VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
305870 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-39832 | redhat_vex | golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions | fixed: 1030 known affected: 67 known not affected: 3819 | 2026-10-08T22:35:24+00:00 | Vulnerability · Source |
| CVE-2026-39829 | redhat_vex | golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters | fixed: 1253 known affected: 101 known not affected: 12436 | 2026-10-08T22:35:19+00:00 | Vulnerability · Source |
| CVE-2026-29181 | redhat_vex | github.com/open-telemetry/opentelemetry-go: OpenTelemetry-Go: Denial of Service via crafted multi-value baggage headers | fixed: 36 known affected: 12 known not affected: 414 under investigation: 1 | 2026-10-08T22:35:16+00:00 | Vulnerability · Source |
| CVE-2026-25679 | redhat_vex | net/url: Incorrect parsing of IPv6 host literals in net/url | fixed: 10151 known affected: 145 known not affected: 5779 under investigation: 1 | 2026-10-08T22:35:13+00:00 | Vulnerability · Source |
| CVE-2025-52565 | redhat_vex | runc: container escape with malicious config due to /dev/console mount and related races | fixed: 1229 known not affected: 2228 | 2026-10-08T22:35:04+00:00 | Vulnerability · Source |
| CVE-2025-31133 | redhat_vex | runc: container escape via 'masked path' abuse due to mount race conditions | fixed: 1217 known not affected: 2248 | 2026-10-08T22:35:03+00:00 | Vulnerability · Source |
| CVE-2020-9548 | redhat_vex | jackson-databind: Serialization gadgets in anteros-core | fixed: 2590 known affected: 13 known not affected: 18 | 2026-10-08T22:34:56+00:00 | Vulnerability · Source |
| CVE-2019-20330 | redhat_vex | jackson-databind: lacks certain net.sf.ehcache blocking | fixed: 228 known affected: 7 known not affected: 3 | 2026-10-08T22:34:52+00:00 | Vulnerability · Source |
| CVE-2026-33413 | redhat_vex | etcd: etcd: Authorization bypass allows information disclosure and denial of service | fixed: 23 known affected: 3 known not affected: 268 | 2026-10-08T22:32:32+00:00 | Vulnerability · Source |
| CVE-2026-32282 | redhat_vex | golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root | fixed: 1780 known affected: 191 known not affected: 2284 | 2026-10-08T22:32:24+00:00 | Vulnerability · Source |
| CVE-2025-68121 | redhat_vex | crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption | fixed: 8254 known affected: 187 known not affected: 9022 under investigation: 42 | 2026-10-08T22:32:14+00:00 | Vulnerability · Source |
| CVE-2026-64830 | redhat_vex | ffmpeg: FFmpeg: Arbitrary code execution via heap buffer overflow in VobSub subtitle demuxer. | fixed: 520 known affected: 37 known not affected: 1 | 2026-10-08T22:30:01+00:00 | Vulnerability · Source |
| CVE-2026-67320 | redhat_vex | axios: axios: Information disclosure via Prototype Pollution in Node HTTP adapter | fixed: 106 known affected: 22 known not affected: 958 | 2026-10-08T22:29:57+00:00 | Vulnerability · Source |
| CVE-2026-67314 | redhat_vex | axios: axios: Outbound Request Tampering via Prototype Pollution in Basic Auth | fixed: 69 known affected: 18 known not affected: 577 | 2026-10-08T22:29:56+00:00 | Vulnerability · Source |
| CVE-2026-67312 | redhat_vex | axios: axios: Denial of Service via uncontrolled recursion in form data processing | fixed: 15 known affected: 16 known not affected: 150 | 2026-10-08T22:29:30+00:00 | Vulnerability · Source |
| CVE-2026-67321 | redhat_vex | axios: axios: Denial of Service via object serialization bypass | fixed: 77 known affected: 15 known not affected: 661 | 2026-10-08T22:29:03+00:00 | Vulnerability · Source |
| CVE-2026-42507 | redhat_vex | net/textproto: golang: Golang net/textproto: Misleading error messages via input injection | fixed: 245 known affected: 381 known not affected: 182 | 2026-10-08T22:26:56+00:00 | Vulnerability · Source |
| CVE-2026-39826 | redhat_vex | html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping | fixed: 195 known affected: 351 known not affected: 187 | 2026-10-08T22:26:52+00:00 | Vulnerability · Source |
| CVE-2026-39823 | redhat_vex | html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content | fixed: 199 known affected: 360 known not affected: 196 | 2026-10-08T22:26:51+00:00 | Vulnerability · Source |
| CVE-2026-39825 | redhat_vex | net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls | fixed: 908 known affected: 331 known not affected: 323 | 2026-10-08T22:26:51+00:00 | Vulnerability · Source |
| CVE-2026-105825 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via crafted XMP profile | known affected: 14 | 2026-10-08T22:19:01+00:00 | Vulnerability · Source |
| CVE-2026-105824 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via crafted SVG file in RSVG decoder | known affected: 14 | 2026-10-08T22:18:53+00:00 | Vulnerability · Source |
| CVE-2026-105823 | redhat_vex | ImageMagick: ImageMagick: Security policy bypass via CUT encoder | known affected: 14 | 2026-10-08T22:18:50+00:00 | Vulnerability · Source |
| CVE-2026-105404 | redhat_vex | ImageMagick: ImageMagick: Code injection via PostScript coders | known affected: 14 | 2026-10-08T22:18:48+00:00 | Vulnerability · Source |
| CVE-2026-105403 | redhat_vex | ImageMagick: ImageMagick: Security policy bypass via crafted image | known affected: 14 | 2026-10-08T22:18:46+00:00 | Vulnerability · Source |
| CVE-2026-105402 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via crafted XMP profile | known affected: 14 | 2026-10-08T22:18:41+00:00 | Vulnerability · Source |
| CVE-2026-105399 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via missing limit check in MVG decoder | known affected: 14 | 2026-10-08T22:18:39+00:00 | Vulnerability · Source |
| CVE-2026-105398 | redhat_vex | ImageMagick: ImageMagick: Denial of Service via heap buffer overflow in GetVirtualPixels | known affected: 14 | 2026-10-08T22:18:36+00:00 | Vulnerability · Source |
| CVE-2026-98184 | redhat_vex | kernel: wifi: mwifiex: prevent authentication frame length truncation | known affected: 184 known not affected: 93 | 2026-10-08T22:18:34+00:00 | Vulnerability · Source |
| CVE-2026-44035 | redhat_vex | dcmtk: dcmtk: Denial of Service via uncontrolled recursion in DICOMDIR processing | known not affected: 1 | 2026-10-08T22:18:33+00:00 | Vulnerability · Source |
| CVE-2026-44036 | redhat_vex | dcmtk: dcmtk: Denial of Service via uncontrolled recursion during XML parsing | known not affected: 1 | 2026-10-08T22:18:33+00:00 | Vulnerability · Source |
| CVE-2026-107295 | redhat_vex | pydantic-ai-slim: pydantic-ai-slim: Unauthorized tool execution via missing Content-Type validation | known affected: 1 | 2026-10-08T22:16:30+00:00 | Vulnerability · Source |
| CVE-2026-107286 | redhat_vex | pydantic-ai: pydantic-ai: Denial of Service via unreleased concurrency slots in streaming requests | known affected: 5 | 2026-10-08T22:16:26+00:00 | Vulnerability · Source |
| CVE-2026-106235 | redhat_vex | chromium-browser: Use after free in WebAudio | known not affected: 1 | 2026-10-08T22:16:24+00:00 | Vulnerability · Source |
| CVE-2026-104848 | redhat_vex | tinypool: tinypool: arbitrary code execution via prototype pollution in worker options | known affected: 2 known not affected: 13 | 2026-10-08T22:16:23+00:00 | Vulnerability · Source |
| CVE-2026-102278 | redhat_vex | brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns | fixed: 108 known affected: 5 known not affected: 15 | 2026-10-08T22:16:21+00:00 | Vulnerability · Source |
| CVE-2026-66808 | redhat_vex | hypershift-addon-operator: Unsanitized hub ConfigMap data passed as CLI arguments to privileged install Job (Argument Injection) | fixed: 24 known not affected: 704 | 2026-10-08T22:16:11+00:00 | Vulnerability · Source |
| CVE-2026-66805 | redhat_vex | console: Stored DOM XSS via unescaped pod logs in document.write | fixed: 48 known not affected: 1752 | 2026-10-08T22:16:07+00:00 | Vulnerability · Source |
| CVE-2026-66800 | redhat_vex | cluster-backup-operator: cluster-backup-operator: CleanupAll triggers unguarded cluster-wide mass-delete via operator ServiceAccount | fixed: 24 known not affected: 1048 | 2026-10-08T22:16:04+00:00 | Vulnerability · Source |
| CVE-2026-66798 | redhat_vex | cluster-backup-operator: cluster-backup-operator: Restore.spec.hooks passed verbatim to Velero Restore — arbitrary command execution in restored pods | fixed: 24 known not affected: 1048 | 2026-10-08T22:16:00+00:00 | Vulnerability · Source |
| CVE-2026-62909 | redhat_vex | .NET: .NET Elevation of Privilege Vulnerability | fixed: 1483 known not affected: 35 | 2026-10-08T22:15:57+00:00 | Vulnerability · Source |
| CVE-2026-62901 | redhat_vex | .NET: .NET Denial of Service Vulnerability | fixed: 1483 known not affected: 35 | 2026-10-08T22:15:53+00:00 | Vulnerability · Source |
| CVE-2026-59886 | redhat_vex | pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values | fixed: 1337 known affected: 117 known not affected: 1738 | 2026-10-08T22:15:49+00:00 | Vulnerability · Source |
| CVE-2026-59885 | redhat_vex | pyasn1: python-pyasn1: pyasn1: Denial of Service via crafted ASN.1 OBJECT IDENTIFIER | fixed: 101 known affected: 100 known not affected: 1239 | 2026-10-08T22:15:47+00:00 | Vulnerability · Source |
| CVE-2026-50650 | redhat_vex | dotnet: .NET Framework: Privilege escalation via code injection | fixed: 1472 known not affected: 18 | 2026-10-08T22:15:43+00:00 | Vulnerability · Source |
| CVE-2026-50649 | redhat_vex | dotnet: .NET: Local code execution via deserialization of untrusted data | fixed: 1472 known not affected: 18 | 2026-10-08T22:15:38+00:00 | Vulnerability · Source |
| CVE-2026-50646 | redhat_vex | dotnet: .NET Framework: Local Code Execution via Protection Mechanism Failure | fixed: 1472 known not affected: 18 | 2026-10-08T22:15:34+00:00 | Vulnerability · Source |
| CVE-2026-47304 | redhat_vex | dotnet: .NET Security Feature Bypass Vulnerability | fixed: 1472 known not affected: 19 | 2026-10-08T22:15:32+00:00 | Vulnerability · Source |
| CVE-2026-46595 | redhat_vex | golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation | fixed: 327 known affected: 60 known not affected: 2276 | 2026-10-08T22:15:19+00:00 | Vulnerability · Source |
| CVE-2026-28780 | redhat_vex | Apache HTTP Server: mod_proxy_ajp: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow | fixed: 593 known affected: 15 known not affected: 178 | 2026-10-08T22:15:13+00:00 | Vulnerability · Source |