denial of service in InnoDB", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-101615.json", "version": "3", "product_status": {"known_affected": 33, "known_not_affected": 2}, "imported": 1794309190.0, "vulnerability_id": "CVE-2026-101615", "vulnerability_url": "/vuln/CVE-2026-101615"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T11:13:07+00:00", "cve": "CVE-2026-101614", "id": "CVE-2026-101614", "initial_release_date": "2026-10-20T21:21:53.830000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mysql: mysql: Denial of Service in InnoDB component", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-101614.json", "version": "3", "product_status": {"known_affected": 33, "known_not_affected": 2}, "imported": 1794309187.0, "vulnerability_id": "CVE-2026-101614", "vulnerability_url": "/vuln/CVE-2026-101614"}, {"meta_source": "redhat_vex", "aggregate_severity": "Critical", "current_release_date": "2026-11-10T11:13:05+00:00", "cve": "CVE-2026-112900", "id": "CVE-2026-112900", "initial_release_date": "2026-10-19T22:07:50.418000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "pillow: Pillow: Argument Injection in Ghostscript call, potentially leading into RCE", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-112900.json", "version": "3", "product_status": {"fixed": 62, "known_affected": 59, "known_not_affected": 21}, "imported": 1794309185.0, "vulnerability_id": "CVE-2026-112900", "vulnerability_url": "/vuln/CVE-2026-112900"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-10T11:12:49+00:00", "cve": "CVE-2026-103241", "id": "CVE-2026-103241", "initial_release_date": "2026-09-30T16:45:13.581000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "vllm: vLLM: Denial of Service via crafted input to Gemma4UnifiedParser", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-103241.json", "version": "3", "product_status": {"known_affected": 23, "known_not_affected": 9}, "imported": 1794309169.0, "vulnerability_id": "CVE-2026-103241", "vulnerability_url": "/vuln/CVE-2026-103241"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T11:12:46+00:00", "cve": "CVE-2026-101611", "id": "CVE-2026-101611", "initial_release_date": "2026-10-20T21:21:52.710000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mysql: mysql: Denial of Service in InnoDB", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-101611.json", "version": "3", "product_status": {"known_affected": 33, "known_not_affected": 2}, "imported": 1794309166.0, "vulnerability_id": "CVE-2026-101611", "vulnerability_url": "/vuln/CVE-2026-101611"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T11:12:46+00:00", "cve": "CVE-2025-68121", "id": "CVE-2025-68121", "initial_release_date": "2025-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-68121.json", "version": "3", "product_status": {"fixed": 8465, "known_affected": 189, "known_not_affected": 9036, "under_investigation": 37}, "imported": 1794309166.0, "vulnerability_id": "CVE-2025-68121", "vulnerability_url": "/vuln/CVE-2025-68121"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T11:12:46+00:00", "cve": "CVE-2026-101612", "id": "CVE-2026-101612", "initial_release_date": "2026-10-20T21:21:53.070000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mysql: mysql: Denial of Service in InnoDB component", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-101612.json", "version": "3", "product_status": {"known_affected": 33, "known_not_affected": 2}, "imported": 1794309166.0, "vulnerability_id": "CVE-2026-101612", "vulnerability_url": "/vuln/CVE-2026-101612"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T11:12:46+00:00", "cve": "CVE-2026-101609", "id": "CVE-2026-101609", "initial_release_date": "2026-10-20T21:21:51.993000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mysql: mysql: Denial of service in InnoDB", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-101609.json", "version": "3", "product_status": {"known_affected": 33, "known_not_affected": 2}, "imported": 1794309166.0, "vulnerability_id": "CVE-2026-101609", "vulnerability_url": "/vuln/CVE-2026-101609"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T10:43:43+00:00", "cve": "CVE-2026-125703", "id": "CVE-2026-125703", "initial_release_date": "2026-05-11T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "gst-plugins-bad: gst-plugins-bad: Bounds check errors in MXF VANC packet handling", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-125703.json", "version": "3", "product_status": {"known_affected": 21}, "imported": 1794307423.0, "vulnerability_id": "CVE-2026-125703", "vulnerability_url": "/vuln/CVE-2026-125703"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T10:43:40+00:00", "cve": "CVE-2026-125672", "id": "CVE-2026-125672", "initial_release_date": "2026-11-10T09:18:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "cockpit: cockpit-storaged: Tang keyserver address from an untrusted LUKS header clevis token reaches curl's argument vector as an option", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-125672.json", "version": "3", "product_status": {"known_affected": 25}, "imported": 1794307420.0, "vulnerability_id": "CVE-2026-125672", "vulnerability_url": "/vuln/CVE-2026-125672"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T10:43:25+00:00", "cve": "CVE-2026-122054", "id": "CVE-2026-122054", "initial_release_date": "2026-11-04T17:17:38.321000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "glibc: glibc: Denial of Service via crafted BIG-HKSCS input conversion", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-122054.json", "version": "3", "product_status": {"known_affected": 454, "known_not_affected": 1, "under_investigation": 3}, "imported": 1794307405.0, "vulnerability_id": "CVE-2026-122054", "vulnerability_url": "/vuln/CVE-2026-122054"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T10:43:22+00:00", "cve": "CVE-2026-114121", "id": "CVE-2026-114121", "initial_release_date": "2026-10-21T16:20:07.261000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "electron: Electron: Unauthorized application launch via external protocol URL misattribution", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114121.json", "version": "3", "product_status": {"known_affected": 4}, "imported": 1794307402.0, "vulnerability_id": "CVE-2026-114121", "vulnerability_url": "/vuln/CVE-2026-114121"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-10T10:43:21+00:00", "cve": "CVE-2026-125704", "id": "CVE-2026-125704", "initial_release_date": "2026-05-11T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "gstreamer: gstreamer: Use-after-free in GStreamer core buffer value deserialization", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-125704.json", "version": "3", "product_status": {"known_affected": 11}, "imported": 1794307401.0, "vulnerability_id": "CVE-2026-125704", "vulnerability_url": "/vuln/CVE-2026-125704"}, {"meta_source": "redhat_vex", "current_release_date": "2026-11-10T10:43:20+00:00", "cve": "CVE-2026-102485", "id": "CVE-2026-102485", "initial_release_date": "2026-10-21T15:03:51.277000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "ntpsec: ntpsec: Denial of Service via out-of-bounds read in Motorola Oncore driver", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102485.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1794307400.0, "vulnerability_id": "CVE-2026-102485", "vulnerability_url": "/vuln/CVE-2026-102485"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T10:43:20+00:00", "cve": "CVE-2026-113798", "id": "CVE-2026-113798", "initial_release_date": "2026-10-21T16:12:35.548000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "electron: Electron: Unauthorized pointer lock permission grant via cross-origin iframes", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113798.json", "version": "3", "product_status": {"known_affected": 4}, "imported": 1794307400.0, "vulnerability_id": "CVE-2026-113798", "vulnerability_url": "/vuln/CVE-2026-113798"}, {"meta_source": "redhat_vex", "current_release_date": "2026-11-10T10:43:20+00:00", "cve": "CVE-2026-102484", "id": "CVE-2026-102484", "initial_release_date": "2026-10-21T15:03:46.313000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "ntpsec: ntpsec: Denial of Service via excessive JJY time replies", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102484.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1794307400.0, "vulnerability_id": "CVE-2026-102484", "vulnerability_url": "/vuln/CVE-2026-102484"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-10T10:43:14+00:00", "cve": "CVE-2026-116591", "id": "CVE-2026-116591", "initial_release_date": "2026-10-26T21:54:33.109000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "github.com/klauspost/compress/zstd: klauspost/compress: Denial of Service via crafted zstd compressed input", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116591.json", "version": "3", "product_status": {"fixed": 188, "known_affected": 487, "known_not_affected": 216}, "imported": 1794307394.0, "vulnerability_id": "CVE-2026-116591", "vulnerability_url": "/vuln/CVE-2026-116591"}, {"meta_source": "redhat_vex", "current_release_date": "2026-11-10T10:43:06+00:00", "cve": "CVE-2026-102483", "id": "CVE-2026-102483", "initial_release_date": "2026-10-21T15:03:41.276000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "ntpsec: ntpsec: Denial of Service via excessive NTS Cookie Placeholder extension fields", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102483.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1794307386.0, "vulnerability_id": "CVE-2026-102483", "vulnerability_url": "/vuln/CVE-2026-102483"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-10T10:42:59+00:00", "cve": "CVE-2026-102282", "id": "CVE-2026-102282", "initial_release_date": "2026-10-05T17:00:00.250000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "adm-zip: adm-zip: Privilege escalation via unfiltered permission bits in extracted archives", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102282.json", "version": "3", "product_status": {"fixed": 33, "known_affected": 6, "known_not_affected": 299}, "imported": 1794307379.0, "vulnerability_id": "CVE-2026-102282", "vulnerability_url": "/vuln/CVE-2026-102282"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-11-10T10:10:33+00:00", "cve": "CVE-2024-45341", "id": "CVE-2024-45341", "initial_release_date": "2024-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: crypto/x509: crypto/x509: usage of IPv6 zone IDs can bypass URI name constraints", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-45341.json", "version": "3", "product_status": {"fixed": 101, "known_affected": 766}, "imported": 1794305433.0, "vulnerability_id": "CVE-2024-45341", "vulnerability_url": "/vuln/CVE-2024-45341"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T10:05:37+00:00", "cve": "CVE-2025-58183", "id": "CVE-2025-58183", "initial_release_date": "2025-10-29T22:10:14.376000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: archive/tar: Unbounded allocation when parsing GNU sparse map", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-58183.json", "version": "3", "product_status": {"fixed": 9114, "known_affected": 104, "known_not_affected": 8359}, "imported": 1794305137.0, "vulnerability_id": "CVE-2025-58183", "vulnerability_url": "/vuln/CVE-2025-58183"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T10:05:28+00:00", "cve": "CVE-2025-58058", "id": "CVE-2025-58058", "initial_release_date": "2025-08-28T21:54:05.561000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "github.com/ulikunitz/xz: github.com/ulikunitz/xz leaks memory", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-58058.json", "version": "3", "product_status": {"fixed": 116, "known_affected": 249, "known_not_affected": 32}, "imported": 1794305128.0, "vulnerability_id": "CVE-2025-58058", "vulnerability_url": "/vuln/CVE-2025-58058"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T10:05:23+00:00", "cve": "CVE-2025-22870", "id": "CVE-2025-22870", "initial_release_date": "2025-03-12T18:27:59.376000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-22870.json", "version": "3", "product_status": {"fixed": 329, "known_affected": 581, "known_not_affected": 105}, "imported": 1794305123.0, "vulnerability_id": "CVE-2025-22870", "vulnerability_url": "/vuln/CVE-2025-22870"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T10:05:21+00:00", "cve": "CVE-2025-22866", "id": "CVE-2025-22866", "initial_release_date": "2025-02-06T16:54:10.252000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "crypto/internal/nistec: golang: Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-22866.json", "version": "3", "product_status": {"fixed": 990, "known_affected": 361, "known_not_affected": 1150}, "imported": 1794305121.0, "vulnerability_id": "CVE-2025-22866", "vulnerability_url": "/vuln/CVE-2025-22866"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T10:05:14+00:00", "cve": "CVE-2024-45336", "id": "CVE-2024-45336", "initial_release_date": "2024-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: net/http: net/http: sensitive headers incorrectly sent after cross-domain redirect", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-45336.json", "version": "3", "product_status": {"fixed": 1131, "known_affected": 472, "known_not_affected": 980}, "imported": 1794305114.0, "vulnerability_id": "CVE-2024-45336", "vulnerability_url": "/vuln/CVE-2024-45336"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T10:05:13+00:00", "cve": "CVE-2024-43709", "id": "CVE-2024-43709", "initial_release_date": "2024-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "elasticsearch: Elasticsearch allocation of resources without limits or throttling leads to crash", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-43709.json", "version": "3", "product_status": {"known_not_affected": 3}, "imported": 1794305113.0, "vulnerability_id": "CVE-2024-43709", "vulnerability_url": "/vuln/CVE-2024-43709"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T10:05:07+00:00", "cve": "CVE-2024-9676", "id": "CVE-2024-9676", "initial_release_date": "2024-10-15T15:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Podman: Buildah: CRI-O: symlink traversal vulnerability in the containers/storage library can cause Denial of Service (DoS)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-9676.json", "version": "3", "product_status": {"fixed": 1703, "known_affected": 9, "known_not_affected": 4886}, "imported": 1794305107.0, "vulnerability_id": "CVE-2024-9676", "vulnerability_url": "/vuln/CVE-2024-9676"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T10:05:05+00:00", "cve": "CVE-2024-7246", "id": "CVE-2024-7246", "initial_release_date": "2024-08-06T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "grpc: client communicating with a HTTP/2 proxy can poison the HPACK table between the proxy and the backend", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-7246.json", "version": "3", "product_status": {"fixed": 46, "known_affected": 1, "known_not_affected": 4647}, "imported": 1794305105.0, "vulnerability_id": "CVE-2024-7246", "vulnerability_url": "/vuln/CVE-2024-7246"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-10T10:02:38+00:00", "cve": "CVE-2026-45367", "id": "CVE-2026-45367", "initial_release_date": "2026-07-16T16:52:04.901000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "ca.uhn.hapi.fhir/org.hl7.fhir.r4: HAPI FHIR: Denial of Service via uncontrolled regular expression processing", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45367.json", "version": "3", "product_status": {"fixed": 1, "known_affected": 2}, "imported": 1794304958.0, "vulnerability_id": "CVE-2026-45367", "vulnerability_url": "/vuln/CVE-2026-45367"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-10T10:00:01+00:00", "cve": "CVE-2025-61726", "id": "CVE-2025-61726", "initial_release_date": "2025-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-61726.json", "version": "3", "product_status": {"fixed": 11222, "known_affected": 412, "known_not_affected": 17319}, "imported": 1794304801.0, "vulnerability_id": "CVE-2025-61726", "vulnerability_url": "/vuln/CVE-2025-61726"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-10T09:59:54+00:00", "cve": "CVE-2025-30204", "id": "CVE-2025-30204", "initial_release_date": "2025-03-21T21:42:01.382000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-30204.json", "version": "3", "product_status": {"fixed": 3866, "known_affected": 69, "known_not_affected": 13221}, "imported": 1794304794.0, "vulnerability_id": "CVE-2025-30204", "vulnerability_url": "/vuln/CVE-2025-30204"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-10T09:59:44+00:00", "cve": "CVE-2025-22869", "id": "CVE-2025-22869", "initial_release_date": "2025-02-26T03:07:48.855000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-22869.json", "version": "3", "product_status": {"fixed": 3338, "known_affected": 52, "known_not_affected": 6261}, "imported": 1794304784.0, "vulnerability_id": "CVE-2025-22869", "vulnerability_url": "/vuln/CVE-2025-22869"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-10T09:59:38+00:00", "cve": "CVE-2025-22868", "id": "CVE-2025-22868", "initial_release_date": "2025-02-26T03:07:49.012000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-22868.json", "version": "3", "product_status": {"fixed": 2239, "known_affected": 102, "known_not_affected": 8426}, "imported": 1794304778.0, "vulnerability_id": "CVE-2025-22868", "vulnerability_url": "/vuln/CVE-2025-22868"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-10T09:59:36+00:00", "cve": "CVE-2024-45337", "id": "CVE-2024-45337", "initial_release_date": "2024-12-11T18:55:58.506000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-45337.json", "version": "3", "product_status": {"fixed": 2479, "known_affected": 57, "known_not_affected": 8464}, "imported": 1794304776.0, "vulnerability_id": "CVE-2024-45337", "vulnerability_url": "/vuln/CVE-2024-45337"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-10T09:59:15+00:00", "cve": "CVE-2026-21441", "id": "CVE-2026-21441", "initial_release_date": "2026-01-07T22:09:01.936000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-21441.json", "version": "3", "product_status": {"fixed": 1957, "known_affected": 385, "known_not_affected": 3028, "under_investigation": 1}, "imported": 1794304755.0, "vulnerability_id": "CVE-2026-21441", "vulnerability_url": "/vuln/CVE-2026-21441"}, {"meta_source": "redhat_vex", "current_release_date": "2026-11-10T09:47:29+00:00", "cve": "CVE-2026-93018", "id": "CVE-2026-93018", "initial_release_date": "2026-09-18T13:57:37.837000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "perl-Imager: perl-Imager: Information disclosure via out-of-bounds pixel index in paletted images", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93018.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1794304049.0, "vulnerability_id": "CVE-2026-93018", "vulnerability_url": "/vuln/CVE-2026-93018"}, {"meta_source": "redhat_vex", "current_release_date": "2026-11-10T09:42:50+00:00", "cve": "CVE-2026-88368", "id": "CVE-2026-88368", "initial_release_date": "2026-09-24T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "nanosvg: nanosvg: Denial of Service via improper integer conversion in rasterizer", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88368.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1794303770.0, "vulnerability_id": "CVE-2026-88368", "vulnerability_url": "/vuln/CVE-2026-88368"}, {"meta_source": "redhat_vex", "current_release_date": "2026-11-10T09:42:46+00:00", "cve": "CVE-2026-88366", "id": "CVE-2026-88366", "initial_release_date": "2026-09-24T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "nanosvg: NanoSVG: Denial of Service via crafted SVG arc commands", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-88366.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1794303766.0, "vulnerability_id": "CVE-2026-88366", "vulnerability_url": "/vuln/CVE-2026-88366"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T09:41:45+00:00", "cve": "CVE-2021-32760", "id": "CVE-2021-32760", "initial_release_date": "2021-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "containerd: pulling and extracting crafted container image may result in Unix file permission changes", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-32760.json", "version": "3", "product_status": {"fixed": 37, "known_affected": 4, "known_not_affected": 180, "under_investigation": 2}, "imported": 1794303705.0, "vulnerability_id": "CVE-2021-32760", "vulnerability_url": "/vuln/CVE-2021-32760"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T09:41:41+00:00", "cve": "CVE-2021-29482", "id": "CVE-2021-29482", "initial_release_date": "2021-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "ulikunitz/xz: Infinite loop in readUvarint allows for denial of service", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-29482.json", "version": "3", "product_status": {"fixed": 22, "known_affected": 36, "known_not_affected": 59}, "imported": 1794303701.0, "vulnerability_id": "CVE-2021-29482", "vulnerability_url": "/vuln/CVE-2021-29482"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T09:41:38+00:00", "cve": "CVE-2021-20329", "id": "CVE-2021-20329", "initial_release_date": "2021-03-30T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mongo-go-driver: specific cstrings input may not be properly validated", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-20329.json", "version": "3", "product_status": {"fixed": 252, "known_affected": 69, "known_not_affected": 3782}, "imported": 1794303698.0, "vulnerability_id": "CVE-2021-20329", "vulnerability_url": "/vuln/CVE-2021-20329"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T09:41:35+00:00", "cve": "CVE-2021-3538", "id": "CVE-2021-3538", "initial_release_date": "2021-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "satori/go.uuid: predictable UUIDs generated via insecure randomness", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-3538.json", "version": "3", "product_status": {"known_affected": 1, "known_not_affected": 104}, "imported": 1794303695.0, "vulnerability_id": "CVE-2021-3538", "vulnerability_url": "/vuln/CVE-2021-3538"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T09:41:26+00:00", "cve": "CVE-2020-28852", "id": "CVE-2020-28852", "initial_release_date": "2020-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/text: Panic in language.ParseAcceptLanguage while processing bcp47 tag", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2020/cve-2020-28852.json", "version": "3", "product_status": {"fixed": 83, "known_affected": 68, "known_not_affected": 546}, "imported": 1794303686.0, "vulnerability_id": "CVE-2020-28852", "vulnerability_url": "/vuln/CVE-2020-28852"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T09:41:24+00:00", "cve": "CVE-2020-28851", "id": "CVE-2020-28851", "initial_release_date": "2020-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/text: Panic in language.ParseAcceptLanguage while parsing -u- extension", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2020/cve-2020-28851.json", "version": "3", "product_status": {"fixed": 347, "known_affected": 55, "known_not_affected": 164}, "imported": 1794303684.0, "vulnerability_id": "CVE-2020-28851", "vulnerability_url": "/vuln/CVE-2020-28851"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T09:41:18+00:00", "cve": "CVE-2020-14040", "id": "CVE-2020-14040", "initial_release_date": "2020-06-17T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2020/cve-2020-14040.json", "version": "3", "product_status": {"fixed": 679, "known_affected": 185, "known_not_affected": 652}, "imported": 1794303678.0, "vulnerability_id": "CVE-2020-14040", "vulnerability_url": "/vuln/CVE-2020-14040"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-10T09:41:07+00:00", "cve": "CVE-2020-9283", "id": "CVE-2020-9283", "initial_release_date": "2020-02-21T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2020/cve-2020-9283.json", "version": "3", "product_status": {"fixed": 152, "known_affected": 76, "known_not_affected": 629}, "imported": 1794303667.0, "vulnerability_id": "CVE-2020-9283", "vulnerability_url": "/vuln/CVE-2020-9283"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T09:41:07+00:00", "cve": "CVE-2017-20146", "id": "CVE-2017-20146", "initial_release_date": "2017-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "gorilla: Usage of the CORS handler may apply improper CORS headers", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2017/cve-2017-20146.json", "version": "3", "product_status": {"known_affected": 5, "known_not_affected": 125}, "imported": 1794303667.0, "vulnerability_id": "CVE-2017-20146", "vulnerability_url": "/vuln/CVE-2017-20146"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T09:41:07+00:00", "cve": "CVE-2018-17419", "id": "CVE-2018-17419", "initial_release_date": "2018-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "dns: Denial of Service (DoS)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2018/cve-2018-17419.json", "version": "3", "product_status": {"fixed": 20, "known_not_affected": 1352}, "imported": 1794303667.0, "vulnerability_id": "CVE-2018-17419", "vulnerability_url": "/vuln/CVE-2018-17419"}, {"meta_source": "redhat_vex", "current_release_date": "2026-11-10T09:27:56+00:00", "cve": "CVE-2026-102360", "id": "CVE-2026-102360", "initial_release_date": "2026-09-29T13:11:55.735000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "lib0: lib0: Information disclosure via missing bounds check in binary decoder", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102360.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1794302876.0, "vulnerability_id": "CVE-2026-102360", "vulnerability_url": "/vuln/CVE-2026-102360"}, {"meta_source": "redhat_vex", "current_release_date": "2026-11-10T09:27:56+00:00", "cve": "CVE-2026-102521", "id": "CVE-2026-102521", "initial_release_date": "2026-09-29T13:14:49.522000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "lib0: lib0: Information disclosure via out-of-bounds read in readFromDataView", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-102521.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1794302876.0, "vulnerability_id": "CVE-2026-102521", "vulnerability_url": "/vuln/CVE-2026-102521"}, {"meta_source": "redhat_vex", "current_release_date": "2026-11-10T09:27:56+00:00", "cve": "CVE-2026-123784", "id": "CVE-2026-123784", "initial_release_date": "2026-11-06T15:01:00.678000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "fluxbox: fluxbox: Arbitrary command execution via crafted style background values", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-123784.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1794302876.0, "vulnerability_id": "CVE-2026-123784", "vulnerability_url": "/vuln/CVE-2026-123784"}, {"meta_source": "redhat_vex", "current_release_date": "2026-11-10T09:23:08+00:00", "cve": "CVE-2026-123785", "id": "CVE-2026-123785", "initial_release_date": "2026-11-06T15:01:01.397000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "fluxbox: fluxbox: Denial of Service via crafted style geometry values", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-123785.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1794302588.0, "vulnerability_id": "CVE-2026-123785", "vulnerability_url": "/vuln/CVE-2026-123785"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T09:23:08+00:00", "cve": "CVE-2026-119208", "id": "CVE-2026-119208", "initial_release_date": "2026-10-29T20:41:02.879000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "pypdf: pypdf: Denial of Service via forged page count in encrypted PDFs", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-119208.json", "version": "3", "product_status": {"known_affected": 15}, "imported": 1794302588.0, "vulnerability_id": "CVE-2026-119208", "vulnerability_url": "/vuln/CVE-2026-119208"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T09:23:08+00:00", "cve": "CVE-2026-119207", "id": "CVE-2026-119207", "initial_release_date": "2026-10-29T20:38:54.611000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "pypdf: pypdf: Denial of Service via crafted invalid PDF dictionary", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-119207.json", "version": "3", "product_status": {"known_affected": 15}, "imported": 1794302588.0, "vulnerability_id": "CVE-2026-119207", "vulnerability_url": "/vuln/CVE-2026-119207"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T09:23:08+00:00", "cve": "CVE-2026-119206", "id": "CVE-2026-119206", "initial_release_date": "2026-10-29T20:37:15.057000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "pypdf: pypdf: Denial of Service via crafted PDF page labels", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-119206.json", "version": "3", "product_status": {"known_affected": 15}, "imported": 1794302588.0, "vulnerability_id": "CVE-2026-119206", "vulnerability_url": "/vuln/CVE-2026-119206"}, {"meta_source": "redhat_vex", "current_release_date": "2026-11-10T09:12:46+00:00", "cve": "CVE-2026-116238", "id": "CVE-2026-116238", "initial_release_date": "2026-10-30T19:55:11.056000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "pgadmin4: pgadmin4: Account takeover via account lockout bypass", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116238.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1794301966.0, "vulnerability_id": "CVE-2026-116238", "vulnerability_url": "/vuln/CVE-2026-116238"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T09:07:17+00:00", "cve": "CVE-2026-78659", "id": "CVE-2026-78659", "initial_release_date": "2026-10-08T22:53:58.192000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "net/http: golang.org/x/net/http2: golang: net/http: Denial of Service via HTTP/2 trailer header memory exhaustion", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-78659.json", "version": "3", "product_status": {"fixed": 242, "known_affected": 1448, "known_not_affected": 80}, "imported": 1794301637.0, "vulnerability_id": "CVE-2026-78659", "vulnerability_url": "/vuln/CVE-2026-78659"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-11-10T08:58:15+00:00", "cve": "CVE-2026-119602", "id": "CVE-2026-119602", "initial_release_date": "2026-10-30T13:18:20.547000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "libmspack: libmspack: Information disclosure via unchecked back-references in MS-ZIP decompressor", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-119602.json", "version": "3", "product_status": {"known_affected": 12}, "imported": 1794301095.0, "vulnerability_id": "CVE-2026-119602", "vulnerability_url": "/vuln/CVE-2026-119602"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T08:56:21+00:00", "cve": "CVE-2026-125063", "id": "CVE-2026-125063", "initial_release_date": "2026-11-09T15:44:30+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "automation-controller: automation-controller: quadratic regex in schedule rrule validation allows an authenticated user to exhaust API web workers (denial of service)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-125063.json", "version": "3", "product_status": {"known_affected": 3}, "imported": 1794300981.0, "vulnerability_id": "CVE-2026-125063", "vulnerability_url": "/vuln/CVE-2026-125063"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T08:56:02+00:00", "cve": "CVE-2026-101725", "id": "CVE-2026-101725", "initial_release_date": "2026-10-20T21:22:32.126000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mysql: mysql: Denial of Service via the C API component", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-101725.json", "version": "3", "product_status": {"known_affected": 9, "known_not_affected": 11}, "imported": 1794300962.0, "vulnerability_id": "CVE-2026-101725", "vulnerability_url": "/vuln/CVE-2026-101725"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-10T08:56:02+00:00", "cve": "CVE-2026-89161", "id": "CVE-2026-89161", "initial_release_date": "2026-09-11T04:11:51.666000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "pcre2: PCRE2: Memory corruption vulnerability in pcre2_jit_match", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89161.json", "version": "3", "product_status": {"fixed": 688, "known_affected": 28, "known_not_affected": 65, "under_investigation": 1}, "imported": 1794300962.0, "vulnerability_id": "CVE-2026-89161", "vulnerability_url": "/vuln/CVE-2026-89161"}, {"meta_source": "redhat_vex", "aggregate_severity": "Critical", "current_release_date": "2026-11-10T08:29:16+00:00", "cve": "CVE-2026-115731", "id": "CVE-2026-115731", "initial_release_date": "2026-11-03T20:40:10.100000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "puppetserver: openvox-agent: openvox-server: puppetserver: authenticated remote code execution via report event deserialization", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-115731.json", "version": "3", "product_status": {"fixed": 39, "known_affected": 6, "known_not_affected": 124}, "imported": 1794299356.0, "vulnerability_id": "CVE-2026-115731", "vulnerability_url": "/vuln/CVE-2026-115731"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-10T08:29:16+00:00", "cve": "CVE-2026-116592", "id": "CVE-2026-116592", "initial_release_date": "2026-11-06T10:05:41.972000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "undici: undici: Cache poisoning via intermediate redirect hops", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116592.json", "version": "3", "product_status": {"known_affected": 43, "known_not_affected": 59}, "imported": 1794299356.0, "vulnerability_id": "CVE-2026-116592", "vulnerability_url": "/vuln/CVE-2026-116592"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-10T08:23:29+00:00", "cve": "CVE-2026-115586", "id": "CVE-2026-115586", "initial_release_date": "2026-10-23T19:34:46.391000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "virtualenv: virtualenv: Arbitrary code execution via unescaped prompt in bash activation script", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-115586.json", "version": "3", "product_status": {"known_affected": 19, "known_not_affected": 7}, "imported": 1794299009.0, "vulnerability_id": "CVE-2026-115586", "vulnerability_url": "/vuln/CVE-2026-115586"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-10T08:23:21+00:00", "cve": "CVE-2026-114613", "id": "CVE-2026-114613", "initial_release_date": "2026-10-22T18:22:40.544000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "msgpack: msgpack: Denial of Service via memory leak during map deserialization", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114613.json", "version": "3", "product_status": {"known_affected": 71, "known_not_affected": 22}, "imported": 1794299001.0, "vulnerability_id": "CVE-2026-114613", "vulnerability_url": "/vuln/CVE-2026-114613"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-10T08:23:16+00:00", "cve": "CVE-2026-103112", "id": "CVE-2026-103112", "initial_release_date": "2026-11-05T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "keycloak-services: keycloak-services: Account takeover via authentication race using reset-credentials path", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-103112.json", "version": "3", "product_status": {"fixed": 20, "known_affected": 1}, "imported": 1794298996.0, "vulnerability_id": "CVE-2026-103112", "vulnerability_url": "/vuln/CVE-2026-103112"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-11-10T08:23:14+00:00", "cve": "CVE-2026-56859", "id": "CVE-2026-56859", "initial_release_date": "2026-08-13T21:58:52.959000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-56859.json", "version": "3", "product_status": {"fixed": 8111, "known_affected": 158, "known_not_affected": 5404}, "imported": 1794298994.0, "vulnerability_id": "CVE-2026-56859", "vulnerability_url": "/vuln/CVE-2026-56859"}]}