{"metadata": {"count": 316351, "page": 1, "per_page": 100}, "data": [{"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:25:28+00:00", "cve": "CVE-2022-48808", "id": "CVE-2022-48808", "initial_release_date": "2022-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: net: dsa: fix panic when DSA master device unbinds on shutdown", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-48808.json", "version": "3", "product_status": {"known_not_affected": 199}, "imported": 1793870728.0, "vulnerability_id": "CVE-2022-48808", "vulnerability_url": "/vuln/CVE-2022-48808"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:25:25+00:00", "cve": "CVE-2022-48805", "id": "CVE-2022-48805", "initial_release_date": "2022-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-48805.json", "version": "3", "product_status": {"known_affected": 76, "known_not_affected": 123}, "imported": 1793870725.0, "vulnerability_id": "CVE-2022-48805", "vulnerability_url": "/vuln/CVE-2022-48805"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:25:23+00:00", "cve": "CVE-2022-48804", "id": "CVE-2022-48804", "initial_release_date": "2022-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: vt_ioctl: fix array_index_nospec in vt_setactivate", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-48804.json", "version": "3", "product_status": {"fixed": 771, "known_affected": 50, "known_not_affected": 22}, "imported": 1793870723.0, "vulnerability_id": "CVE-2022-48804", "vulnerability_url": "/vuln/CVE-2022-48804"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:25:19+00:00", "cve": "CVE-2022-48802", "id": "CVE-2022-48802", "initial_release_date": "2022-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: fs/proc: task_mmu.c: don't read mapcount for migration entry", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-48802.json", "version": "3", "product_status": {"known_affected": 199}, "imported": 1793870719.0, "vulnerability_id": "CVE-2022-48802", "vulnerability_url": "/vuln/CVE-2022-48802"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:25:18+00:00", "cve": "CVE-2022-48799", "id": "CVE-2022-48799", "initial_release_date": "2022-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: perf: Fix list corruption in perf_cgroup_switch()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-48799.json", "version": "3", "product_status": {"fixed": 459, "known_affected": 199, "known_not_affected": 3}, "imported": 1793870718.0, "vulnerability_id": "CVE-2022-48799", "vulnerability_url": "/vuln/CVE-2022-48799"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:25:15+00:00", "cve": "CVE-2022-48797", "id": "CVE-2022-48797", "initial_release_date": "2022-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: mm: don't try to NUMA-migrate COW pages that have other uses", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-48797.json", "version": "3", "product_status": {"known_affected": 151, "known_not_affected": 48}, "imported": 1793870715.0, "vulnerability_id": "CVE-2022-48797", "vulnerability_url": "/vuln/CVE-2022-48797"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:25:12+00:00", "cve": "CVE-2022-48796", "id": "CVE-2022-48796", "initial_release_date": "2022-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: iommu: Fix potential use-after-free during probe", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-48796.json", "version": "3", "product_status": {"fixed": 307, "known_affected": 76, "known_not_affected": 126}, "imported": 1793870712.0, "vulnerability_id": "CVE-2022-48796", "vulnerability_url": "/vuln/CVE-2022-48796"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:25:09+00:00", "cve": "CVE-2022-48795", "id": "CVE-2022-48795", "initial_release_date": "2022-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: parisc: Fix data TLB miss in sba_unmap_sg", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-48795.json", "version": "3", "product_status": {"known_not_affected": 199}, "imported": 1793870709.0, "vulnerability_id": "CVE-2022-48795", "vulnerability_url": "/vuln/CVE-2022-48795"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:25:08+00:00", "cve": "CVE-2022-48794", "id": "CVE-2022-48794", "initial_release_date": "2022-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: net: ieee802154: at86rf230: Stop leaking skb's", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-48794.json", "version": "3", "product_status": {"known_not_affected": 199}, "imported": 1793870708.0, "vulnerability_id": "CVE-2022-48794", "vulnerability_url": "/vuln/CVE-2022-48794"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:25:07+00:00", "cve": "CVE-2022-48793", "id": "CVE-2022-48793", "initial_release_date": "2022-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: KVM: x86: nSVM: fix potential NULL derefernce on nested migration", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-48793.json", "version": "3", "product_status": {"fixed": 143, "known_affected": 157, "known_not_affected": 45}, "imported": 1793870707.0, "vulnerability_id": "CVE-2022-48793", "vulnerability_url": "/vuln/CVE-2022-48793"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:25:03+00:00", "cve": "CVE-2022-48792", "id": "CVE-2022-48792", "initial_release_date": "2022-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-48792.json", "version": "3", "product_status": {"known_affected": 42, "known_not_affected": 157}, "imported": 1793870703.0, "vulnerability_id": "CVE-2022-48792", "vulnerability_url": "/vuln/CVE-2022-48792"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:24:59+00:00", "cve": "CVE-2022-48791", "id": "CVE-2022-48791", "initial_release_date": "2022-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: scsi: pm8001: Fix use-after-free for aborted TMF sas_task", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-48791.json", "version": "3", "product_status": {"known_affected": 42, "known_not_affected": 157}, "imported": 1793870699.0, "vulnerability_id": "CVE-2022-48791", "vulnerability_url": "/vuln/CVE-2022-48791"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:24:55+00:00", "cve": "CVE-2022-48790", "id": "CVE-2022-48790", "initial_release_date": "2022-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: nvme: fix a possible use-after-free in controller reset during load", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-48790.json", "version": "3", "product_status": {"known_affected": 76, "known_not_affected": 123}, "imported": 1793870695.0, "vulnerability_id": "CVE-2022-48790", "vulnerability_url": "/vuln/CVE-2022-48790"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:24:54+00:00", "cve": "CVE-2022-48789", "id": "CVE-2022-48789", "initial_release_date": "2022-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: nvme-tcp: fix possible use-after-free in transport error_recovery work", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-48789.json", "version": "3", "product_status": {"known_affected": 48, "known_not_affected": 151}, "imported": 1793870694.0, "vulnerability_id": "CVE-2022-48789", "vulnerability_url": "/vuln/CVE-2022-48789"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:24:50+00:00", "cve": "CVE-2022-48788", "id": "CVE-2022-48788", "initial_release_date": "2022-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: nvme-rdma: fix possible use-after-free in transport error_recovery work", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-48788.json", "version": "3", "product_status": {"known_affected": 76, "known_not_affected": 123}, "imported": 1793870690.0, "vulnerability_id": "CVE-2022-48788", "vulnerability_url": "/vuln/CVE-2022-48788"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:24:49+00:00", "cve": "CVE-2022-48787", "id": "CVE-2022-48787", "initial_release_date": "2022-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: iwlwifi: fix use-after-free", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-48787.json", "version": "3", "product_status": {"known_affected": 167, "known_not_affected": 32}, "imported": 1793870689.0, "vulnerability_id": "CVE-2022-48787", "vulnerability_url": "/vuln/CVE-2022-48787"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:24:48+00:00", "cve": "CVE-2022-48786", "id": "CVE-2022-48786", "initial_release_date": "2022-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: vsock: remove vsock from connected table when connect is interrupted by a signal", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-48786.json", "version": "3", "product_status": {"fixed": 596, "known_affected": 66, "known_not_affected": 14}, "imported": 1793870688.0, "vulnerability_id": "CVE-2022-48786", "vulnerability_url": "/vuln/CVE-2022-48786"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:24:43+00:00", "cve": "CVE-2022-48785", "id": "CVE-2022-48785", "initial_release_date": "2022-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: ipv6: mcast: use rcu-safe version of ipv6_get_lladdr()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-48785.json", "version": "3", "product_status": {"fixed": 196, "known_affected": 42, "known_not_affected": 48}, "imported": 1793870683.0, "vulnerability_id": "CVE-2022-48785", "vulnerability_url": "/vuln/CVE-2022-48785"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:24:41+00:00", "cve": "CVE-2022-48784", "id": "CVE-2022-48784", "initial_release_date": "2022-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: cfg80211: fix race in netlink owner interface destruction", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-48784.json", "version": "3", "product_status": {"known_affected": 199}, "imported": 1793870681.0, "vulnerability_id": "CVE-2022-48784", "vulnerability_url": "/vuln/CVE-2022-48784"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:24:37+00:00", "cve": "CVE-2022-48783", "id": "CVE-2022-48783", "initial_release_date": "2022-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: net: dsa: lantiq_gswip: fix use after free in gswip_remove()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-48783.json", "version": "3", "product_status": {"known_affected": 199}, "imported": 1793870677.0, "vulnerability_id": "CVE-2022-48783", "vulnerability_url": "/vuln/CVE-2022-48783"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:24:35+00:00", "cve": "CVE-2022-48782", "id": "CVE-2022-48782", "initial_release_date": "2022-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: mctp: fix use after free", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-48782.json", "version": "3", "product_status": {"known_not_affected": 199}, "imported": 1793870675.0, "vulnerability_id": "CVE-2022-48782", "vulnerability_url": "/vuln/CVE-2022-48782"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:24:32+00:00", "cve": "CVE-2022-48781", "id": "CVE-2022-48781", "initial_release_date": "2022-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: crypto: af_alg - get rid of alg_memory_allocated", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-48781.json", "version": "3", "product_status": {"known_affected": 151, "known_not_affected": 48}, "imported": 1793870672.0, "vulnerability_id": "CVE-2022-48781", "vulnerability_url": "/vuln/CVE-2022-48781"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:24:30+00:00", "cve": "CVE-2022-48780", "id": "CVE-2022-48780", "initial_release_date": "2022-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: net/smc: Avoid overwriting the copies of clcsock callback functions", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-48780.json", "version": "3", "product_status": {"known_affected": 199}, "imported": 1793870670.0, "vulnerability_id": "CVE-2022-48780", "vulnerability_url": "/vuln/CVE-2022-48780"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:24:27+00:00", "cve": "CVE-2022-48779", "id": "CVE-2022-48779", "initial_release_date": "2022-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: net: mscc: ocelot: fix use-after-free in ocelot_vlan_del()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-48779.json", "version": "3", "product_status": {"known_not_affected": 199}, "imported": 1793870667.0, "vulnerability_id": "CVE-2022-48779", "vulnerability_url": "/vuln/CVE-2022-48779"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:24:26+00:00", "cve": "CVE-2022-48778", "id": "CVE-2022-48778", "initial_release_date": "2022-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: mtd: rawnand: gpmi: don't leak PM reference in error path", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-48778.json", "version": "3", "product_status": {"known_affected": 199}, "imported": 1793870666.0, "vulnerability_id": "CVE-2022-48778", "vulnerability_url": "/vuln/CVE-2022-48778"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:24:23+00:00", "cve": "CVE-2022-48775", "id": "CVE-2022-48775", "initial_release_date": "2022-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-48775.json", "version": "3", "product_status": {"known_affected": 42, "known_not_affected": 157}, "imported": 1793870663.0, "vulnerability_id": "CVE-2022-48775", "vulnerability_url": "/vuln/CVE-2022-48775"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:24:20+00:00", "cve": "CVE-2022-48774", "id": "CVE-2022-48774", "initial_release_date": "2022-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: dmaengine: ptdma: Fix the error handling path in pt_core_init()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-48774.json", "version": "3", "product_status": {"known_not_affected": 199}, "imported": 1793870660.0, "vulnerability_id": "CVE-2022-48774", "vulnerability_url": "/vuln/CVE-2022-48774"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:24:17+00:00", "cve": "CVE-2022-48773", "id": "CVE-2022-48773", "initial_release_date": "2022-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-48773.json", "version": "3", "product_status": {"fixed": 707, "known_affected": 151}, "imported": 1793870657.0, "vulnerability_id": "CVE-2022-48773", "vulnerability_url": "/vuln/CVE-2022-48773"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:24:16+00:00", "cve": "CVE-2022-48771", "id": "CVE-2022-48771", "initial_release_date": "2022-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/vmwgfx: Fix stale file descriptors on failed usercopy", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-48771.json", "version": "3", "product_status": {"fixed": 120, "known_affected": 42, "known_not_affected": 125}, "imported": 1793870656.0, "vulnerability_id": "CVE-2022-48771", "vulnerability_url": "/vuln/CVE-2022-48771"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:24:13+00:00", "cve": "CVE-2022-48765", "id": "CVE-2022-48765", "initial_release_date": "2022-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: KVM: LAPIC: Also cancel preemption timer during SET_LAPIC", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-48765.json", "version": "3", "product_status": {"fixed": 286, "known_affected": 42, "known_not_affected": 38}, "imported": 1793870653.0, "vulnerability_id": "CVE-2022-48765", "vulnerability_url": "/vuln/CVE-2022-48765"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:24:11+00:00", "cve": "CVE-2022-48751", "id": "CVE-2022-48751", "initial_release_date": "2022-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: net/smc: Transitional solution for clcsock race issue", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-48751.json", "version": "3", "product_status": {"known_affected": 157, "known_not_affected": 42}, "imported": 1793870651.0, "vulnerability_id": "CVE-2022-48751", "vulnerability_url": "/vuln/CVE-2022-48751"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:24:09+00:00", "cve": "CVE-2022-48744", "id": "CVE-2022-48744", "initial_release_date": "2022-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: net/mlx5e: Avoid field-overflowing memcpy()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-48744.json", "version": "3", "product_status": {"known_affected": 185, "known_not_affected": 14}, "imported": 1793870649.0, "vulnerability_id": "CVE-2022-48744", "vulnerability_url": "/vuln/CVE-2022-48744"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:24:08+00:00", "cve": "CVE-2022-48742", "id": "CVE-2022-48742", "initial_release_date": "2022-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-48742.json", "version": "3", "product_status": {"known_affected": 42, "known_not_affected": 157}, "imported": 1793870648.0, "vulnerability_id": "CVE-2022-48742", "vulnerability_url": "/vuln/CVE-2022-48742"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:23:26+00:00", "cve": "CVE-2022-23518", "id": "CVE-2022-23518", "initial_release_date": "2022-12-13T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "rubygem-rails-html-sanitizer: Improper neutralization of data URIs leading to Cross site scripting", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-23518.json", "version": "3", "product_status": {"fixed": 2, "known_affected": 6, "known_not_affected": 1936}, "imported": 1793870606.0, "vulnerability_id": "CVE-2022-23518", "vulnerability_url": "/vuln/CVE-2022-23518"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:23:23+00:00", "cve": "CVE-2022-23517", "id": "CVE-2022-23517", "initial_release_date": "2022-12-13T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "rubygem-rails-html-sanitizer: Inefficient Regular Expression leading to denial of service", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-23517.json", "version": "3", "product_status": {"fixed": 2, "known_affected": 7, "known_not_affected": 1936}, "imported": 1793870603.0, "vulnerability_id": "CVE-2022-23517", "vulnerability_url": "/vuln/CVE-2022-23517"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:23:20+00:00", "cve": "CVE-2022-23514", "id": "CVE-2022-23514", "initial_release_date": "2022-12-13T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "rubygem-loofah: inefficient regular expression leading to denial of service", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-23514.json", "version": "3", "product_status": {"fixed": 2, "known_affected": 7, "known_not_affected": 1936}, "imported": 1793870600.0, "vulnerability_id": "CVE-2022-23514", "vulnerability_url": "/vuln/CVE-2022-23514"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:23:20+00:00", "cve": "CVE-2022-23516", "id": "CVE-2022-23516", "initial_release_date": "2022-12-13T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "rubygem-loofah: Uncontrolled Recursion leading to denial of service", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-23516.json", "version": "3", "product_status": {"fixed": 2, "known_affected": 6, "known_not_affected": 1936}, "imported": 1793870600.0, "vulnerability_id": "CVE-2022-23516", "vulnerability_url": "/vuln/CVE-2022-23516"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:23:18+00:00", "cve": "CVE-2022-23515", "id": "CVE-2022-23515", "initial_release_date": "2022-12-13T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "rubygem-loofah: Improper neutralization of data URIs leading to Cross Site Scripting", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-23515.json", "version": "3", "product_status": {"fixed": 2, "known_affected": 7, "known_not_affected": 1936}, "imported": 1793870598.0, "vulnerability_id": "CVE-2022-23515", "vulnerability_url": "/vuln/CVE-2022-23515"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:23:13+00:00", "cve": "CVE-2022-23476", "id": "CVE-2022-23476", "initial_release_date": "2022-12-08T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "rubygem-nokogiri: Denial of service", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-23476.json", "version": "3", "product_status": {"known_affected": 4, "known_not_affected": 18}, "imported": 1793870593.0, "vulnerability_id": "CVE-2022-23476", "vulnerability_url": "/vuln/CVE-2022-23476"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:23:10+00:00", "cve": "CVE-2022-23437", "id": "CVE-2022-23437", "initial_release_date": "2022-01-24T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "xerces-j2: infinite loop when handling specially crafted XML document payloads", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-23437.json", "version": "3", "product_status": {"fixed": 6, "known_affected": 21, "known_not_affected": 2340}, "imported": 1793870590.0, "vulnerability_id": "CVE-2022-23437", "vulnerability_url": "/vuln/CVE-2022-23437"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:23:06+00:00", "cve": "CVE-2022-23308", "id": "CVE-2022-23308", "initial_release_date": "2022-02-20T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "libxml2: Use-after-free of ID and IDREF attributes", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-23308.json", "version": "3", "product_status": {"fixed": 180, "known_affected": 10, "known_not_affected": 4}, "imported": 1793870586.0, "vulnerability_id": "CVE-2022-23308", "vulnerability_url": "/vuln/CVE-2022-23308"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:23:04+00:00", "cve": "CVE-2022-23304", "id": "CVE-2022-23304", "initial_release_date": "2022-01-17T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "wpa_supplicant: EAP-pwd side-channel attacks as a result of cache access patterns", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-23304.json", "version": "3", "product_status": {"known_affected": 2, "known_not_affected": 6}, "imported": 1793870584.0, "vulnerability_id": "CVE-2022-23304", "vulnerability_url": "/vuln/CVE-2022-23304"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:23:01+00:00", "cve": "CVE-2022-23303", "id": "CVE-2022-23303", "initial_release_date": "2022-01-17T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "wpa_supplicant: SAE side channel attacks as a result of cache access patterns", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-23303.json", "version": "3", "product_status": {"fixed": 13, "known_affected": 2, "known_not_affected": 4}, "imported": 1793870581.0, "vulnerability_id": "CVE-2022-23303", "vulnerability_url": "/vuln/CVE-2022-23303"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:22:58+00:00", "cve": "CVE-2022-23302", "id": "CVE-2022-23302", "initial_release_date": "2022-01-18T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "log4j: Remote code execution in Log4j 1.x when application is configured to use JMSSink", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-23302.json", "version": "3", "product_status": {"fixed": 513, "known_affected": 9, "known_not_affected": 2292}, "imported": 1793870578.0, "vulnerability_id": "CVE-2022-23302", "vulnerability_url": "/vuln/CVE-2022-23302"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:22:55+00:00", "cve": "CVE-2022-23222", "id": "CVE-2022-23222", "initial_release_date": "2022-01-14T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: local privileges escalation in kernel/bpf/verifier.c", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-23222.json", "version": "3", "product_status": {"fixed": 399, "known_affected": 137, "known_not_affected": 15}, "imported": 1793870575.0, "vulnerability_id": "CVE-2022-23222", "vulnerability_url": "/vuln/CVE-2022-23222"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:22:52+00:00", "cve": "CVE-2022-23219", "id": "CVE-2022-23219", "initial_release_date": "2022-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "glibc: Stack-based buffer overflow in sunrpc clnt_create via a long pathname", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-23219.json", "version": "3", "product_status": {"fixed": 882, "known_affected": 21, "known_not_affected": 216}, "imported": 1793870572.0, "vulnerability_id": "CVE-2022-23219", "vulnerability_url": "/vuln/CVE-2022-23219"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:22:50+00:00", "cve": "CVE-2022-23218", "id": "CVE-2022-23218", "initial_release_date": "2022-01-12T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "glibc: Stack-based buffer overflow in svcunix_create via long pathnames", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-23218.json", "version": "3", "product_status": {"fixed": 882, "known_affected": 21, "known_not_affected": 216}, "imported": 1793870570.0, "vulnerability_id": "CVE-2022-23218", "vulnerability_url": "/vuln/CVE-2022-23218"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:22:48+00:00", "cve": "CVE-2022-23181", "id": "CVE-2022-23181", "initial_release_date": "2022-01-26T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "tomcat: local privilege escalation vulnerability", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-23181.json", "version": "3", "product_status": {"fixed": 38, "known_affected": 33, "known_not_affected": 34}, "imported": 1793870568.0, "vulnerability_id": "CVE-2022-23181", "vulnerability_url": "/vuln/CVE-2022-23181"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:22:46+00:00", "cve": "CVE-2022-23035", "id": "CVE-2022-23035", "initial_release_date": "2022-01-25T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "xen: Insufficient cleanup of passed-through device IRQs (XSA-395)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-23035.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1793870566.0, "vulnerability_id": "CVE-2022-23035", "vulnerability_url": "/vuln/CVE-2022-23035"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:22:44+00:00", "cve": "CVE-2022-23034", "id": "CVE-2022-23034", "initial_release_date": "2022-01-25T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "xen: A PV guest could DoS Xen while unmapping a grant (XSA-394)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-23034.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1793870564.0, "vulnerability_id": "CVE-2022-23034", "vulnerability_url": "/vuln/CVE-2022-23034"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:22:43+00:00", "cve": "CVE-2022-22980", "id": "CVE-2022-22980", "initial_release_date": "2022-06-20T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "MongoDB: SpEL in query methods allow code injection", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-22980.json", "version": "3", "product_status": {"known_affected": 1, "known_not_affected": 1}, "imported": 1793870563.0, "vulnerability_id": "CVE-2022-22980", "vulnerability_url": "/vuln/CVE-2022-22980"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:22:40+00:00", "cve": "CVE-2022-23033", "id": "CVE-2022-23033", "initial_release_date": "2022-01-25T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "xen: arm: guest_physmap_remove_page not removing the p2m mappings (XSA-393)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-23033.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1793870560.0, "vulnerability_id": "CVE-2022-23033", "vulnerability_url": "/vuln/CVE-2022-23033"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:22:36+00:00", "cve": "CVE-2022-22978", "id": "CVE-2022-22978", "initial_release_date": "2022-05-16T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "springframework: Authorization Bypass in RegexRequestMatcher", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-22978.json", "version": "3", "product_status": {"fixed": 3, "known_affected": 11, "known_not_affected": 10}, "imported": 1793870556.0, "vulnerability_id": "CVE-2022-22978", "vulnerability_url": "/vuln/CVE-2022-22978"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:22:34+00:00", "cve": "CVE-2022-22971", "id": "CVE-2022-22971", "initial_release_date": "2022-05-11T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "springframework: DoS with STOMP over WebSocket", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-22971.json", "version": "3", "product_status": {"fixed": 3, "known_affected": 10, "known_not_affected": 10}, "imported": 1793870554.0, "vulnerability_id": "CVE-2022-22971", "vulnerability_url": "/vuln/CVE-2022-22971"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:22:32+00:00", "cve": "CVE-2022-22976", "id": "CVE-2022-22976", "initial_release_date": "2022-05-17T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "springframework: BCrypt skips salt rounds for work factor of 31", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-22976.json", "version": "3", "product_status": {"fixed": 3, "known_affected": 12, "known_not_affected": 14}, "imported": 1793870552.0, "vulnerability_id": "CVE-2022-22976", "vulnerability_url": "/vuln/CVE-2022-22976"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:22:27+00:00", "cve": "CVE-2022-22970", "id": "CVE-2022-22970", "initial_release_date": "2022-05-11T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "springframework: DoS via data binding to multipartFile or servlet part", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-22970.json", "version": "3", "product_status": {"fixed": 3, "known_affected": 10, "known_not_affected": 10}, "imported": 1793870547.0, "vulnerability_id": "CVE-2022-22970", "vulnerability_url": "/vuln/CVE-2022-22970"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:22:25+00:00", "cve": "CVE-2022-22950", "id": "CVE-2022-22950", "initial_release_date": "2022-03-28T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "spring-expression: Denial of service via specially crafted SpEL expression", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-22950.json", "version": "3", "product_status": {"fixed": 5, "known_affected": 11, "known_not_affected": 49}, "imported": 1793870545.0, "vulnerability_id": "CVE-2022-22950", "vulnerability_url": "/vuln/CVE-2022-22950"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:22:22+00:00", "cve": "CVE-2022-22844", "id": "CVE-2022-22844", "initial_release_date": "2022-01-04T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "libtiff: out-of-bounds read in _TIFFmemcpy() in tif_unix.c", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-22844.json", "version": "3", "product_status": {"fixed": 84, "known_affected": 10, "known_not_affected": 9}, "imported": 1793870542.0, "vulnerability_id": "CVE-2022-22844", "vulnerability_url": "/vuln/CVE-2022-22844"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:22:21+00:00", "cve": "CVE-2022-22827", "id": "CVE-2022-22827", "initial_release_date": "2022-01-15T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "expat: Integer overflow in storeAtts in xmlparse.c", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-22827.json", "version": "3", "product_status": {"fixed": 209, "known_affected": 21, "known_not_affected": 32}, "imported": 1793870541.0, "vulnerability_id": "CVE-2022-22827", "vulnerability_url": "/vuln/CVE-2022-22827"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:22:17+00:00", "cve": "CVE-2022-22826", "id": "CVE-2022-22826", "initial_release_date": "2022-01-15T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "expat: Integer overflow in nextScaffoldPart in xmlparse.c", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-22826.json", "version": "3", "product_status": {"fixed": 209, "known_affected": 21, "known_not_affected": 32}, "imported": 1793870537.0, "vulnerability_id": "CVE-2022-22826", "vulnerability_url": "/vuln/CVE-2022-22826"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:22:14+00:00", "cve": "CVE-2022-22825", "id": "CVE-2022-22825", "initial_release_date": "2022-01-15T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "expat: Integer overflow in lookup in xmlparse.c", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-22825.json", "version": "3", "product_status": {"fixed": 209, "known_affected": 21, "known_not_affected": 32}, "imported": 1793870534.0, "vulnerability_id": "CVE-2022-22825", "vulnerability_url": "/vuln/CVE-2022-22825"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:22:12+00:00", "cve": "CVE-2022-22818", "id": "CVE-2022-22818", "initial_release_date": "2022-02-01T08:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "django: Possible XSS via '{% debug %}' template tag", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-22818.json", "version": "3", "product_status": {"fixed": 13, "known_affected": 20, "known_not_affected": 5311}, "imported": 1793870532.0, "vulnerability_id": "CVE-2022-22818", "vulnerability_url": "/vuln/CVE-2022-22818"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:22:10+00:00", "cve": "CVE-2022-22815", "id": "CVE-2022-22815", "initial_release_date": "2022-01-02T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "python-pillow: improperly initializes ImagePath.Path in path_getbbox() in path.c", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-22815.json", "version": "3", "product_status": {"fixed": 52, "known_affected": 8}, "imported": 1793870530.0, "vulnerability_id": "CVE-2022-22815", "vulnerability_url": "/vuln/CVE-2022-22815"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:22:06+00:00", "cve": "CVE-2022-22763", "id": "CVE-2022-22763", "initial_release_date": "2022-02-08T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Mozilla: Script Execution during invalid object state", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-22763.json", "version": "3", "product_status": {"fixed": 118, "known_affected": 4, "known_not_affected": 5}, "imported": 1793870526.0, "vulnerability_id": "CVE-2022-22763", "vulnerability_url": "/vuln/CVE-2022-22763"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:22:04+00:00", "cve": "CVE-2022-22761", "id": "CVE-2022-22761", "initial_release_date": "2022-02-08T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Mozilla: frame-ancestors Content Security Policy directive was not enforced for framed extension pages", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-22761.json", "version": "3", "product_status": {"fixed": 118, "known_affected": 4, "known_not_affected": 5}, "imported": 1793870524.0, "vulnerability_id": "CVE-2022-22761", "vulnerability_url": "/vuln/CVE-2022-22761"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:22:02+00:00", "cve": "CVE-2022-22760", "id": "CVE-2022-22760", "initial_release_date": "2022-02-08T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Mozilla: Cross-Origin responses could be distinguished between script and non-script content-types", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-22760.json", "version": "3", "product_status": {"fixed": 118, "known_affected": 4, "known_not_affected": 5}, "imported": 1793870522.0, "vulnerability_id": "CVE-2022-22760", "vulnerability_url": "/vuln/CVE-2022-22760"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:22:00+00:00", "cve": "CVE-2022-22759", "id": "CVE-2022-22759", "initial_release_date": "2022-02-08T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Mozilla: Sandboxed iframes could have executed script if the parent appended elements", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-22759.json", "version": "3", "product_status": {"fixed": 118, "known_affected": 4, "known_not_affected": 5}, "imported": 1793870520.0, "vulnerability_id": "CVE-2022-22759", "vulnerability_url": "/vuln/CVE-2022-22759"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:21:58+00:00", "cve": "CVE-2022-22748", "id": "CVE-2022-22748", "initial_release_date": "2022-01-11T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Mozilla: Spoofed origin on external protocol launch dialog", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-22748.json", "version": "3", "product_status": {"fixed": 118, "known_affected": 4}, "imported": 1793870518.0, "vulnerability_id": "CVE-2022-22748", "vulnerability_url": "/vuln/CVE-2022-22748"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:21:58+00:00", "cve": "CVE-2022-22756", "id": "CVE-2022-22756", "initial_release_date": "2022-02-08T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Mozilla: Drag and dropping an image could have resulted in the dropped object being an executable", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-22756.json", "version": "3", "product_status": {"fixed": 118, "known_affected": 4, "known_not_affected": 5}, "imported": 1793870518.0, "vulnerability_id": "CVE-2022-22756", "vulnerability_url": "/vuln/CVE-2022-22756"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:21:55+00:00", "cve": "CVE-2022-22744", "id": "CVE-2022-22744", "initial_release_date": "2022-01-11T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Mozilla: The 'Copy as curl' feature in DevTools did not fully escape website-controlled data, potentially leading to command injection", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-22744.json", "version": "3", "product_status": {"known_not_affected": 12}, "imported": 1793870515.0, "vulnerability_id": "CVE-2022-22744", "vulnerability_url": "/vuln/CVE-2022-22744"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:21:53+00:00", "cve": "CVE-2022-22745", "id": "CVE-2022-22745", "initial_release_date": "2022-01-11T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Mozilla: Leaking cross-origin URLs through securitypolicyviolation event", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-22745.json", "version": "3", "product_status": {"fixed": 118, "known_affected": 4}, "imported": 1793870513.0, "vulnerability_id": "CVE-2022-22745", "vulnerability_url": "/vuln/CVE-2022-22745"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:21:49+00:00", "cve": "CVE-2022-22721", "id": "CVE-2022-22721", "initial_release_date": "2022-03-14T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "httpd: core: Possible buffer overflow with very large or unlimited LimitXMLRequestBody", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-22721.json", "version": "3", "product_status": {"fixed": 224, "known_affected": 22, "known_not_affected": 105}, "imported": 1793870509.0, "vulnerability_id": "CVE-2022-22721", "vulnerability_url": "/vuln/CVE-2022-22721"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:21:46+00:00", "cve": "CVE-2022-22719", "id": "CVE-2022-22719", "initial_release_date": "2022-03-14T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "httpd: mod_lua: Use of uninitialized value of in r:parsebody", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-22719.json", "version": "3", "product_status": {"fixed": 196, "known_affected": 16, "known_not_affected": 7}, "imported": 1793870506.0, "vulnerability_id": "CVE-2022-22719", "vulnerability_url": "/vuln/CVE-2022-22719"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:21:45+00:00", "cve": "CVE-2022-22662", "id": "CVE-2022-22662", "initial_release_date": "2022-07-05T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "webkitgtk: Cookie management issue leading to sensitive user information disclosure", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-22662.json", "version": "3", "product_status": {"fixed": 105, "known_affected": 9, "known_not_affected": 75}, "imported": 1793870505.0, "vulnerability_id": "CVE-2022-22662", "vulnerability_url": "/vuln/CVE-2022-22662"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:21:43+00:00", "cve": "CVE-2022-22637", "id": "CVE-2022-22637", "initial_release_date": "2022-04-08T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "webkitgtk: logic issue was addressed with improved state management", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-22637.json", "version": "3", "product_status": {"fixed": 59, "known_affected": 9, "known_not_affected": 5}, "imported": 1793870503.0, "vulnerability_id": "CVE-2022-22637", "vulnerability_url": "/vuln/CVE-2022-22637"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:21:40+00:00", "cve": "CVE-2022-22628", "id": "CVE-2022-22628", "initial_release_date": "2022-04-08T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "webkitgtk: Use-after-free leading to arbitrary code execution", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-22628.json", "version": "3", "product_status": {"fixed": 105, "known_affected": 9, "known_not_affected": 75}, "imported": 1793870500.0, "vulnerability_id": "CVE-2022-22628", "vulnerability_url": "/vuln/CVE-2022-22628"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:21:39+00:00", "cve": "CVE-2022-22629", "id": "CVE-2022-22629", "initial_release_date": "2022-04-08T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "webkitgtk: Buffer overflow leading to arbitrary code execution", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-22629.json", "version": "3", "product_status": {"fixed": 105, "known_affected": 9, "known_not_affected": 75}, "imported": 1793870499.0, "vulnerability_id": "CVE-2022-22629", "vulnerability_url": "/vuln/CVE-2022-22629"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:21:35+00:00", "cve": "CVE-2022-22624", "id": "CVE-2022-22624", "initial_release_date": "2022-04-08T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "webkitgtk: Use-after-free leading to arbitrary code execution", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-22624.json", "version": "3", "product_status": {"fixed": 105, "known_affected": 9, "known_not_affected": 75}, "imported": 1793870495.0, "vulnerability_id": "CVE-2022-22624", "vulnerability_url": "/vuln/CVE-2022-22624"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:21:33+00:00", "cve": "CVE-2022-22594", "id": "CVE-2022-22594", "initial_release_date": "2022-01-21T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "webkitgtk: A malicious website may exfiltrate data cross-origin", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-22594.json", "version": "3", "product_status": {"fixed": 59, "known_affected": 9, "known_not_affected": 5}, "imported": 1793870493.0, "vulnerability_id": "CVE-2022-22594", "vulnerability_url": "/vuln/CVE-2022-22594"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:21:31+00:00", "cve": "CVE-2022-22592", "id": "CVE-2022-22592", "initial_release_date": "2022-02-09T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-22592.json", "version": "3", "product_status": {"fixed": 59, "known_affected": 9, "known_not_affected": 5}, "imported": 1793870491.0, "vulnerability_id": "CVE-2022-22592", "vulnerability_url": "/vuln/CVE-2022-22592"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:21:29+00:00", "cve": "CVE-2022-22590", "id": "CVE-2022-22590", "initial_release_date": "2022-02-09T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-22590.json", "version": "3", "product_status": {"fixed": 59, "known_affected": 9, "known_not_affected": 5}, "imported": 1793870489.0, "vulnerability_id": "CVE-2022-22590", "vulnerability_url": "/vuln/CVE-2022-22590"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:21:25+00:00", "cve": "CVE-2022-22589", "id": "CVE-2022-22589", "initial_release_date": "2022-02-09T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "webkitgtk: Processing a maliciously crafted mail message may lead to running arbitrary javascript", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-22589.json", "version": "3", "product_status": {"fixed": 59, "known_affected": 9, "known_not_affected": 5}, "imported": 1793870485.0, "vulnerability_id": "CVE-2022-22589", "vulnerability_url": "/vuln/CVE-2022-22589"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:21:22+00:00", "cve": "CVE-2022-22577", "id": "CVE-2022-22577", "initial_release_date": "2022-04-27T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "rubygem-actionpack: Possible cross-site scripting vulnerability in Action Pack", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-22577.json", "version": "3", "product_status": {"fixed": 2, "known_affected": 2, "known_not_affected": 1936}, "imported": 1793870482.0, "vulnerability_id": "CVE-2022-22577", "vulnerability_url": "/vuln/CVE-2022-22577"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:21:21+00:00", "cve": "CVE-2022-22576", "id": "CVE-2022-22576", "initial_release_date": "2022-04-27T06:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "curl: OAUTH2 bearer bypass in connection re-use", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-22576.json", "version": "3", "product_status": {"fixed": 119, "known_affected": 8, "known_not_affected": 9}, "imported": 1793870481.0, "vulnerability_id": "CVE-2022-22576", "vulnerability_url": "/vuln/CVE-2022-22576"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:21:18+00:00", "cve": "CVE-2022-21724", "id": "CVE-2022-21724", "initial_release_date": "2022-02-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "jdbc-postgresql: Unchecked Class Instantiation when providing Plugin Classes", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-21724.json", "version": "3", "product_status": {"fixed": 4, "known_affected": 11, "known_not_affected": 177}, "imported": 1793870478.0, "vulnerability_id": "CVE-2022-21724", "vulnerability_url": "/vuln/CVE-2022-21724"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:21:16+00:00", "cve": "CVE-2022-21713", "id": "CVE-2022-21713", "initial_release_date": "2022-02-08T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "grafana: IDOR vulnerability can lead to information disclosure", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-21713.json", "version": "3", "product_status": {"fixed": 18, "known_affected": 17, "known_not_affected": 3}, "imported": 1793870476.0, "vulnerability_id": "CVE-2022-21713", "vulnerability_url": "/vuln/CVE-2022-21713"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:21:12+00:00", "cve": "CVE-2022-21712", "id": "CVE-2022-21712", "initial_release_date": "2022-02-08T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "dev-python/twisted: secret exposure in cross-origin redirects", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-21712.json", "version": "3", "product_status": {"fixed": 21, "known_affected": 10}, "imported": 1793870472.0, "vulnerability_id": "CVE-2022-21712", "vulnerability_url": "/vuln/CVE-2022-21712"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:21:11+00:00", "cve": "CVE-2022-21703", "id": "CVE-2022-21703", "initial_release_date": "2022-02-08T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "grafana: CSRF vulnerability can lead to privilege escalation", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-21703.json", "version": "3", "product_status": {"fixed": 18, "known_affected": 17, "known_not_affected": 3}, "imported": 1793870471.0, "vulnerability_id": "CVE-2022-21703", "vulnerability_url": "/vuln/CVE-2022-21703"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:21:08+00:00", "cve": "CVE-2022-21702", "id": "CVE-2022-21702", "initial_release_date": "2022-02-08T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "grafana: XSS vulnerability in data source handling", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-21702.json", "version": "3", "product_status": {"fixed": 18, "known_affected": 16, "known_not_affected": 4}, "imported": 1793870468.0, "vulnerability_id": "CVE-2022-21702", "vulnerability_url": "/vuln/CVE-2022-21702"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:21:07+00:00", "cve": "CVE-2022-21682", "id": "CVE-2022-21682", "initial_release_date": "2022-01-12T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "flatpak: flatpak-builder --mirror-screenshots-url can access files outside the build directory", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-21682.json", "version": "3", "product_status": {"fixed": 13, "known_not_affected": 11}, "imported": 1793870467.0, "vulnerability_id": "CVE-2022-21682", "vulnerability_url": "/vuln/CVE-2022-21682"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:21:04+00:00", "cve": "CVE-2022-21681", "id": "CVE-2022-21681", "initial_release_date": "2022-01-14T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "marked: regular expression inline.reflinkSearch may lead Denial of Service", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-21681.json", "version": "3", "product_status": {"fixed": 3, "known_affected": 24, "known_not_affected": 99}, "imported": 1793870464.0, "vulnerability_id": "CVE-2022-21681", "vulnerability_url": "/vuln/CVE-2022-21681"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:21:02+00:00", "cve": "CVE-2022-21680", "id": "CVE-2022-21680", "initial_release_date": "2022-01-14T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "marked: regular expression block.def may lead Denial of Service", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-21680.json", "version": "3", "product_status": {"fixed": 3, "known_affected": 24, "known_not_affected": 99}, "imported": 1793870462.0, "vulnerability_id": "CVE-2022-21680", "vulnerability_url": "/vuln/CVE-2022-21680"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:21:00+00:00", "cve": "CVE-2022-21658", "id": "CVE-2022-21658", "initial_release_date": "2022-01-20T11:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "rust: Race condition in remove_dir_all leading to removal of files outside of the directory being removed", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-21658.json", "version": "3", "product_status": {"fixed": 73, "known_affected": 5, "known_not_affected": 19}, "imported": 1793870460.0, "vulnerability_id": "CVE-2022-21658", "vulnerability_url": "/vuln/CVE-2022-21658"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:20:59+00:00", "cve": "CVE-2022-21641", "id": "CVE-2022-21641", "initial_release_date": "2022-10-18T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-21641.json", "version": "3", "product_status": {"fixed": 202, "known_not_affected": 123}, "imported": 1793870459.0, "vulnerability_id": "CVE-2022-21641", "vulnerability_url": "/vuln/CVE-2022-21641"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:20:57+00:00", "cve": "CVE-2022-21640", "id": "CVE-2022-21640", "initial_release_date": "2022-10-18T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-21640.json", "version": "3", "product_status": {"fixed": 206, "known_not_affected": 123}, "imported": 1793870457.0, "vulnerability_id": "CVE-2022-21640", "vulnerability_url": "/vuln/CVE-2022-21640"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:20:56+00:00", "cve": "CVE-2022-21638", "id": "CVE-2022-21638", "initial_release_date": "2022-10-18T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-21638.json", "version": "3", "product_status": {"fixed": 202, "known_not_affected": 123}, "imported": 1793870456.0, "vulnerability_id": "CVE-2022-21638", "vulnerability_url": "/vuln/CVE-2022-21638"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:20:52+00:00", "cve": "CVE-2022-21637", "id": "CVE-2022-21637", "initial_release_date": "2022-10-18T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mysql: InnoDB unspecified vulnerability (CPU Oct 2022)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-21637.json", "version": "3", "product_status": {"fixed": 206, "known_not_affected": 123}, "imported": 1793870452.0, "vulnerability_id": "CVE-2022-21637", "vulnerability_url": "/vuln/CVE-2022-21637"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:20:49+00:00", "cve": "CVE-2022-21633", "id": "CVE-2022-21633", "initial_release_date": "2022-10-18T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mysql: Server: Replication unspecified vulnerability (CPU Oct 2022)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-21633.json", "version": "3", "product_status": {"fixed": 206, "known_not_affected": 123}, "imported": 1793870449.0, "vulnerability_id": "CVE-2022-21633", "vulnerability_url": "/vuln/CVE-2022-21633"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:20:49+00:00", "cve": "CVE-2022-21635", "id": "CVE-2022-21635", "initial_release_date": "2022-10-18T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mysql: InnoDB unspecified vulnerability (CPU Oct 2022)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-21635.json", "version": "3", "product_status": {"fixed": 202, "known_not_affected": 123}, "imported": 1793870449.0, "vulnerability_id": "CVE-2022-21635", "vulnerability_url": "/vuln/CVE-2022-21635"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-11-05T09:20:46+00:00", "cve": "CVE-2022-21632", "id": "CVE-2022-21632", "initial_release_date": "2022-10-18T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mysql: Server: Security: Privileges unspecified vulnerability (CPU Oct 2022)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-21632.json", "version": "3", "product_status": {"fixed": 206, "known_not_affected": 123}, "imported": 1793870446.0, "vulnerability_id": "CVE-2022-21632", "vulnerability_url": "/vuln/CVE-2022-21632"}]}