VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
303435 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-66506 | redhat_vex | github.com/sigstore/fulcio: Fulcio: Denial of Service via crafted OpenID Connect (OIDC) token | fixed: 329 known affected: 42 known not affected: 1297 | 2026-09-30T10:14:57+00:00 | Vulnerability · Source |
| CVE-2025-66471 | redhat_vex | urllib3: urllib3 Streaming API improperly handles highly compressed data | fixed: 1963 known affected: 127 known not affected: 3642 | 2026-09-30T10:14:47+00:00 | Vulnerability · Source |
| CVE-2025-66418 | redhat_vex | urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion | fixed: 1984 known affected: 381 known not affected: 2958 | 2026-09-30T10:14:38+00:00 | Vulnerability · Source |
| CVE-2025-64756 | redhat_vex | glob: glob: Command Injection Vulnerability via Malicious Filenames | fixed: 171 known affected: 115 known not affected: 1099 | 2026-09-30T10:14:20+00:00 | Vulnerability · Source |
| CVE-2025-61729 | redhat_vex | crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate | fixed: 8116 known affected: 434 known not affected: 5144 | 2026-09-30T10:14:01+00:00 | Vulnerability · Source |
| CVE-2025-30204 | redhat_vex | golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing | fixed: 3866 known affected: 68 known not affected: 13220 | 2026-09-30T10:12:49+00:00 | Vulnerability · Source |
| CVE-2025-22869 | redhat_vex | golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh | fixed: 2839 known affected: 57 known not affected: 6263 under investigation: 1 | 2026-09-30T10:12:42+00:00 | Vulnerability · Source |
| CVE-2025-22868 | redhat_vex | golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws | fixed: 2199 known affected: 93 known not affected: 8426 | 2026-09-30T10:12:36+00:00 | Vulnerability · Source |
| CVE-2025-12816 | redhat_vex | node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications | fixed: 460 known affected: 37 known not affected: 2169 | 2026-09-30T10:12:26+00:00 | Vulnerability · Source |
| CVE-2026-102278 | redhat_vex | brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns | fixed: 19 known affected: 7 known not affected: 9 | 2026-09-30T10:12:22+00:00 | Vulnerability · Source |
| CVE-2026-97689 | redhat_vex | urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser | fixed: 11 known not affected: 14 | 2026-09-30T10:12:20+00:00 | Vulnerability · Source |
| CVE-2026-97687 | redhat_vex | urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override | fixed: 11 known not affected: 14 | 2026-09-30T10:12:15+00:00 | Vulnerability · Source |
| CVE-2026-92948 | redhat_vex | vm2: vm2 3.9.6 through 3.11.5 Sandbox Escape via node:test | known affected: 5 | 2026-09-30T10:12:09+00:00 | Vulnerability · Source |
| CVE-2026-56852 | redhat_vex | golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input | fixed: 758 known affected: 97 known not affected: 7986 under investigation: 237 | 2026-09-30T10:11:53+00:00 | Vulnerability · Source |
| CVE-2026-56862 | redhat_vex | crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages | fixed: 5504 known affected: 281 known not affected: 2785 | 2026-09-30T10:11:00+00:00 | Vulnerability · Source |
| CVE-2026-56853 | redhat_vex | net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service | fixed: 2385 known affected: 278 known not affected: 1819 | 2026-09-30T10:09:48+00:00 | Vulnerability · Source |
| CVE-2026-42504 | redhat_vex | mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header | fixed: 4007 known affected: 108 known not affected: 5745 | 2026-09-30T10:09:19+00:00 | Vulnerability · Source |
| CVE-2026-42499 | redhat_vex | net/mail: golang: net/mail: Denial of Service via pathological email address parsing | fixed: 1897 known affected: 95 known not affected: 8869 | 2026-09-30T10:09:10+00:00 | Vulnerability · Source |
| CVE-2026-39820 | redhat_vex | net/mail: golang: Go net/mail: Denial of Service via crafted email inputs | fixed: 1439 known affected: 85 known not affected: 7831 | 2026-09-30T10:08:55+00:00 | Vulnerability · Source |
| CVE-2026-73078 | redhat_vex | vim: Vim: Arbitrary Code Execution via Crafted Netrw Menu Entries | fixed: 237 known affected: 6 known not affected: 204 | 2026-09-30T10:07:20+00:00 | Vulnerability · Source |
| CVE-2026-73077 | redhat_vex | vim: Vim: Arbitrary Code Execution via Insecure Shell Command Handling | fixed: 215 known not affected: 153 | 2026-09-30T10:07:18+00:00 | Vulnerability · Source |
| CVE-2026-73076 | redhat_vex | vim: Vim: Arbitrary command execution via crafted vimball | fixed: 237 known affected: 6 known not affected: 204 | 2026-09-30T10:07:15+00:00 | Vulnerability · Source |
| CVE-2026-73072 | redhat_vex | vim: Vim: Heap buffer overflow allows arbitrary code execution | fixed: 249 known affected: 6 known not affected: 192 | 2026-09-30T10:07:06+00:00 | Vulnerability · Source |
| CVE-2026-73066 | redhat_vex | tesseract: Tesseract: Heap out-of-bounds write via crafted .traineddata | fixed: 263 | 2026-09-30T10:07:00+00:00 | Vulnerability · Source |
| CVE-2026-69244 | redhat_vex | aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses | fixed: 263 known affected: 60 known not affected: 1756 | 2026-09-30T10:06:54+00:00 | Vulnerability · Source |
| CVE-2026-57456 | redhat_vex | vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion | fixed: 265 known not affected: 273 | 2026-09-30T10:06:45+00:00 | Vulnerability · Source |
| CVE-2026-52858 | redhat_vex | vim: Vim: Arbitrary code execution via Python omni-completion | fixed: 273 known not affected: 273 | 2026-09-30T10:06:34+00:00 | Vulnerability · Source |
| CVE-2026-47167 | redhat_vex | vim: Vim: Arbitrary code execution via crafted step-definition patterns | fixed: 273 known not affected: 273 | 2026-09-30T10:06:29+00:00 | Vulnerability · Source |
| CVE-2026-47162 | redhat_vex | vim: Vim: Arbitrary Code Execution via crafted directory names | fixed: 273 known not affected: 273 | 2026-09-30T10:06:24+00:00 | Vulnerability · Source |
| CVE-2026-44432 | redhat_vex | urllib3: urllib3: Denial of Service due to excessive HTTP response decompression | fixed: 209 known affected: 47 known not affected: 1540 | 2026-09-30T10:06:19+00:00 | Vulnerability · Source |
| CVE-2026-11940 | redhat_vex | python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory | fixed: 727 known affected: 147 known not affected: 73 | 2026-09-30T10:06:16+00:00 | Vulnerability · Source |
| CVE-2026-11824 | redhat_vex | sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5 | fixed: 1034 known affected: 109 known not affected: 63 | 2026-09-30T10:06:09+00:00 | Vulnerability · Source |
| CVE-2026-11822 | redhat_vex | sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data | fixed: 1037 known affected: 110 known not affected: 57 | 2026-09-30T10:06:09+00:00 | Vulnerability · Source |
| CVE-2024-24786 | redhat_vex | golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON | fixed: 2152 known affected: 112 known not affected: 11937 under investigation: 57 | 2026-09-30T10:02:03+00:00 | Vulnerability · Source |
| CVE-2022-41715 | redhat_vex | golang: regexp/syntax: limit memory used by parsing regexps | fixed: 2994 known affected: 91 known not affected: 2693 under investigation: 1 | 2026-09-30T10:02:00+00:00 | Vulnerability · Source |
| CVE-2022-30631 | redhat_vex | golang: compress/gzip: stack exhaustion in Reader.Read | fixed: 4253 known affected: 91 known not affected: 2159 | 2026-09-30T10:01:40+00:00 | Vulnerability · Source |
| CVE-2026-42502 | redhat_vex | golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering | fixed: 782 known affected: 244 known not affected: 5429 | 2026-09-30T10:00:33+00:00 | Vulnerability · Source |
| CVE-2026-97992 | redhat_vex | kernel: vhost-vdpa: protect config_ctx from being freed under the config callback | known affected: 234 known not affected: 42 | 2026-09-30T09:49:43+00:00 | Vulnerability · Source |
| CVE-2026-97500 | redhat_vex | kernel: wifi: rtw89: phy: check length before parsing PHY status IE | known affected: 234 known not affected: 42 | 2026-09-30T09:49:36+00:00 | Vulnerability · Source |
| CVE-2026-97499 | redhat_vex | kernel: coresight: perf: Retrieve path and source from event data | known not affected: 276 | 2026-09-30T09:49:22+00:00 | Vulnerability · Source |
| CVE-2023-39325 | redhat_vex | golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) | fixed: 6046 known affected: 223 known not affected: 30360 | 2026-09-30T09:49:08+00:00 | Vulnerability · Source |
| CVE-2026-46595 | redhat_vex | golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation | fixed: 301 known affected: 60 known not affected: 2040 | 2026-09-30T09:48:47+00:00 | Vulnerability · Source |
| CVE-2026-39829 | redhat_vex | golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters | fixed: 1213 known affected: 101 known not affected: 10235 | 2026-09-30T09:43:27+00:00 | Vulnerability · Source |
| CVE-2026-34986 | redhat_vex | github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object | fixed: 2952 known affected: 151 known not affected: 16580 | 2026-09-30T09:43:02+00:00 | Vulnerability · Source |
| CVE-2021-20329 | redhat_vex | mongo-go-driver: specific cstrings input may not be properly validated | fixed: 252 known affected: 69 known not affected: 3782 | 2026-09-30T09:28:38+00:00 | Vulnerability · Source |
| CVE-2026-93130 | redhat_vex | kernel: platform/x86: dell-wmi-base: Fix resource leak on module load failure | known affected: 185 known not affected: 91 | 2026-09-30T09:18:08+00:00 | Vulnerability · Source |
| CVE-2026-102822 | redhat_vex | russh: russh: Denial of Service via improper MAC negotiation with block ciphers | known not affected: 1 | 2026-09-30T09:18:07+00:00 | Vulnerability · Source |
| CVE-2026-92524 | redhat_vex | kernel: irqchip/gic-v3-its: Prevent leak in its_vpe_irq_domain_alloc() | known affected: 234 known not affected: 42 | 2026-09-30T09:18:06+00:00 | Vulnerability · Source |
| CVE-2026-102820 | redhat_vex | pageant: pageant: Denial of Service via untrusted response length in shared memory | known not affected: 1 | 2026-09-30T09:14:48+00:00 | Vulnerability · Source |
| CVE-2026-97990 | redhat_vex | kernel: vdpa_sim_net: check TX pull result before RX copy | known affected: 185 known not affected: 91 | 2026-09-30T09:14:45+00:00 | Vulnerability · Source |