{"metadata": {"count": 286567, "page": 1, "per_page": 100}, "data": [{"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-05T00:10:31+00:00", "cve": "CVE-2025-61728", "id": "CVE-2025-61728", "initial_release_date": "2025-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-61728.json", "version": "3", "product_status": {"fixed": 6794, "known_affected": 111, "known_not_affected": 4103}, "imported": 1785888631.0, "vulnerability_id": "CVE-2025-61728", "vulnerability_url": "/vuln/CVE-2025-61728"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-05T00:10:24+00:00", "cve": "CVE-2025-58183", "id": "CVE-2025-58183", "initial_release_date": "2025-10-29T22:10:14.376000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: archive/tar: Unbounded allocation when parsing GNU sparse map", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-58183.json", "version": "3", "product_status": {"fixed": 8914, "known_affected": 129, "known_not_affected": 8332}, "imported": 1785888624.0, "vulnerability_id": "CVE-2025-58183", "vulnerability_url": "/vuln/CVE-2025-58183"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-05T00:10:18+00:00", "cve": "CVE-2025-22866", "id": "CVE-2025-22866", "initial_release_date": "2025-02-06T16:54:10.252000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "crypto/internal/nistec: golang: Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-22866.json", "version": "3", "product_status": {"fixed": 247, "known_affected": 408, "known_not_affected": 511}, "imported": 1785888618.0, "vulnerability_id": "CVE-2025-22866", "vulnerability_url": "/vuln/CVE-2025-22866"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-05T00:10:14+00:00", "cve": "CVE-2024-52798", "id": "CVE-2024-52798", "initial_release_date": "2024-12-05T22:45:42.774000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "path-to-regexp: path-to-regexp Unpatched `path-to-regexp` ReDoS in 0.1.x", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-52798.json", "version": "3", "product_status": {"fixed": 33, "known_affected": 60, "known_not_affected": 1161}, "imported": 1785888614.0, "vulnerability_id": "CVE-2024-52798", "vulnerability_url": "/vuln/CVE-2024-52798"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-05T00:10:11+00:00", "cve": "CVE-2024-45336", "id": "CVE-2024-45336", "initial_release_date": "2024-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: net/http: net/http: sensitive headers incorrectly sent after cross-domain redirect", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-45336.json", "version": "3", "product_status": {"fixed": 341, "known_affected": 528, "known_not_affected": 434}, "imported": 1785888611.0, "vulnerability_id": "CVE-2024-45336", "vulnerability_url": "/vuln/CVE-2024-45336"}, {"meta_source": "redhat_vex", "current_release_date": "2026-08-05T00:10:11+00:00", "cve": "CVE-2026-45705", "id": "CVE-2026-45705", "initial_release_date": "2026-08-04T23:16:31.543000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "opensips: OpenSIPS: Denial of Service via out-of-bounds read in multipart body parsing", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45705.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1785888611.0, "vulnerability_id": "CVE-2026-45705", "vulnerability_url": "/vuln/CVE-2026-45705"}, {"meta_source": "redhat_vex", "current_release_date": "2026-08-05T00:10:10+00:00", "cve": "CVE-2026-45809", "id": "CVE-2026-45809", "initial_release_date": "2026-08-04T23:30:03.111000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "opensips: OpenSIPS: Denial of Service due to stack buffer overflow", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45809.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1785888610.0, "vulnerability_id": "CVE-2026-45809", "vulnerability_url": "/vuln/CVE-2026-45809"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-05T00:06:41+00:00", "cve": "CVE-2026-34986", "id": "CVE-2026-34986", "initial_release_date": "2026-04-06T16:22:45.353000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34986.json", "version": "3", "product_status": {"fixed": 2397, "known_affected": 161, "known_not_affected": 11721, "under_investigation": 1}, "imported": 1785888401.0, "vulnerability_id": "CVE-2026-34986", "vulnerability_url": "/vuln/CVE-2026-34986"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-05T00:06:04+00:00", "cve": "CVE-2026-27136", "id": "CVE-2026-27136", "initial_release_date": "2026-05-22T15:01:22.111000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27136.json", "version": "3", "product_status": {"fixed": 456, "known_affected": 287, "known_not_affected": 2579}, "imported": 1785888364.0, "vulnerability_id": "CVE-2026-27136", "vulnerability_url": "/vuln/CVE-2026-27136"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-05T00:05:49+00:00", "cve": "CVE-2025-66506", "id": "CVE-2025-66506", "initial_release_date": "2025-12-04T22:04:41.637000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "github.com/sigstore/fulcio: Fulcio: Denial of Service via crafted OpenID Connect (OIDC) token", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-66506.json", "version": "3", "product_status": {"fixed": 321, "known_affected": 65, "known_not_affected": 1257}, "imported": 1785888349.0, "vulnerability_id": "CVE-2025-66506", "vulnerability_url": "/vuln/CVE-2025-66506"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-05T00:05:45+00:00", "cve": "CVE-2025-66418", "id": "CVE-2025-66418", "initial_release_date": "2025-12-05T16:02:15.271000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-66418.json", "version": "3", "product_status": {"fixed": 1941, "known_affected": 413, "known_not_affected": 2590, "under_investigation": 1}, "imported": 1785888345.0, "vulnerability_id": "CVE-2025-66418", "vulnerability_url": "/vuln/CVE-2025-66418"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-05T00:05:30+00:00", "cve": "CVE-2025-64756", "id": "CVE-2025-64756", "initial_release_date": "2025-11-17T17:29:08.029000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "glob: glob: Command Injection Vulnerability via Malicious Filenames", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-64756.json", "version": "3", "product_status": {"fixed": 171, "known_affected": 115, "known_not_affected": 1097}, "imported": 1785888330.0, "vulnerability_id": "CVE-2025-64756", "vulnerability_url": "/vuln/CVE-2025-64756"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-05T00:05:21+00:00", "cve": "CVE-2025-61729", "id": "CVE-2025-61729", "initial_release_date": "2025-12-02T18:54:10.166000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-61729.json", "version": "3", "product_status": {"fixed": 7763, "known_affected": 435, "known_not_affected": 4683, "under_investigation": 2}, "imported": 1785888321.0, "vulnerability_id": "CVE-2025-61729", "vulnerability_url": "/vuln/CVE-2025-61729"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-05T00:04:49+00:00", "cve": "CVE-2025-61726", "id": "CVE-2025-61726", "initial_release_date": "2025-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-61726.json", "version": "3", "product_status": {"fixed": 10415, "known_affected": 450, "known_not_affected": 16980}, "imported": 1785888289.0, "vulnerability_id": "CVE-2025-61726", "vulnerability_url": "/vuln/CVE-2025-61726"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-05T00:04:41+00:00", "cve": "CVE-2025-52881", "id": "CVE-2025-52881", "initial_release_date": "2025-11-05T09:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-52881.json", "version": "3", "product_status": {"fixed": 2380, "known_affected": 44, "known_not_affected": 4070}, "imported": 1785888281.0, "vulnerability_id": "CVE-2025-52881", "vulnerability_url": "/vuln/CVE-2025-52881"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-05T00:03:44+00:00", "cve": "CVE-2025-29786", "id": "CVE-2025-29786", "initial_release_date": "2025-03-17T13:15:32.836000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "github.com/expr-lang/expr: Memory Exhaustion in Expr Parser with Unrestricted Input", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-29786.json", "version": "3", "product_status": {"fixed": 71, "known_affected": 13, "known_not_affected": 49}, "imported": 1785888224.0, "vulnerability_id": "CVE-2025-29786", "vulnerability_url": "/vuln/CVE-2025-29786"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-05T00:03:29+00:00", "cve": "CVE-2025-22869", "id": "CVE-2025-22869", "initial_release_date": "2025-02-26T03:07:48.855000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-22869.json", "version": "3", "product_status": {"fixed": 2719, "known_affected": 54, "known_not_affected": 6259, "under_investigation": 1}, "imported": 1785888209.0, "vulnerability_id": "CVE-2025-22869", "vulnerability_url": "/vuln/CVE-2025-22869"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-05T00:03:19+00:00", "cve": "CVE-2025-22868", "id": "CVE-2025-22868", "initial_release_date": "2025-02-26T03:07:49.012000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-22868.json", "version": "3", "product_status": {"fixed": 1876, "known_affected": 94, "known_not_affected": 8426}, "imported": 1785888199.0, "vulnerability_id": "CVE-2025-22868", "vulnerability_url": "/vuln/CVE-2025-22868"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-05T00:03:13+00:00", "cve": "CVE-2025-12816", "id": "CVE-2025-12816", "initial_release_date": "2025-11-25T19:15:50.243000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-12816.json", "version": "3", "product_status": {"fixed": 460, "known_affected": 37, "known_not_affected": 2169}, "imported": 1785888193.0, "vulnerability_id": "CVE-2025-12816", "vulnerability_url": "/vuln/CVE-2025-12816"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-05T00:03:02+00:00", "cve": "CVE-2024-45338", "id": "CVE-2024-45338", "initial_release_date": "2024-12-18T20:38:22.660000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-45338.json", "version": "3", "product_status": {"fixed": 2392, "known_affected": 156, "known_not_affected": 16030}, "imported": 1785888182.0, "vulnerability_id": "CVE-2024-45338", "vulnerability_url": "/vuln/CVE-2024-45338"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-05T00:02:55+00:00", "cve": "CVE-2024-7246", "id": "CVE-2024-7246", "initial_release_date": "2024-08-06T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "grpc: client communicating with a HTTP/2 proxy can poison the HPACK table between the proxy and the backend", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-7246.json", "version": "3", "product_status": {"fixed": 46, "known_affected": 1, "known_not_affected": 4656}, "imported": 1785888175.0, "vulnerability_id": "CVE-2024-7246", "vulnerability_url": "/vuln/CVE-2024-7246"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-05T00:02:55+00:00", "cve": "CVE-2024-9266", "id": "CVE-2024-9266", "initial_release_date": "2024-10-03T19:15:05.027000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "express: URL redirection vulnerability", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-9266.json", "version": "3", "product_status": {"known_not_affected": 120}, "imported": 1785888175.0, "vulnerability_id": "CVE-2024-9266", "vulnerability_url": "/vuln/CVE-2024-9266"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:45:17+00:00", "cve": "CVE-2026-47059", "id": "CVE-2026-47059", "initial_release_date": "2026-07-21T20:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openjdk: OpenJDK: Enhance AWT ImagingLib (Oracle CPU 2026-07)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-47059.json", "version": "3", "product_status": {"fixed": 2768, "known_affected": 54}, "imported": 1785887117.0, "vulnerability_id": "CVE-2026-47059", "vulnerability_url": "/vuln/CVE-2026-47059"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T23:43:30+00:00", "cve": "CVE-2026-60147", "id": "CVE-2026-60147", "initial_release_date": "2026-07-21T20:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openjdk: OpenJDK: Improve certification checking (Oracle CPU 2026-07)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-60147.json", "version": "3", "product_status": {"fixed": 2768, "known_affected": 54}, "imported": 1785887010.0, "vulnerability_id": "CVE-2026-60147", "vulnerability_url": "/vuln/CVE-2026-60147"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T23:43:20+00:00", "cve": "CVE-2026-47027", "id": "CVE-2026-47027", "initial_release_date": "2026-07-21T20:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openjdk: OpenJDK: Enhance Jar file processing (Oracle CPU 2026-07)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-47027.json", "version": "3", "product_status": {"fixed": 2768, "known_affected": 54}, "imported": 1785887000.0, "vulnerability_id": "CVE-2026-47027", "vulnerability_url": "/vuln/CVE-2026-47027"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T23:43:10+00:00", "cve": "CVE-2026-47021", "id": "CVE-2026-47021", "initial_release_date": "2026-07-21T20:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openjdk: OpenJDK: Enhance XBM image support (Oracle CPU 2026-07)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-47021.json", "version": "3", "product_status": {"fixed": 2768, "known_affected": 54}, "imported": 1785886990.0, "vulnerability_id": "CVE-2026-47021", "vulnerability_url": "/vuln/CVE-2026-47021"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T23:43:06+00:00", "cve": "CVE-2026-46968", "id": "CVE-2026-46968", "initial_release_date": "2026-07-21T12:34:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openjdk: Enhance TLS certificate handling", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46968.json", "version": "3", "product_status": {"fixed": 2768, "known_affected": 54}, "imported": 1785886986.0, "vulnerability_id": "CVE-2026-46968", "vulnerability_url": "/vuln/CVE-2026-46968"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T23:42:58+00:00", "cve": "CVE-2026-46917", "id": "CVE-2026-46917", "initial_release_date": "2026-07-21T20:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openjdk: OpenJDK: Improve DTLS handshaking (Oracle CPU 2026-07)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46917.json", "version": "3", "product_status": {"fixed": 2125, "known_affected": 46, "known_not_affected": 66}, "imported": 1785886978.0, "vulnerability_id": "CVE-2026-46917", "vulnerability_url": "/vuln/CVE-2026-46917"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T23:42:54+00:00", "cve": "CVE-2026-47063", "id": "CVE-2026-47063", "initial_release_date": "2026-07-21T20:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openjdk: OpenJDK: Enhance Jar handling (Oracle CPU 2026-07)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-47063.json", "version": "3", "product_status": {"fixed": 2768, "known_affected": 55, "known_not_affected": 10}, "imported": 1785886974.0, "vulnerability_id": "CVE-2026-47063", "vulnerability_url": "/vuln/CVE-2026-47063"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:40:36+00:00", "cve": "CVE-2026-31460", "id": "CVE-2026-31460", "initial_release_date": "2026-04-22T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/amd/display: check if ext_caps is valid in BL setup", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-31460.json", "version": "3", "product_status": {"known_affected": 198, "known_not_affected": 76}, "imported": 1785886836.0, "vulnerability_id": "CVE-2026-31460", "vulnerability_url": "/vuln/CVE-2026-31460"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:40:36+00:00", "cve": "CVE-2026-43477", "id": "CVE-2026-43477", "initial_release_date": "2026-05-13T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/i915/vrr: Configure VRR timings after enabling TRANS_DDI_FUNC_CTL", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43477.json", "version": "3", "product_status": {"known_affected": 198, "known_not_affected": 76}, "imported": 1785886836.0, "vulnerability_id": "CVE-2026-43477", "vulnerability_url": "/vuln/CVE-2026-43477"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:40:32+00:00", "cve": "CVE-2026-43191", "id": "CVE-2026-43191", "initial_release_date": "2026-05-06T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/amd/display: Adjust PHY FSM transition to TX_EN-to-PLL_ON for TMDS on DCN35", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43191.json", "version": "3", "product_status": {"known_affected": 274}, "imported": 1785886832.0, "vulnerability_id": "CVE-2026-43191", "vulnerability_url": "/vuln/CVE-2026-43191"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:40:31+00:00", "cve": "CVE-2025-71294", "id": "CVE-2025-71294", "initial_release_date": "2025-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/amdgpu: fix NULL pointer issue buffer funcs", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-71294.json", "version": "3", "product_status": {"known_affected": 274}, "imported": 1785886831.0, "vulnerability_id": "CVE-2025-71294", "vulnerability_url": "/vuln/CVE-2025-71294"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:40:27+00:00", "cve": "CVE-2026-43444", "id": "CVE-2026-43444", "initial_release_date": "2026-05-08T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/amdkfd: Unreserve bo if queue update failed", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43444.json", "version": "3", "product_status": {"known_affected": 198, "known_not_affected": 76}, "imported": 1785886827.0, "vulnerability_id": "CVE-2026-43444", "vulnerability_url": "/vuln/CVE-2026-43444"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:40:27+00:00", "cve": "CVE-2026-43305", "id": "CVE-2026-43305", "initial_release_date": "2026-05-08T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/amd/display: Fix mismatched unlock for DMUB HW lock in HWSS fast path", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43305.json", "version": "3", "product_status": {"known_affected": 274}, "imported": 1785886827.0, "vulnerability_id": "CVE-2026-43305", "vulnerability_url": "/vuln/CVE-2026-43305"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:40:25+00:00", "cve": "CVE-2026-67294", "id": "CVE-2026-67294", "initial_release_date": "2026-08-01T12:22:17.731000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "FreeRDP: FreeRDP: Server certificate validation bypass via improper Extended Key Usage (EKU) validation", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-67294.json", "version": "3", "product_status": {"known_affected": 31}, "imported": 1785886825.0, "vulnerability_id": "CVE-2026-67294", "vulnerability_url": "/vuln/CVE-2026-67294"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:40:19+00:00", "cve": "CVE-2026-66401", "id": "CVE-2026-66401", "initial_release_date": "2026-08-01T12:22:18.101000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "FreeRDP: FreeRDP: Denial of Service via out-of-bounds read in UVC H.264 parser", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-66401.json", "version": "3", "product_status": {"known_affected": 31}, "imported": 1785886819.0, "vulnerability_id": "CVE-2026-66401", "vulnerability_url": "/vuln/CVE-2026-66401"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:40:15+00:00", "cve": "CVE-2026-67316", "id": "CVE-2026-67316", "initial_release_date": "2026-08-01T12:22:18.114000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "axios: axios: Prototype Pollution allows unauthorized data transmission and network redirection", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-67316.json", "version": "3", "product_status": {"known_affected": 46, "known_not_affected": 2, "under_investigation": 70}, "imported": 1785886815.0, "vulnerability_id": "CVE-2026-67316", "vulnerability_url": "/vuln/CVE-2026-67316"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:40:06+00:00", "cve": "CVE-2026-0861", "id": "CVE-2026-0861", "initial_release_date": "2026-01-14T21:01:11.037000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "glibc: Integer overflow in memalign leads to heap corruption", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-0861.json", "version": "3", "product_status": {"fixed": 1026, "known_affected": 1, "known_not_affected": 1243}, "imported": 1785886806.0, "vulnerability_id": "CVE-2026-0861", "vulnerability_url": "/vuln/CVE-2026-0861"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:39:58+00:00", "cve": "CVE-2022-4994", "id": "CVE-2022-4994", "initial_release_date": "2022-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: KVM: x86: wean fast IN from emulator_pio_in", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-4994.json", "version": "3", "product_status": {"known_affected": 170, "known_not_affected": 104}, "imported": 1785886798.0, "vulnerability_id": "CVE-2022-4994", "vulnerability_url": "/vuln/CVE-2022-4994"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:39:56+00:00", "cve": "CVE-2026-68744", "id": "CVE-2026-68744", "initial_release_date": "2026-08-03T07:39:44.003000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "sssd: sssd: NSS responder uninitialized heap disclosure in initgroups reply", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68744.json", "version": "3", "product_status": {"known_affected": 134, "known_not_affected": 31}, "imported": 1785886796.0, "vulnerability_id": "CVE-2026-68744", "vulnerability_url": "/vuln/CVE-2026-68744"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:39:51+00:00", "cve": "CVE-2026-45976", "id": "CVE-2026-45976", "initial_release_date": "2026-05-27T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/amdgpu: Fix memory leak in amdgpu_ras_init()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45976.json", "version": "3", "product_status": {"known_affected": 198, "known_not_affected": 76}, "imported": 1785886791.0, "vulnerability_id": "CVE-2026-45976", "vulnerability_url": "/vuln/CVE-2026-45976"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T23:39:48+00:00", "cve": "CVE-2026-50263", "id": "CVE-2026-50263", "initial_release_date": "2026-06-02T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free information disclosure in CreateSaverWindow()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50263.json", "version": "3", "product_status": {"fixed": 1021, "known_affected": 9}, "imported": 1785886788.0, "vulnerability_id": "CVE-2026-50263", "vulnerability_url": "/vuln/CVE-2026-50263"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T23:39:46+00:00", "cve": "CVE-2026-50260", "id": "CVE-2026-50260", "initial_release_date": "2026-06-02T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in FreeCounter()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50260.json", "version": "3", "product_status": {"fixed": 1021, "known_affected": 9}, "imported": 1785886786.0, "vulnerability_id": "CVE-2026-50260", "vulnerability_url": "/vuln/CVE-2026-50260"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T23:38:46+00:00", "cve": "CVE-2026-50261", "id": "CVE-2026-50261", "initial_release_date": "2026-06-02T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in SyncChangeCounter()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50261.json", "version": "3", "product_status": {"fixed": 1021, "known_affected": 9}, "imported": 1785886726.0, "vulnerability_id": "CVE-2026-50261", "vulnerability_url": "/vuln/CVE-2026-50261"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:38:43+00:00", "cve": "CVE-2024-21538", "id": "CVE-2024-21538", "initial_release_date": "2024-11-08T05:00:04.695000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "cross-spawn: regular expression denial of service", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-21538.json", "version": "3", "product_status": {"fixed": 139, "known_affected": 74, "known_not_affected": 2799}, "imported": 1785886723.0, "vulnerability_id": "CVE-2024-21538", "vulnerability_url": "/vuln/CVE-2024-21538"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:38:41+00:00", "cve": "CVE-2026-54787", "id": "CVE-2026-54787", "initial_release_date": "2026-07-31T21:58:14.156000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "github.com/sigstore/sigstore-go: sigstore-go: Signature bypass allows acceptance of bundles signed with expired keys", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54787.json", "version": "3", "product_status": {"fixed": 6, "known_affected": 2}, "imported": 1785886721.0, "vulnerability_id": "CVE-2026-54787", "vulnerability_url": "/vuln/CVE-2026-54787"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T23:38:36+00:00", "cve": "CVE-2026-50256", "id": "CVE-2026-50256", "initial_release_date": "2026-06-02T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libXfont2 name length mismatch", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50256.json", "version": "3", "product_status": {"fixed": 1021, "known_affected": 9}, "imported": 1785886716.0, "vulnerability_id": "CVE-2026-50256", "vulnerability_url": "/vuln/CVE-2026-50256"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T23:38:35+00:00", "cve": "CVE-2026-33810", "id": "CVE-2026-33810", "initial_release_date": "2026-04-08T01:06:56.546000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33810.json", "version": "3", "product_status": {"fixed": 131, "known_affected": 149, "known_not_affected": 1020}, "imported": 1785886715.0, "vulnerability_id": "CVE-2026-33810", "vulnerability_url": "/vuln/CVE-2026-33810"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T23:38:30+00:00", "cve": "CVE-2026-50259", "id": "CVE-2026-50259", "initial_release_date": "2026-06-02T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB SetMap request via mapWidths indexing", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50259.json", "version": "3", "product_status": {"fixed": 1021, "known_affected": 9}, "imported": 1785886710.0, "vulnerability_id": "CVE-2026-50259", "vulnerability_url": "/vuln/CVE-2026-50259"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T23:38:28+00:00", "cve": "CVE-2026-50257", "id": "CVE-2026-50257", "initial_release_date": "2026-06-02T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in miSyncDestroyFence()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50257.json", "version": "3", "product_status": {"fixed": 1021, "known_affected": 9}, "imported": 1785886708.0, "vulnerability_id": "CVE-2026-50257", "vulnerability_url": "/vuln/CVE-2026-50257"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T23:38:27+00:00", "cve": "CVE-2026-50258", "id": "CVE-2026-50258", "initial_release_date": "2026-06-02T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB key types due to unchecked shift levels", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50258.json", "version": "3", "product_status": {"fixed": 1021, "known_affected": 9}, "imported": 1785886707.0, "vulnerability_id": "CVE-2026-50258", "vulnerability_url": "/vuln/CVE-2026-50258"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T23:38:23+00:00", "cve": "CVE-2026-50262", "id": "CVE-2026-50262", "initial_release_date": "2026-06-02T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds read/write in GLX ChangeDrawableAttributes", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50262.json", "version": "3", "product_status": {"fixed": 1021, "known_affected": 9}, "imported": 1785886703.0, "vulnerability_id": "CVE-2026-50262", "vulnerability_url": "/vuln/CVE-2026-50262"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T23:35:37+00:00", "cve": "CVE-2026-25681", "id": "CVE-2026-25681", "initial_release_date": "2026-05-22T15:01:21.975000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25681.json", "version": "3", "product_status": {"fixed": 481, "known_affected": 337, "known_not_affected": 1842}, "imported": 1785886537.0, "vulnerability_id": "CVE-2026-25681", "vulnerability_url": "/vuln/CVE-2026-25681"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T23:35:05+00:00", "cve": "CVE-2026-25679", "id": "CVE-2026-25679", "initial_release_date": "2026-03-06T21:28:14.211000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "net/url: Incorrect parsing of IPv6 host literals in net/url", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25679.json", "version": "3", "product_status": {"fixed": 9169, "known_affected": 163, "known_not_affected": 4344, "under_investigation": 1}, "imported": 1785886505.0, "vulnerability_id": "CVE-2026-25679", "vulnerability_url": "/vuln/CVE-2026-25679"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T23:34:55+00:00", "cve": "CVE-2026-23745", "id": "CVE-2026-23745", "initial_release_date": "2026-01-16T22:00:08.769000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23745.json", "version": "3", "product_status": {"fixed": 53, "known_affected": 24, "known_not_affected": 664}, "imported": 1785886495.0, "vulnerability_id": "CVE-2026-23745", "vulnerability_url": "/vuln/CVE-2026-23745"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T23:34:46+00:00", "cve": "CVE-2026-30922", "id": "CVE-2026-30922", "initial_release_date": "2026-03-18T02:29:45.857000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-30922.json", "version": "3", "product_status": {"fixed": 1698, "known_affected": 26, "known_not_affected": 2358}, "imported": 1785886486.0, "vulnerability_id": "CVE-2026-30922", "vulnerability_url": "/vuln/CVE-2026-30922"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T23:34:46+00:00", "cve": "CVE-2025-66471", "id": "CVE-2025-66471", "initial_release_date": "2025-12-05T16:06:08.531000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "urllib3: urllib3 Streaming API improperly handles highly compressed data", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-66471.json", "version": "3", "product_status": {"fixed": 1956, "known_affected": 349, "known_not_affected": 3324, "under_investigation": 1}, "imported": 1785886486.0, "vulnerability_id": "CVE-2025-66471", "vulnerability_url": "/vuln/CVE-2025-66471"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:34:41+00:00", "cve": "CVE-2026-43298", "id": "CVE-2026-43298", "initial_release_date": "2026-05-08T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/amdgpu: Skip vcn poison irq release on VF", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43298.json", "version": "3", "product_status": {"known_affected": 274}, "imported": 1785886481.0, "vulnerability_id": "CVE-2026-43298", "vulnerability_url": "/vuln/CVE-2026-43298"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T23:34:38+00:00", "cve": "CVE-2025-59375", "id": "CVE-2025-59375", "initial_release_date": "2025-09-15T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "firefox: thunderbird: expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-59375.json", "version": "3", "product_status": {"fixed": 509, "known_affected": 13, "known_not_affected": 301}, "imported": 1785886478.0, "vulnerability_id": "CVE-2025-59375", "vulnerability_url": "/vuln/CVE-2025-59375"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:34:33+00:00", "cve": "CVE-2026-43367", "id": "CVE-2026-43367", "initial_release_date": "2026-05-08T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/amd: Fix a few more NULL pointer dereference in device cleanup", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43367.json", "version": "3", "product_status": {"known_affected": 274}, "imported": 1785886473.0, "vulnerability_id": "CVE-2026-43367", "vulnerability_url": "/vuln/CVE-2026-43367"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T23:34:31+00:00", "cve": "CVE-2026-32283", "id": "CVE-2026-32283", "initial_release_date": "2026-04-08T01:06:57.670000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32283.json", "version": "3", "product_status": {"fixed": 2508, "known_affected": 214, "known_not_affected": 1184, "under_investigation": 1}, "imported": 1785886471.0, "vulnerability_id": "CVE-2026-32283", "vulnerability_url": "/vuln/CVE-2026-32283"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T23:33:26+00:00", "cve": "CVE-2026-32280", "id": "CVE-2026-32280", "initial_release_date": "2026-04-08T01:06:58.595000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32280.json", "version": "3", "product_status": {"fixed": 3117, "known_affected": 171, "known_not_affected": 2919}, "imported": 1785886406.0, "vulnerability_id": "CVE-2026-32280", "vulnerability_url": "/vuln/CVE-2026-32280"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:33:16+00:00", "cve": "CVE-2026-18569", "id": "CVE-2026-18569", "initial_release_date": "2026-07-31T10:18:53+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "keycloak-services: keycloak-services: OIDC backchannel logout accepts unsigned forged logout tokens", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-18569.json", "version": "3", "product_status": {"known_affected": 3, "known_not_affected": 3}, "imported": 1785886396.0, "vulnerability_id": "CVE-2026-18569", "vulnerability_url": "/vuln/CVE-2026-18569"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:33:11+00:00", "cve": "CVE-2026-43369", "id": "CVE-2026-43369", "initial_release_date": "2026-05-08T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/amd: Fix NULL pointer dereference in device cleanup", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43369.json", "version": "3", "product_status": {"known_affected": 274}, "imported": 1785886391.0, "vulnerability_id": "CVE-2026-43369", "vulnerability_url": "/vuln/CVE-2026-43369"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:33:07+00:00", "cve": "CVE-2025-69420", "id": "CVE-2025-69420", "initial_release_date": "2025-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openssl: OpenSSL: Denial of Service via malformed TimeStamp Response", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-69420.json", "version": "3", "product_status": {"fixed": 107, "known_affected": 58, "known_not_affected": 5}, "imported": 1785886387.0, "vulnerability_id": "CVE-2025-69420", "vulnerability_url": "/vuln/CVE-2025-69420"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:33:06+00:00", "cve": "CVE-2025-68160", "id": "CVE-2025-68160", "initial_release_date": "2025-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-68160.json", "version": "3", "product_status": {"fixed": 107, "known_affected": 58, "known_not_affected": 5}, "imported": 1785886386.0, "vulnerability_id": "CVE-2025-68160", "vulnerability_url": "/vuln/CVE-2025-68160"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:33:04+00:00", "cve": "CVE-2025-69421", "id": "CVE-2025-69421", "initial_release_date": "2025-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-69421.json", "version": "3", "product_status": {"fixed": 107, "known_affected": 58, "known_not_affected": 5}, "imported": 1785886384.0, "vulnerability_id": "CVE-2025-69421", "vulnerability_url": "/vuln/CVE-2025-69421"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:33:01+00:00", "cve": "CVE-2025-15468", "id": "CVE-2025-15468", "initial_release_date": "2025-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15468.json", "version": "3", "product_status": {"fixed": 107, "known_affected": 58, "known_not_affected": 5}, "imported": 1785886381.0, "vulnerability_id": "CVE-2025-15468", "vulnerability_url": "/vuln/CVE-2025-15468"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:32:52+00:00", "cve": "CVE-2026-4438", "id": "CVE-2026-4438", "initial_release_date": "2026-03-20T19:59:06.064000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4438.json", "version": "3", "product_status": {"fixed": 2028, "known_affected": 237, "known_not_affected": 2, "under_investigation": 1}, "imported": 1785886372.0, "vulnerability_id": "CVE-2026-4438", "vulnerability_url": "/vuln/CVE-2026-4438"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T23:32:41+00:00", "cve": "CVE-2026-23490", "id": "CVE-2026-23490", "initial_release_date": "2026-01-16T19:03:36.442000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23490.json", "version": "3", "product_status": {"fixed": 1855, "known_affected": 25, "known_not_affected": 6295}, "imported": 1785886361.0, "vulnerability_id": "CVE-2026-23490", "vulnerability_url": "/vuln/CVE-2026-23490"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T23:32:41+00:00", "cve": "CVE-2025-65637", "id": "CVE-2025-65637", "initial_release_date": "2025-12-04T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "github.com/sirupsen/logrus: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-65637.json", "version": "3", "product_status": {"fixed": 2037, "known_affected": 270, "known_not_affected": 22245}, "imported": 1785886361.0, "vulnerability_id": "CVE-2025-65637", "vulnerability_url": "/vuln/CVE-2025-65637"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:32:40+00:00", "cve": "CVE-2025-15281", "id": "CVE-2025-15281", "initial_release_date": "2025-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15281.json", "version": "3", "product_status": {"fixed": 2043, "known_affected": 22, "known_not_affected": 1007}, "imported": 1785886360.0, "vulnerability_id": "CVE-2025-15281", "vulnerability_url": "/vuln/CVE-2025-15281"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:32:36+00:00", "cve": "CVE-2026-43131", "id": "CVE-2026-43131", "initial_release_date": "2026-05-06T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/amd/pm: Fix null pointer dereference issue", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43131.json", "version": "3", "product_status": {"known_affected": 274}, "imported": 1785886356.0, "vulnerability_id": "CVE-2026-43131", "vulnerability_url": "/vuln/CVE-2026-43131"}, {"meta_source": "redhat_vex", "aggregate_severity": "None", "current_release_date": "2026-08-04T23:32:36+00:00", "cve": "CVE-2026-64462", "id": "CVE-2026-64462", "initial_release_date": "2026-07-25T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: PCI: altera: Fix resource leaks on probe failure", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64462.json", "version": "3", "product_status": {"known_not_affected": 274}, "imported": 1785886356.0, "vulnerability_id": "CVE-2026-64462", "vulnerability_url": "/vuln/CVE-2026-64462"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:32:36+00:00", "cve": "CVE-2026-64457", "id": "CVE-2026-64457", "initial_release_date": "2026-07-25T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: virtio_pci: fix vq info pointer lookup via wrong index", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64457.json", "version": "3", "product_status": {"known_affected": 77, "known_not_affected": 198}, "imported": 1785886356.0, "vulnerability_id": "CVE-2026-64457", "vulnerability_url": "/vuln/CVE-2026-64457"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T23:32:33+00:00", "cve": "CVE-2026-32287", "id": "CVE-2026-32287", "initial_release_date": "2026-03-26T19:40:52.142000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "github.com/antchfx/xpath: github.com/antchfx/xpath: Denial of Service due to infinite loop via boolean XPath expressions", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32287.json", "version": "3", "product_status": {"fixed": 4, "known_affected": 23, "known_not_affected": 11}, "imported": 1785886353.0, "vulnerability_id": "CVE-2026-32287", "vulnerability_url": "/vuln/CVE-2026-32287"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:32:32+00:00", "cve": "CVE-2026-31571", "id": "CVE-2026-31571", "initial_release_date": "2026-04-24T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/i915: Unlink NV12 planes earlier", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-31571.json", "version": "3", "product_status": {"known_affected": 198, "known_not_affected": 76}, "imported": 1785886352.0, "vulnerability_id": "CVE-2026-31571", "vulnerability_url": "/vuln/CVE-2026-31571"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:32:31+00:00", "cve": "CVE-2026-45947", "id": "CVE-2026-45947", "initial_release_date": "2026-05-27T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/amdgpu: Fix memory leak in amdgpu_acpi_enumerate_xcc()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45947.json", "version": "3", "product_status": {"known_affected": 198, "known_not_affected": 76}, "imported": 1785886351.0, "vulnerability_id": "CVE-2026-45947", "vulnerability_url": "/vuln/CVE-2026-45947"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:32:27+00:00", "cve": "CVE-2026-45979", "id": "CVE-2026-45979", "initial_release_date": "2026-05-27T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/amdgpu: clean up the amdgpu_cs_parser_bos", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45979.json", "version": "3", "product_status": {"known_affected": 198, "known_not_affected": 76}, "imported": 1785886347.0, "vulnerability_id": "CVE-2026-45979", "vulnerability_url": "/vuln/CVE-2026-45979"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:32:27+00:00", "cve": "CVE-2026-23264", "id": "CVE-2026-23264", "initial_release_date": "2026-03-18T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: Revert \"drm/amd: Check if ASPM is enabled from PCIe subsystem\"", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23264.json", "version": "3", "product_status": {"known_affected": 246, "known_not_affected": 28}, "imported": 1785886347.0, "vulnerability_id": "CVE-2026-23264", "vulnerability_url": "/vuln/CVE-2026-23264"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:32:27+00:00", "cve": "CVE-2026-43243", "id": "CVE-2026-43243", "initial_release_date": "2026-05-06T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/amd/display: Add signal type check for dcn401 get_phyd32clk_src", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43243.json", "version": "3", "product_status": {"known_affected": 274}, "imported": 1785886347.0, "vulnerability_id": "CVE-2026-43243", "vulnerability_url": "/vuln/CVE-2026-43243"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:32:25+00:00", "cve": "CVE-2025-11143", "id": "CVE-2025-11143", "initial_release_date": "2025-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "org.eclipse.jetty/jetty-http: org.eclipse.jetty: Security bypass due to differential URI parsing", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-11143.json", "version": "3", "product_status": {"fixed": 2, "known_affected": 33, "known_not_affected": 2}, "imported": 1785886345.0, "vulnerability_id": "CVE-2025-11143", "vulnerability_url": "/vuln/CVE-2025-11143"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:32:22+00:00", "cve": "CVE-2026-23051", "id": "CVE-2026-23051", "initial_release_date": "2026-02-04T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/amdgpu: fix drm panic null pointer when driver not support atomic", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23051.json", "version": "3", "product_status": {"known_affected": 198, "known_not_affected": 76}, "imported": 1785886342.0, "vulnerability_id": "CVE-2026-23051", "vulnerability_url": "/vuln/CVE-2026-23051"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:32:22+00:00", "cve": "CVE-2026-43320", "id": "CVE-2026-43320", "initial_release_date": "2026-05-08T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/amd/display: Fix dsc eDP issue", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43320.json", "version": "3", "product_status": {"known_affected": 274}, "imported": 1785886342.0, "vulnerability_id": "CVE-2026-43320", "vulnerability_url": "/vuln/CVE-2026-43320"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:32:21+00:00", "cve": "CVE-2025-15469", "id": "CVE-2025-15469", "initial_release_date": "2025-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15469.json", "version": "3", "product_status": {"fixed": 107, "known_affected": 58, "known_not_affected": 5}, "imported": 1785886341.0, "vulnerability_id": "CVE-2025-15469", "vulnerability_url": "/vuln/CVE-2025-15469"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:32:21+00:00", "cve": "CVE-2026-22795", "id": "CVE-2026-22795", "initial_release_date": "2026-01-27T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-22795.json", "version": "3", "product_status": {"fixed": 107, "known_affected": 58, "known_not_affected": 5}, "imported": 1785886341.0, "vulnerability_id": "CVE-2026-22795", "vulnerability_url": "/vuln/CVE-2026-22795"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:32:18+00:00", "cve": "CVE-2025-69418", "id": "CVE-2025-69418", "initial_release_date": "2025-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-69418.json", "version": "3", "product_status": {"fixed": 107, "known_affected": 58, "known_not_affected": 5}, "imported": 1785886338.0, "vulnerability_id": "CVE-2025-69418", "vulnerability_url": "/vuln/CVE-2025-69418"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:32:17+00:00", "cve": "CVE-2026-22796", "id": "CVE-2026-22796", "initial_release_date": "2026-01-27T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-22796.json", "version": "3", "product_status": {"fixed": 107, "known_affected": 58, "known_not_affected": 5}, "imported": 1785886337.0, "vulnerability_id": "CVE-2026-22796", "vulnerability_url": "/vuln/CVE-2026-22796"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:32:15+00:00", "cve": "CVE-2025-66199", "id": "CVE-2025-66199", "initial_release_date": "2025-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-66199.json", "version": "3", "product_status": {"fixed": 107, "known_affected": 1, "known_not_affected": 62}, "imported": 1785886335.0, "vulnerability_id": "CVE-2025-66199", "vulnerability_url": "/vuln/CVE-2025-66199"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:32:12+00:00", "cve": "CVE-2026-23358", "id": "CVE-2026-23358", "initial_release_date": "2026-03-25T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/amdgpu: Fix error handling in slot reset", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23358.json", "version": "3", "product_status": {"known_affected": 198, "known_not_affected": 76}, "imported": 1785886332.0, "vulnerability_id": "CVE-2026-23358", "vulnerability_url": "/vuln/CVE-2026-23358"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:32:11+00:00", "cve": "CVE-2026-16405", "id": "CVE-2026-16405", "initial_release_date": "2026-07-21T12:38:17.436000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "firefox: thunderbird: Information disclosure in the Networking: WebSockets component", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-16405.json", "version": "3", "product_status": {"fixed": 82, "known_affected": 10}, "imported": 1785886331.0, "vulnerability_id": "CVE-2026-16405", "vulnerability_url": "/vuln/CVE-2026-16405"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:32:09+00:00", "cve": "CVE-2026-18739", "id": "CVE-2026-18739", "initial_release_date": "2026-08-03T18:46:11.280000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "popt-devel: popt-static: Off-by-one in poptStuffArgs", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-18739.json", "version": "3", "product_status": {"known_affected": 13, "under_investigation": 1}, "imported": 1785886329.0, "vulnerability_id": "CVE-2026-18739", "vulnerability_url": "/vuln/CVE-2026-18739"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:22:10+00:00", "cve": "CVE-2024-21534", "id": "CVE-2024-21534", "initial_release_date": "2024-10-11T05:00:01.824000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "jsonpath-plus: Remote Code Execution in jsonpath-plus via Improper Input Sanitization", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-21534.json", "version": "3", "product_status": {"fixed": 7, "known_affected": 2, "known_not_affected": 34}, "imported": 1785885730.0, "vulnerability_id": "CVE-2024-21534", "vulnerability_url": "/vuln/CVE-2024-21534"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:19:10+00:00", "cve": "CVE-2024-10492", "id": "CVE-2024-10492", "initial_release_date": "2024-11-21T16:56:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "keycloak-quarkus-server: Keycloak path trasversal", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-10492.json", "version": "3", "product_status": {"fixed": 16, "known_affected": 1, "known_not_affected": 2}, "imported": 1785885550.0, "vulnerability_id": "CVE-2024-10492", "vulnerability_url": "/vuln/CVE-2024-10492"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:18:58+00:00", "cve": "CVE-2023-53674", "id": "CVE-2023-53674", "initial_release_date": "2023-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: clk: Fix memory leak in devm_clk_notifier_register()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-53674.json", "version": "3", "product_status": {"fixed": 280, "known_affected": 22, "known_not_affected": 174}, "imported": 1785885538.0, "vulnerability_id": "CVE-2023-53674", "vulnerability_url": "/vuln/CVE-2023-53674"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:18:56+00:00", "cve": "CVE-2023-53683", "id": "CVE-2023-53683", "initial_release_date": "2023-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-53683.json", "version": "3", "product_status": {"known_affected": 14, "known_not_affected": 260}, "imported": 1785885536.0, "vulnerability_id": "CVE-2023-53683", "vulnerability_url": "/vuln/CVE-2023-53683"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:18:42+00:00", "cve": "CVE-2024-45341", "id": "CVE-2024-45341", "initial_release_date": "2024-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: crypto/x509: crypto/x509: usage of IPv6 zone IDs can bypass URI name constraints", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-45341.json", "version": "3", "product_status": {"fixed": 88, "known_affected": 791}, "imported": 1785885522.0, "vulnerability_id": "CVE-2024-45341", "vulnerability_url": "/vuln/CVE-2024-45341"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:18:38+00:00", "cve": "CVE-2023-5752", "id": "CVE-2023-5752", "initial_release_date": "2023-10-25T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "pip: Mercurial configuration injectable in repo revision when installing via pip", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-5752.json", "version": "3", "product_status": {"fixed": 8, "known_affected": 5, "known_not_affected": 296}, "imported": 1785885518.0, "vulnerability_id": "CVE-2023-5752", "vulnerability_url": "/vuln/CVE-2023-5752"}, {"meta_source": "redhat_vex", "aggregate_severity": "Low", "current_release_date": "2026-08-04T23:18:32+00:00", "cve": "CVE-2022-30629", "id": "CVE-2022-30629", "initial_release_date": "2022-06-02T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: crypto/tls: session tickets lack random ticket_age_add", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-30629.json", "version": "3", "product_status": {"fixed": 1376, "known_affected": 273, "known_not_affected": 363}, "imported": 1785885512.0, "vulnerability_id": "CVE-2022-30629", "vulnerability_url": "/vuln/CVE-2022-30629"}]}