VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
288836 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-68467 | redhat_vex | kernel: mtd: mchp23k256: use SPI match data for chip caps | known not affected: 274 | 2026-08-17T15:28:16+00:00 | Vulnerability · Source |
| CVE-2025-58183 | redhat_vex | golang: archive/tar: Unbounded allocation when parsing GNU sparse map | fixed: 8914 known affected: 125 known not affected: 8335 | 2026-08-17T15:14:24+00:00 | Vulnerability · Source |
| CVE-2025-47273 | redhat_vex | setuptools: Path Traversal Vulnerability in setuptools PackageIndex | fixed: 1664 known affected: 71 known not affected: 159 under investigation: 2 | 2026-08-17T15:14:15+00:00 | Vulnerability · Source |
| CVE-2025-32997 | redhat_vex | http-proxy-middleware: Improper Check for Unusual or Exceptional Conditions in http-proxy-middleware | fixed: 2 known affected: 42 known not affected: 4 | 2026-08-17T15:14:09+00:00 | Vulnerability · Source |
| CVE-2025-32996 | redhat_vex | http-proxy-middleware: Always-Incorrect Control Flow Implementation in http-proxy-middleware | fixed: 2 known affected: 42 known not affected: 4 | 2026-08-17T15:14:05+00:00 | Vulnerability · Source |
| CVE-2024-56326 | redhat_vex | jinja2: Jinja has a sandbox breakout through indirect reference to format method | fixed: 1202 known affected: 32 known not affected: 3068 | 2026-08-17T15:13:55+00:00 | Vulnerability · Source |
| CVE-2024-55565 | redhat_vex | nanoid: nanoid mishandles non-integer values | fixed: 1231 known affected: 44 known not affected: 1011 | 2026-08-17T15:13:40+00:00 | Vulnerability · Source |
| CVE-2024-52798 | redhat_vex | path-to-regexp: path-to-regexp Unpatched `path-to-regexp` ReDoS in 0.1.x | fixed: 886 known affected: 58 known not affected: 1161 | 2026-08-17T15:13:37+00:00 | Vulnerability · Source |
| CVE-2024-47068 | redhat_vex | rollup: DOM Clobbering Gadget found in rollup bundled scripts that leads to XSS | fixed: 9 known affected: 6 known not affected: 118 | 2026-08-17T15:13:34+00:00 | Vulnerability · Source |
| CVE-2024-45296 | redhat_vex | path-to-regexp: Backtracking regular expressions cause ReDoS | fixed: 1561 known affected: 36 known not affected: 2095 | 2026-08-17T15:13:23+00:00 | Vulnerability · Source |
| CVE-2024-24786 | redhat_vex | golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON | fixed: 2132 known affected: 115 known not affected: 11938 under investigation: 56 | 2026-08-17T15:05:30+00:00 | Vulnerability · Source |
| CVE-2022-41723 | redhat_vex | golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding | fixed: 1556 known affected: 284 known not affected: 11950 | 2026-08-17T15:05:19+00:00 | Vulnerability · Source |
| CVE-2022-30631 | redhat_vex | golang: compress/gzip: stack exhaustion in Reader.Read | fixed: 4253 known affected: 91 known not affected: 2159 | 2026-08-17T15:05:17+00:00 | Vulnerability · Source |
| CVE-2026-74561 | redhat_vex | kernel: nexthop: avoid unlocked f6i_list walk in nh_rt_cache_flush | known affected: 76 known not affected: 198 | 2026-08-17T15:01:01+00:00 | Vulnerability · Source |
| CVE-2026-74519 | redhat_vex | kernel: pinctrl: devicetree: don't free uninitialized dev_name on error path | known affected: 260 known not affected: 14 | 2026-08-17T15:00:56+00:00 | Vulnerability · Source |
| CVE-2026-74511 | redhat_vex | kernel: Bluetooth: mgmt: fix pending command UAF in EIR updates | known affected: 232 known not affected: 42 | 2026-08-17T15:00:51+00:00 | Vulnerability · Source |
| CVE-2026-72430 | redhat_vex | kernel: net/sched: act_ct: fix nf_connlabels leak on two error paths | known affected: 184 known not affected: 90 | 2026-08-17T15:00:40+00:00 | Vulnerability · Source |
| CVE-2026-72059 | redhat_vex | kernel: net: wwan: t7xx: destroy DMA pool on CLDMA late init failure | known not affected: 274 | 2026-08-17T15:00:34+00:00 | Vulnerability · Source |
| CVE-2026-68743 | redhat_vex | sssd: sssd: PAM responder out-of-bounds read via unchecked auth_token_length in protocol v1 | known affected: 165 | 2026-08-17T15:00:34+00:00 | Vulnerability · Source |
| CVE-2026-68464 | redhat_vex | kernel: mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt | known affected: 76 known not affected: 198 | 2026-08-17T15:00:19+00:00 | Vulnerability · Source |
| CVE-2026-68463 | redhat_vex | kernel: mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend | known affected: 76 known not affected: 198 | 2026-08-17T15:00:14+00:00 | Vulnerability · Source |
| CVE-2026-68462 | redhat_vex | kernel: bpf: Reject negative const offsets for buffer pointers | known not affected: 274 | 2026-08-17T15:00:08+00:00 | Vulnerability · Source |
| CVE-2026-68461 | redhat_vex | kernel: device property: initialize the remaining fields of fwnode_handle in fwnode_init() | known affected: 246 known not affected: 28 | 2026-08-17T15:00:03+00:00 | Vulnerability · Source |
| CVE-2026-68460 | redhat_vex | kernel: f2fs: fix potential deadlock in f2fs_balance_fs() | known not affected: 274 | 2026-08-17T14:59:58+00:00 | Vulnerability · Source |
| CVE-2026-68459 | redhat_vex | kernel: f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs() | known not affected: 274 | 2026-08-17T14:59:53+00:00 | Vulnerability · Source |
| CVE-2024-45614 | redhat_vex | rubygem-puma: Header normalization allows for client to clobber proxy set headers | known affected: 5 known not affected: 6 | 2026-08-17T14:59:49+00:00 | Vulnerability · Source |
| CVE-2026-34043 | redhat_vex | serialize-javascript: serialize-javascript: Denial of Service via specially crafted array-like object serialization | fixed: 574 known affected: 58 known not affected: 2868 | 2026-08-17T14:59:06+00:00 | Vulnerability · Source |
| CVE-2026-23381 | redhat_vex | kernel: net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled | fixed: 13 known affected: 246 known not affected: 28 | 2026-08-17T14:58:54+00:00 | Vulnerability · Source |
| CVE-2021-20329 | redhat_vex | mongo-go-driver: specific cstrings input may not be properly validated | fixed: 252 known affected: 69 known not affected: 3782 | 2026-08-17T14:58:10+00:00 | Vulnerability · Source |
| CVE-2026-33748 | redhat_vex | github.com/moby/buildkit: BuildKit: Unauthorized file access via Git URL fragment subdir components | fixed: 141 known affected: 40 known not affected: 473 | 2026-08-17T14:57:05+00:00 | Vulnerability · Source |
| CVE-2026-74570 | redhat_vex | kernel: ntfs: harden runlist realloc size calculations | known not affected: 274 | 2026-08-17T14:56:13+00:00 | Vulnerability · Source |
| CVE-2026-74565 | redhat_vex | kernel: netfilter: nf_tables: make nft_object rhltable per table | known affected: 232 known not affected: 42 | 2026-08-17T14:56:05+00:00 | Vulnerability · Source |
| CVE-2026-74538 | redhat_vex | kernel: Bluetooth: ISO: lock sk in iso_connect_ind | known affected: 184 known not affected: 90 | 2026-08-17T14:56:00+00:00 | Vulnerability · Source |
| CVE-2026-74529 | redhat_vex | kernel: Bluetooth: hci_sync: hold conn in hci_connect_pa_sync() callback | known affected: 184 known not affected: 90 | 2026-08-17T14:55:56+00:00 | Vulnerability · Source |
| CVE-2026-74508 | redhat_vex | kernel: Bluetooth: HIDP: reject frames without a transaction header | known affected: 274 | 2026-08-17T14:55:51+00:00 | Vulnerability · Source |
| CVE-2026-74499 | redhat_vex | kernel: ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() | known affected: 260 under investigation: 14 | 2026-08-17T14:55:46+00:00 | Vulnerability · Source |
| CVE-2026-74475 | redhat_vex | kernel: vxlan: use neigh_ha_snapshot() in route_shortcircuit() | known affected: 184 known not affected: 90 | 2026-08-17T14:55:40+00:00 | Vulnerability · Source |
| CVE-2026-74470 | redhat_vex | kernel: scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write | known affected: 246 known not affected: 28 | 2026-08-17T14:55:35+00:00 | Vulnerability · Source |
| CVE-2026-74464 | redhat_vex | kernel: net: openvswitch: fix skb leak on flow key update failure during ct | known affected: 274 | 2026-08-17T14:55:30+00:00 | Vulnerability · Source |
| CVE-2026-72287 | redhat_vex | kernel: KVM: nVMX: Move vTPR vs. TPR Threshold consistency check into "normal" checks | known affected: 76 known not affected: 198 | 2026-08-17T14:55:22+00:00 | Vulnerability · Source |
| CVE-2026-72248 | redhat_vex | kernel: netfilter: flowtable: support IPIP tunnel with direct xmit | known affected: 76 known not affected: 198 | 2026-08-17T14:55:16+00:00 | Vulnerability · Source |
| CVE-2026-72019 | redhat_vex | kernel: macsec: don't read an unset MAC header in macsec_encrypt() | known affected: 260 known not affected: 14 | 2026-08-17T14:55:13+00:00 | Vulnerability · Source |
| CVE-2026-68466 | redhat_vex | kernel: mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout | known not affected: 274 | 2026-08-17T14:55:10+00:00 | Vulnerability · Source |
| CVE-2026-68458 | redhat_vex | kernel: binder: cache secctx size before release zeroes it | known not affected: 274 | 2026-08-17T14:55:06+00:00 | Vulnerability · Source |
| CVE-2026-68456 | redhat_vex | kernel: usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect() | known affected: 198 known not affected: 76 | 2026-08-17T14:55:01+00:00 | Vulnerability · Source |
| CVE-2026-68455 | redhat_vex | kernel: liveupdate: validate session type before performing operation | known not affected: 274 | 2026-08-17T14:54:55+00:00 | Vulnerability · Source |
| CVE-2026-24040 | redhat_vex | jsPDF: jsPDF: Cross-User Data Leakage via race condition in addJS method | fixed: 8 known not affected: 87 | 2026-08-17T14:54:49+00:00 | Vulnerability · Source |
| CVE-2025-9648 | redhat_vex | civetweb: Denial of Service in CivetWeb | fixed: 12 known not affected: 124 | 2026-08-17T14:54:32+00:00 | Vulnerability · Source |
| CVE-2026-33036 | redhat_vex | fast-xml-parser: fast-xml-parser: Denial of Service via XML entity expansion bypass | fixed: 610 known affected: 7 known not affected: 189 | 2026-08-17T14:53:47+00:00 | Vulnerability · Source |
| CVE-2026-27942 | redhat_vex | fast-xml-parser: fast-xml-parser: Stack overflow leads to Denial of Service | fixed: 333 known affected: 4 known not affected: 143 | 2026-08-17T14:53:40+00:00 | Vulnerability · Source |