VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
288841 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-34040 | redhat_vex | Moby: Moby: Authorization bypass vulnerability | fixed: 16 known affected: 10 known not affected: 78 | 2026-08-17T17:14:55+00:00 | Vulnerability · Source |
| CVE-2025-68121 | redhat_vex | crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption | fixed: 7469 known affected: 195 known not affected: 4201 under investigation: 42 | 2026-08-17T17:14:29+00:00 | Vulnerability · Source |
| CVE-2025-61728 | redhat_vex | golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip | fixed: 7014 known affected: 110 known not affected: 4132 | 2026-08-17T17:14:12+00:00 | Vulnerability · Source |
| CVE-2025-22866 | redhat_vex | crypto/internal/nistec: golang: Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec | fixed: 478 known affected: 398 known not affected: 641 | 2026-08-17T17:14:02+00:00 | Vulnerability · Source |
| CVE-2024-45336 | redhat_vex | golang: net/http: net/http: sensitive headers incorrectly sent after cross-domain redirect | fixed: 572 known affected: 520 known not affected: 563 | 2026-08-17T17:13:47+00:00 | Vulnerability · Source |
| CVE-2026-39829 | redhat_vex | golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters | fixed: 1045 known affected: 104 known not affected: 2276 under investigation: 2 | 2026-08-17T17:13:41+00:00 | Vulnerability · Source |
| CVE-2026-29181 | redhat_vex | github.com/open-telemetry/opentelemetry-go: OpenTelemetry-Go: Denial of Service via crafted multi-value baggage headers | fixed: 8 known affected: 11 known not affected: 229 under investigation: 1 | 2026-08-17T17:13:37+00:00 | Vulnerability · Source |
| CVE-2026-27830 | redhat_vex | c3p0: c3p0: Arbitrary Code Execution via deserialization of crafted objects | fixed: 14 known affected: 15 known not affected: 274 | 2026-08-17T17:13:31+00:00 | Vulnerability · Source |
| CVE-2025-69223 | redhat_vex | aiohttp: AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb | fixed: 220 known affected: 32 known not affected: 6340 | 2026-08-17T17:13:27+00:00 | Vulnerability · Source |
| CVE-2025-61726 | redhat_vex | golang: net/url: Memory exhaustion in query parameter parsing in net/url | fixed: 10584 known affected: 443 known not affected: 17196 | 2026-08-17T17:13:26+00:00 | Vulnerability · Source |
| CVE-2025-61729 | redhat_vex | crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate | fixed: 7927 known affected: 432 known not affected: 4900 under investigation: 2 | 2026-08-17T17:13:24+00:00 | Vulnerability · Source |
| CVE-2026-42502 | redhat_vex | golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering | fixed: 213 known affected: 347 known not affected: 619 under investigation: 1 | 2026-08-17T17:01:55+00:00 | Vulnerability · Source |
| CVE-2026-42033 | redhat_vex | axios: Axios: HTTP Transport Hijacking via Prototype Pollution | fixed: 145 known affected: 37 known not affected: 3093 | 2026-08-17T17:01:32+00:00 | Vulnerability · Source |
| CVE-2026-72020 | redhat_vex | kernel: ipvs: reset full ip_vs_seq structs in ip_vs_conn_new | known affected: 274 | 2026-08-17T17:00:03+00:00 | Vulnerability · Source |
| CVE-2026-72018 | redhat_vex | kernel: dibs: loopback: validate offset and size in move_data() | known not affected: 274 | 2026-08-17T16:59:57+00:00 | Vulnerability · Source |
| CVE-2026-59881 | redhat_vex | aiohttp: AIOHTTP: Denial of Service via unnegotiated WebSocket compression | known affected: 138 known not affected: 31 | 2026-08-17T16:59:48+00:00 | Vulnerability · Source |
| CVE-2026-72021 | redhat_vex | kernel: ipvs: use parsed transport offset in SCTP state lookup | known affected: 76 known not affected: 198 | 2026-08-17T16:59:39+00:00 | Vulnerability · Source |
| CVE-2026-72238 | redhat_vex | kernel: x86/boot: Validate console=uart8250 baud rate to fix early boot hang | known not affected: 274 | 2026-08-17T16:59:34+00:00 | Vulnerability · Source |
| CVE-2026-72022 | redhat_vex | kernel: llc: fix SAP refcount leak in llc_ui_autobind() | known not affected: 274 | 2026-08-17T16:59:22+00:00 | Vulnerability · Source |
| CVE-2026-73089 | redhat_vex | browserslist: Browserslist: Denial of Service via unbounded memory growth from distinct query results | fixed: 8 known affected: 124 known not affected: 108 | 2026-08-17T16:59:15+00:00 | Vulnerability · Source |
| CVE-2026-73643 | redhat_vex | js-yaml: js-yaml: Denial of Service via exponential parsing in flow collections | known affected: 79 known not affected: 323 | 2026-08-17T16:59:12+00:00 | Vulnerability · Source |
| CVE-2026-71235 | redhat_vex | github.com/absmach/magistrala: Magistrala IoT Platform: Arbitrary Code Execution via Unrestricted Script Execution | known affected: 162 known not affected: 231 | 2026-08-17T16:59:10+00:00 | Vulnerability · Source |
| CVE-2026-67312 | redhat_vex | axios: axios: Denial of Service via uncontrolled recursion in form data processing | fixed: 9 known not affected: 10 under investigation: 99 | 2026-08-17T16:58:56+00:00 | Vulnerability · Source |
| CVE-2026-66808 | redhat_vex | hypershift-addon-operator: hypershift-addon-operator: unsanitized hub ConfigMap data passed as CLI arguments to privileged install Job (argument injection) | fixed: 4 known not affected: 120 | 2026-08-17T16:58:53+00:00 | Vulnerability · Source |
| CVE-2026-44309 | redhat_vex | github.com/sigstore/gitsign: github.com/go-git/go-git: Gitsign: Signature verification bypass due to object re-encoding | known affected: 1 | 2026-08-17T16:38:41+00:00 | Vulnerability · Source |
| CVE-2026-41004 | redhat_vex | Spring Cloud Config Server: Spring Cloud Config: Spring Cloud Config Server: Information disclosure via trace logging | known affected: 5 | 2026-08-17T16:35:32+00:00 | Vulnerability · Source |
| CVE-2026-40312 | redhat_vex | ImageMagick: Magick.NET: ImageMagick and Magick.NET: Denial of Service via malicious MSL file processing | known affected: 14 | 2026-08-17T16:35:29+00:00 | Vulnerability · Source |
| CVE-2026-40311 | redhat_vex | ImageMagick: Magick.NET: ImageMagick: Denial of Service via heap use-after-free in XMP profile processing | known affected: 14 | 2026-08-17T16:35:23+00:00 | Vulnerability · Source |
| CVE-2026-40310 | redhat_vex | ImageMagick: Magick.NET: ImageMagick: Denial of service via heap out-of-bounds write in JP2 encoder | known affected: 14 | 2026-08-17T16:35:18+00:00 | Vulnerability · Source |
| CVE-2026-40183 | redhat_vex | ImageMagick: Magick.NET: ImageMagick: Denial of Service via heap write overflow in JXL encoder | known affected: 14 | 2026-08-17T16:35:15+00:00 | Vulnerability · Source |
| CVE-2026-40169 | redhat_vex | ImageMagick: Magick.NET: ImageMagick: Denial of Service via crafted image leading to out-of-bounds write | known affected: 14 | 2026-08-17T16:35:10+00:00 | Vulnerability · Source |
| CVE-2026-34238 | redhat_vex | ImageMagick: Magick.NET: ImageMagick: Denial of Service via integer overflow in despeckle operation | known affected: 14 | 2026-08-17T16:35:06+00:00 | Vulnerability · Source |
| CVE-2026-33905 | redhat_vex | ImageMagick: ImageMagick: Denial of service via out-of-bounds read in -sample operation | known affected: 14 | 2026-08-17T16:35:02+00:00 | Vulnerability · Source |
| CVE-2026-33902 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via deeply nested expression in FX parser | known affected: 14 | 2026-08-17T16:34:57+00:00 | Vulnerability · Source |
| CVE-2026-33900 | redhat_vex | ImageMagick: Magick.NET: ImageMagick: Denial of Service via integer truncation in viff encoder | known affected: 14 | 2026-08-17T16:34:54+00:00 | Vulnerability · Source |
| CVE-2026-33899 | redhat_vex | ImageMagick: Magick.NET: ImageMagick: Denial of Service via out-of-bounds write in XML parsing | known affected: 14 | 2026-08-17T16:34:52+00:00 | Vulnerability · Source |
| CVE-2026-33536 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via out-of-bounds write | known affected: 14 | 2026-08-17T16:34:45+00:00 | Vulnerability · Source |
| CVE-2026-33349 | redhat_vex | fast-xml-parser: fast-xml-parser: Denial of Service via unbounded entity expansion due to incorrect configuration limit handling | fixed: 1 known affected: 17 known not affected: 2 | 2026-08-17T16:34:38+00:00 | Vulnerability · Source |
| CVE-2026-33249 | redhat_vex | github.com/nats-io/nats-server: NATS-Server: Unauthorized trace message redirection via message tracing headers | known affected: 2 | 2026-08-17T16:34:33+00:00 | Vulnerability · Source |
| CVE-2026-33248 | redhat_vex | github.com/nats-io/nats-server: nats: NATS-Server: Authentication bypass due to incorrect Subject DN matching during mTLS client identity verification | known affected: 2 | 2026-08-17T16:34:32+00:00 | Vulnerability · Source |
| CVE-2026-33246 | redhat_vex | nats-server: nats: github.com/nats-io/nats-server: NATS-Server: Client identity spoofing via Nats-Request-Info header manipulation | known affected: 2 | 2026-08-17T16:34:24+00:00 | Vulnerability · Source |
| CVE-2026-33244 | redhat_vex | react-router: React Router: Cross-Site Scripting (XSS) via improper HTTP Location header neutralization | known affected: 174 | 2026-08-17T16:34:19+00:00 | Vulnerability · Source |
| CVE-2026-33223 | redhat_vex | nats-server: github.com/nats-io/nats-server: NATS-Server: Identity spoofing via `Nats-Request-Info:` header | known affected: 2 | 2026-08-17T16:34:15+00:00 | Vulnerability · Source |
| CVE-2026-33222 | redhat_vex | nats-server: NATS-Server: Unauthorized data modification via JetStream stream restore | known affected: 2 | 2026-08-17T16:34:06+00:00 | Vulnerability · Source |
| CVE-2026-33215 | redhat_vex | nats-server: NATS-Server: Session and message hijacking via MQTT Client ID malfeasance | fixed: 12 known not affected: 52 | 2026-08-17T16:34:00+00:00 | Vulnerability · Source |
| CVE-2026-32636 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via out-of-bounds write in NewXMLTree method | fixed: 51 known affected: 7 | 2026-08-17T16:33:57+00:00 | Vulnerability · Source |
| CVE-2026-32259 | redhat_vex | ImageMagick: stack-based buffer overflow in sixel encoder | known affected: 14 | 2026-08-17T16:33:51+00:00 | Vulnerability · Source |
| CVE-2026-3449 | redhat_vex | @tootallnate/once: @tootallnate/once: Denial of Service due to incorrect control flow scoping with AbortSignal | known affected: 34 | 2026-08-17T16:33:48+00:00 | Vulnerability · Source |
| CVE-2026-3408 | redhat_vex | openbabel: NULL pointer dereference when parsing a malformed CDXML file | known not affected: 1 | 2026-08-17T16:33:43+00:00 | Vulnerability · Source |
| CVE-2026-3337 | redhat_vex | aws-lc: AWS-LC: Information disclosure via timing discrepancy in AES-CCM decryption | known affected: 15 | 2026-08-17T16:33:41+00:00 | Vulnerability · Source |