{"metadata": {"count": 286565, "page": 1, "per_page": 100}, "data": [{"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T21:11:36+00:00", "cve": "CVE-2023-30841", "id": "CVE-2023-30841", "initial_release_date": "2023-04-27T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "baremetal-operator: plain-text username and hashed password readable by anyone having a cluster-wide read-access", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-30841.json", "version": "3", "product_status": {"fixed": 10, "known_affected": 2, "known_not_affected": 616}, "imported": 1785877896.0, "vulnerability_id": "CVE-2023-30841", "vulnerability_url": "/vuln/CVE-2023-30841"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T21:11:20+00:00", "cve": "CVE-2022-23526", "id": "CVE-2022-23526", "initial_release_date": "2022-12-15T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "helm: Denial of service through schema file", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-23526.json", "version": "3", "product_status": {"fixed": 13, "known_affected": 26, "known_not_affected": 1402}, "imported": 1785877880.0, "vulnerability_id": "CVE-2022-23526", "vulnerability_url": "/vuln/CVE-2022-23526"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T21:11:16+00:00", "cve": "CVE-2022-23525", "id": "CVE-2022-23525", "initial_release_date": "2022-12-15T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "helm: Denial of service through through repository index file", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-23525.json", "version": "3", "product_status": {"fixed": 152, "known_affected": 17, "known_not_affected": 1262}, "imported": 1785877876.0, "vulnerability_id": "CVE-2022-23525", "vulnerability_url": "/vuln/CVE-2022-23525"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T21:11:12+00:00", "cve": "CVE-2023-24532", "id": "CVE-2023-24532", "initial_release_date": "2023-03-08T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: crypto/internal/nistec: specific unreduced P-256 scalars produce incorrect results", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-24532.json", "version": "3", "product_status": {"fixed": 58, "known_affected": 24, "known_not_affected": 151}, "imported": 1785877872.0, "vulnerability_id": "CVE-2023-24532", "vulnerability_url": "/vuln/CVE-2023-24532"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T21:11:05+00:00", "cve": "CVE-2021-36157", "id": "CVE-2021-36157", "initial_release_date": "2021-07-22T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "cortex: Grafana Cortex directory traversal", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-36157.json", "version": "3", "product_status": {"fixed": 8, "known_affected": 3, "known_not_affected": 830}, "imported": 1785877865.0, "vulnerability_id": "CVE-2021-36157", "vulnerability_url": "/vuln/CVE-2021-36157"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T21:10:33+00:00", "cve": "CVE-2023-29406", "id": "CVE-2023-29406", "initial_release_date": "2023-07-11T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: net/http: insufficient sanitization of Host header", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-29406.json", "version": "3", "product_status": {"fixed": 1163, "known_affected": 54, "known_not_affected": 2621}, "imported": 1785877833.0, "vulnerability_id": "CVE-2023-29406", "vulnerability_url": "/vuln/CVE-2023-29406"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T21:10:25+00:00", "cve": "CVE-2023-29400", "id": "CVE-2023-29400", "initial_release_date": "2023-04-20T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: html/template: improper handling of empty HTML attributes", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-29400.json", "version": "3", "product_status": {"fixed": 1674, "known_affected": 43, "known_not_affected": 1086, "under_investigation": 2}, "imported": 1785877825.0, "vulnerability_id": "CVE-2023-29400", "vulnerability_url": "/vuln/CVE-2023-29400"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T21:10:17+00:00", "cve": "CVE-2023-24539", "id": "CVE-2023-24539", "initial_release_date": "2023-04-20T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: html/template: improper sanitization of CSS values", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-24539.json", "version": "3", "product_status": {"fixed": 1653, "known_affected": 48, "known_not_affected": 1106, "under_investigation": 1}, "imported": 1785877817.0, "vulnerability_id": "CVE-2023-24539", "vulnerability_url": "/vuln/CVE-2023-24539"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T21:10:08+00:00", "cve": "CVE-2023-24537", "id": "CVE-2023-24537", "initial_release_date": "2023-04-04T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: go/parser: Infinite loop in parsing", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-24537.json", "version": "3", "product_status": {"fixed": 2031, "known_affected": 81, "known_not_affected": 1021}, "imported": 1785877808.0, "vulnerability_id": "CVE-2023-24537", "vulnerability_url": "/vuln/CVE-2023-24537"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T21:10:02+00:00", "cve": "CVE-2023-24536", "id": "CVE-2023-24536", "initial_release_date": "2023-04-04T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-24536.json", "version": "3", "product_status": {"fixed": 1648, "known_affected": 101, "known_not_affected": 1097}, "imported": 1785877802.0, "vulnerability_id": "CVE-2023-24536", "vulnerability_url": "/vuln/CVE-2023-24536"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T21:09:58+00:00", "cve": "CVE-2023-24534", "id": "CVE-2023-24534", "initial_release_date": "2023-04-04T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: net/http, net/textproto: denial of service from excessive memory allocation", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-24534.json", "version": "3", "product_status": {"fixed": 2028, "known_affected": 108, "known_not_affected": 1248}, "imported": 1785877798.0, "vulnerability_id": "CVE-2023-24534", "vulnerability_url": "/vuln/CVE-2023-24534"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T21:09:56+00:00", "cve": "CVE-2022-39324", "id": "CVE-2022-39324", "initial_release_date": "2022-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "grafana: Spoofing of the originalUrl parameter of snapshots", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-39324.json", "version": "3", "product_status": {"fixed": 16, "known_affected": 32, "known_not_affected": 23}, "imported": 1785877796.0, "vulnerability_id": "CVE-2022-39324", "vulnerability_url": "/vuln/CVE-2022-39324"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T21:09:55+00:00", "cve": "CVE-2022-39307", "id": "CVE-2022-39307", "initial_release_date": "2022-11-08T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "grafana: User enumeration via forget password", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-39307.json", "version": "3", "product_status": {"fixed": 16, "known_affected": 30, "known_not_affected": 25}, "imported": 1785877795.0, "vulnerability_id": "CVE-2022-39307", "vulnerability_url": "/vuln/CVE-2022-39307"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T21:09:52+00:00", "cve": "CVE-2022-39306", "id": "CVE-2022-39306", "initial_release_date": "2022-11-08T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "grafana: email addresses and usernames cannot be trusted", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-39306.json", "version": "3", "product_status": {"fixed": 16, "known_affected": 29, "known_not_affected": 26}, "imported": 1785877792.0, "vulnerability_id": "CVE-2022-39306", "vulnerability_url": "/vuln/CVE-2022-39306"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T21:09:46+00:00", "cve": "CVE-2022-26148", "id": "CVE-2022-26148", "initial_release_date": "2022-03-21T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "grafana: An information leak issue was discovered in Grafana through 7.3.4, when integrated with Zabbix", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-26148.json", "version": "3", "product_status": {"fixed": 3, "known_affected": 12, "known_not_affected": 48}, "imported": 1785877786.0, "vulnerability_id": "CVE-2022-26148", "vulnerability_url": "/vuln/CVE-2022-26148"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T21:09:41+00:00", "cve": "CVE-2026-39828", "id": "CVE-2026-39828", "initial_release_date": "2026-05-22T02:31:26.883000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39828.json", "version": "3", "product_status": {"fixed": 387, "known_affected": 102, "known_not_affected": 1195}, "imported": 1785877781.0, "vulnerability_id": "CVE-2026-39828", "vulnerability_url": "/vuln/CVE-2026-39828"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T21:05:34+00:00", "cve": "CVE-2026-26996", "id": "CVE-2026-26996", "initial_release_date": "2026-02-20T03:05:21.105000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "minimatch: minimatch: Denial of Service via specially crafted glob patterns", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-26996.json", "version": "3", "product_status": {"fixed": 758, "known_affected": 37, "known_not_affected": 4534}, "imported": 1785877534.0, "vulnerability_id": "CVE-2026-26996", "vulnerability_url": "/vuln/CVE-2026-26996"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T21:05:27+00:00", "cve": "CVE-2025-65637", "id": "CVE-2025-65637", "initial_release_date": "2025-12-04T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "github.com/sirupsen/logrus: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-65637.json", "version": "3", "product_status": {"fixed": 2037, "known_affected": 270, "known_not_affected": 22245}, "imported": 1785877527.0, "vulnerability_id": "CVE-2025-65637", "vulnerability_url": "/vuln/CVE-2025-65637"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T21:05:23+00:00", "cve": "CVE-2025-58058", "id": "CVE-2025-58058", "initial_release_date": "2025-08-28T21:54:05.561000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "github.com/ulikunitz/xz: github.com/ulikunitz/xz leaks memory", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-58058.json", "version": "3", "product_status": {"fixed": 116, "known_affected": 264, "known_not_affected": 32}, "imported": 1785877523.0, "vulnerability_id": "CVE-2025-58058", "vulnerability_url": "/vuln/CVE-2025-58058"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T21:05:19+00:00", "cve": "CVE-2025-47907", "id": "CVE-2025-47907", "initial_release_date": "2025-08-07T15:25:30.704000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "database/sql: Postgres Scan Race Condition", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-47907.json", "version": "3", "product_status": {"fixed": 5290, "known_affected": 165, "known_not_affected": 2230}, "imported": 1785877519.0, "vulnerability_id": "CVE-2025-47907", "vulnerability_url": "/vuln/CVE-2025-47907"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T21:05:14+00:00", "cve": "CVE-2025-27144", "id": "CVE-2025-27144", "initial_release_date": "2025-02-24T22:22:22.863000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "go-jose: Go JOSE's Parsing Vulnerable to Denial of Service", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-27144.json", "version": "3", "product_status": {"fixed": 796, "known_affected": 29, "known_not_affected": 5241}, "imported": 1785877514.0, "vulnerability_id": "CVE-2025-27144", "vulnerability_url": "/vuln/CVE-2025-27144"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T21:05:09+00:00", "cve": "CVE-2025-22870", "id": "CVE-2025-22870", "initial_release_date": "2025-03-12T18:27:59.376000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-22870.json", "version": "3", "product_status": {"fixed": 329, "known_affected": 604, "known_not_affected": 105}, "imported": 1785877509.0, "vulnerability_id": "CVE-2025-22870", "vulnerability_url": "/vuln/CVE-2025-22870"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T21:05:07+00:00", "cve": "CVE-2025-22866", "id": "CVE-2025-22866", "initial_release_date": "2025-02-06T16:54:10.252000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "crypto/internal/nistec: golang: Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-22866.json", "version": "3", "product_status": {"fixed": 247, "known_affected": 408, "known_not_affected": 511}, "imported": 1785877507.0, "vulnerability_id": "CVE-2025-22866", "vulnerability_url": "/vuln/CVE-2025-22866"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T21:05:02+00:00", "cve": "CVE-2024-45336", "id": "CVE-2024-45336", "initial_release_date": "2024-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: net/http: net/http: sensitive headers incorrectly sent after cross-domain redirect", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-45336.json", "version": "3", "product_status": {"fixed": 341, "known_affected": 528, "known_not_affected": 434}, "imported": 1785877502.0, "vulnerability_id": "CVE-2024-45336", "vulnerability_url": "/vuln/CVE-2024-45336"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T21:05:01+00:00", "cve": "CVE-2024-7246", "id": "CVE-2024-7246", "initial_release_date": "2024-08-06T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "grpc: client communicating with a HTTP/2 proxy can poison the HPACK table between the proxy and the backend", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-7246.json", "version": "3", "product_status": {"fixed": 46, "known_affected": 1, "known_not_affected": 4656}, "imported": 1785877501.0, "vulnerability_id": "CVE-2024-7246", "vulnerability_url": "/vuln/CVE-2024-7246"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T21:04:31+00:00", "cve": "CVE-2022-32190", "id": "CVE-2022-32190", "initial_release_date": "2022-09-06T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: net/url: JoinPath does not strip relative path components in all circumstances", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-32190.json", "version": "3", "product_status": {"fixed": 1580, "known_affected": 48, "known_not_affected": 2669}, "imported": 1785877471.0, "vulnerability_id": "CVE-2022-32190", "vulnerability_url": "/vuln/CVE-2022-32190"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T21:04:21+00:00", "cve": "CVE-2022-41725", "id": "CVE-2022-41725", "initial_release_date": "2022-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: net/http, mime/multipart: denial of service from excessive resource consumption", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-41725.json", "version": "3", "product_status": {"fixed": 2269, "known_affected": 104, "known_not_affected": 2328}, "imported": 1785877461.0, "vulnerability_id": "CVE-2022-41725", "vulnerability_url": "/vuln/CVE-2022-41725"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T21:03:44+00:00", "cve": "CVE-2022-41724", "id": "CVE-2022-41724", "initial_release_date": "2022-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: crypto/tls: large handshake records may cause panics", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-41724.json", "version": "3", "product_status": {"fixed": 1716, "known_affected": 86, "known_not_affected": 2714}, "imported": 1785877424.0, "vulnerability_id": "CVE-2022-41724", "vulnerability_url": "/vuln/CVE-2022-41724"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T21:03:42+00:00", "cve": "CVE-2022-41717", "id": "CVE-2022-41717", "initial_release_date": "2022-11-30T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-41717.json", "version": "3", "product_status": {"fixed": 2081, "known_affected": 146, "known_not_affected": 7593}, "imported": 1785877422.0, "vulnerability_id": "CVE-2022-41717", "vulnerability_url": "/vuln/CVE-2022-41717"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T21:03:33+00:00", "cve": "CVE-2022-27191", "id": "CVE-2022-27191", "initial_release_date": "2022-03-15T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: crash in a golang.org/x/crypto/ssh server", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-27191.json", "version": "3", "product_status": {"fixed": 808, "known_affected": 82, "known_not_affected": 4981}, "imported": 1785877413.0, "vulnerability_id": "CVE-2022-27191", "vulnerability_url": "/vuln/CVE-2022-27191"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T21:03:27+00:00", "cve": "CVE-2022-24450", "id": "CVE-2022-24450", "initial_release_date": "2022-02-07T12:40:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "nats-server: misusing the \"dynamically provisioned sandbox accounts\" feature  authenticated user can obtain the privileges of the System account", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-24450.json", "version": "3", "product_status": {"known_affected": 18, "known_not_affected": 8}, "imported": 1785877407.0, "vulnerability_id": "CVE-2022-24450", "vulnerability_url": "/vuln/CVE-2022-24450"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T21:03:27+00:00", "cve": "CVE-2021-43565", "id": "CVE-2021-43565", "initial_release_date": "2021-12-02T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/crypto: empty plaintext packet causes panic", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-43565.json", "version": "3", "product_status": {"fixed": 266, "known_affected": 137, "known_not_affected": 1464}, "imported": 1785877407.0, "vulnerability_id": "CVE-2021-43565", "vulnerability_url": "/vuln/CVE-2021-43565"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T21:03:19+00:00", "cve": "CVE-2022-24785", "id": "CVE-2022-24785", "initial_release_date": "2022-04-04T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Moment.js: Path traversal  in moment.locale", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-24785.json", "version": "3", "product_status": {"fixed": 743, "known_affected": 92, "known_not_affected": 475}, "imported": 1785877399.0, "vulnerability_id": "CVE-2022-24785", "vulnerability_url": "/vuln/CVE-2022-24785"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T21:03:05+00:00", "cve": "CVE-2021-32690", "id": "CVE-2021-32690", "initial_release_date": "2021-06-16T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "helm: information disclosure vulnerability", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-32690.json", "version": "3", "product_status": {"fixed": 9, "known_affected": 24, "known_not_affected": 569}, "imported": 1785877385.0, "vulnerability_id": "CVE-2021-32690", "vulnerability_url": "/vuln/CVE-2021-32690"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T21:02:54+00:00", "cve": "CVE-2021-33194", "id": "CVE-2021-33194", "initial_release_date": "2021-05-20T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: x/net/html: infinite loop in ParseFragment", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-33194.json", "version": "3", "product_status": {"fixed": 13, "known_affected": 75, "known_not_affected": 990}, "imported": 1785877374.0, "vulnerability_id": "CVE-2021-33194", "vulnerability_url": "/vuln/CVE-2021-33194"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T21:02:15+00:00", "cve": "CVE-2026-33814", "id": "CVE-2026-33814", "initial_release_date": "2026-05-07T19:41:17.631000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33814.json", "version": "3", "product_status": {"fixed": 235, "known_affected": 620, "known_not_affected": 377, "under_investigation": 506}, "imported": 1785877335.0, "vulnerability_id": "CVE-2026-33814", "vulnerability_url": "/vuln/CVE-2026-33814"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T21:02:11+00:00", "cve": "CVE-2026-33811", "id": "CVE-2026-33811", "initial_release_date": "2026-05-07T19:41:19.285000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33811.json", "version": "3", "product_status": {"fixed": 665, "known_affected": 216, "known_not_affected": 2213, "under_investigation": 16}, "imported": 1785877331.0, "vulnerability_id": "CVE-2026-33811", "vulnerability_url": "/vuln/CVE-2026-33811"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T21:01:50+00:00", "cve": "CVE-2026-27145", "id": "CVE-2026-27145", "initial_release_date": "2026-06-02T22:01:36.954000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27145.json", "version": "3", "product_status": {"fixed": 394, "known_affected": 87, "known_not_affected": 1532, "under_investigation": 24}, "imported": 1785877310.0, "vulnerability_id": "CVE-2026-27145", "vulnerability_url": "/vuln/CVE-2026-27145"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T21:01:38+00:00", "cve": "CVE-2026-27136", "id": "CVE-2026-27136", "initial_release_date": "2026-05-22T15:01:22.111000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27136.json", "version": "3", "product_status": {"fixed": 456, "known_affected": 287, "known_not_affected": 2579}, "imported": 1785877298.0, "vulnerability_id": "CVE-2026-27136", "vulnerability_url": "/vuln/CVE-2026-27136"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T21:01:24+00:00", "cve": "CVE-2026-21441", "id": "CVE-2026-21441", "initial_release_date": "2026-01-07T22:09:01.936000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-21441.json", "version": "3", "product_status": {"fixed": 1946, "known_affected": 386, "known_not_affected": 2923, "under_investigation": 1}, "imported": 1785877284.0, "vulnerability_id": "CVE-2026-21441", "vulnerability_url": "/vuln/CVE-2026-21441"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T21:01:13+00:00", "cve": "CVE-2025-66506", "id": "CVE-2025-66506", "initial_release_date": "2025-12-04T22:04:41.637000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "github.com/sigstore/fulcio: Fulcio: Denial of Service via crafted OpenID Connect (OIDC) token", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-66506.json", "version": "3", "product_status": {"fixed": 321, "known_affected": 65, "known_not_affected": 1257}, "imported": 1785877273.0, "vulnerability_id": "CVE-2025-66506", "vulnerability_url": "/vuln/CVE-2025-66506"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T21:00:54+00:00", "cve": "CVE-2025-64756", "id": "CVE-2025-64756", "initial_release_date": "2025-11-17T17:29:08.029000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "glob: glob: Command Injection Vulnerability via Malicious Filenames", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-64756.json", "version": "3", "product_status": {"fixed": 171, "known_affected": 115, "known_not_affected": 1097}, "imported": 1785877254.0, "vulnerability_id": "CVE-2025-64756", "vulnerability_url": "/vuln/CVE-2025-64756"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T21:00:45+00:00", "cve": "CVE-2025-61729", "id": "CVE-2025-61729", "initial_release_date": "2025-12-02T18:54:10.166000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-61729.json", "version": "3", "product_status": {"fixed": 7763, "known_affected": 435, "known_not_affected": 4683, "under_investigation": 2}, "imported": 1785877245.0, "vulnerability_id": "CVE-2025-61729", "vulnerability_url": "/vuln/CVE-2025-61729"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T21:00:39+00:00", "cve": "CVE-2025-56005", "id": "CVE-2025-56005", "initial_release_date": "2025-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "ply: python-ply: Unsafe pickle file handling in Ply", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-56005.json", "version": "3", "product_status": {"known_affected": 435, "known_not_affected": 32}, "imported": 1785877239.0, "vulnerability_id": "CVE-2025-56005", "vulnerability_url": "/vuln/CVE-2025-56005"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T21:00:34+00:00", "cve": "CVE-2025-52881", "id": "CVE-2025-52881", "initial_release_date": "2025-11-05T09:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-52881.json", "version": "3", "product_status": {"fixed": 2380, "known_affected": 44, "known_not_affected": 4070}, "imported": 1785877234.0, "vulnerability_id": "CVE-2025-52881", "vulnerability_url": "/vuln/CVE-2025-52881"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T21:00:24+00:00", "cve": "CVE-2025-30204", "id": "CVE-2025-30204", "initial_release_date": "2025-03-21T21:42:01.382000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-30204.json", "version": "3", "product_status": {"fixed": 3038, "known_affected": 77, "known_not_affected": 11728}, "imported": 1785877224.0, "vulnerability_id": "CVE-2025-30204", "vulnerability_url": "/vuln/CVE-2025-30204"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T21:00:17+00:00", "cve": "CVE-2024-45337", "id": "CVE-2024-45337", "initial_release_date": "2024-12-11T18:55:58.506000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-45337.json", "version": "3", "product_status": {"fixed": 1728, "known_affected": 74, "known_not_affected": 8476}, "imported": 1785877217.0, "vulnerability_id": "CVE-2024-45337", "vulnerability_url": "/vuln/CVE-2024-45337"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T20:59:43+00:00", "cve": "CVE-2019-0205", "id": "CVE-2019-0205", "initial_release_date": "2019-10-17T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "thrift: Endless loop when feed with specific input data", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2019/cve-2019-0205.json", "version": "3", "product_status": {"fixed": 1203, "known_affected": 64, "known_not_affected": 3}, "imported": 1785877183.0, "vulnerability_id": "CVE-2019-0205", "vulnerability_url": "/vuln/CVE-2019-0205"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T20:58:44+00:00", "cve": "CVE-2018-14642", "id": "CVE-2018-14642", "initial_release_date": "2018-09-14T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "undertow: Infoleak in some circumstances where Undertow can serve data from a random buffer", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2018/cve-2018-14642.json", "version": "3", "product_status": {"fixed": 599, "known_affected": 4, "known_not_affected": 3}, "imported": 1785877124.0, "vulnerability_id": "CVE-2018-14642", "vulnerability_url": "/vuln/CVE-2018-14642"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T20:58:23+00:00", "cve": "CVE-2018-1000632", "id": "CVE-2018-1000632", "initial_release_date": "2018-07-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "dom4j: XML Injection in Class: Element. Methods: addElement, addAttribute which can impact the integrity of XML documents", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2018/cve-2018-1000632.json", "version": "3", "product_status": {"fixed": 1883, "known_affected": 22, "known_not_affected": 5}, "imported": 1785877103.0, "vulnerability_id": "CVE-2018-1000632", "vulnerability_url": "/vuln/CVE-2018-1000632"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T20:57:51+00:00", "cve": "CVE-2017-7554", "id": "CVE-2017-7554", "initial_release_date": "2017-09-11T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "RHMAP: Stored XSS in App Store", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2017/cve-2017-7554.json", "version": "3", "product_status": {"fixed": 105}, "imported": 1785877071.0, "vulnerability_id": "CVE-2017-7554", "vulnerability_url": "/vuln/CVE-2017-7554"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T20:57:49+00:00", "cve": "CVE-2017-7553", "id": "CVE-2017-7553", "initial_release_date": "2017-09-11T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "RHMAP: SSRF via external_request feature of App Studio", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2017/cve-2017-7553.json", "version": "3", "product_status": {"fixed": 105}, "imported": 1785877069.0, "vulnerability_id": "CVE-2017-7553", "vulnerability_url": "/vuln/CVE-2017-7553"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T20:57:47+00:00", "cve": "CVE-2017-7552", "id": "CVE-2017-7552", "initial_release_date": "2017-09-11T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "RHMAP Millicore IDE allows RCE on SCM", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2017/cve-2017-7552.json", "version": "3", "product_status": {"fixed": 105}, "imported": 1785877067.0, "vulnerability_id": "CVE-2017-7552", "vulnerability_url": "/vuln/CVE-2017-7552"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T20:53:56+00:00", "cve": "CVE-2026-11352", "id": "CVE-2026-11352", "initial_release_date": "2026-07-03T06:12:10.777000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "curl: libcurl: curl/libcurl: Remote denial of service via QUIC UDP receive function vulnerability", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-11352.json", "version": "3", "product_status": {"fixed": 7, "known_affected": 11, "known_not_affected": 34}, "imported": 1785876836.0, "vulnerability_id": "CVE-2026-11352", "vulnerability_url": "/vuln/CVE-2026-11352"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T20:53:43+00:00", "cve": "CVE-2026-32280", "id": "CVE-2026-32280", "initial_release_date": "2026-04-08T01:06:58.595000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32280.json", "version": "3", "product_status": {"fixed": 3117, "known_affected": 171, "known_not_affected": 2919}, "imported": 1785876823.0, "vulnerability_id": "CVE-2026-32280", "vulnerability_url": "/vuln/CVE-2026-32280"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T20:53:40+00:00", "cve": "CVE-2026-41316", "id": "CVE-2026-41316", "initial_release_date": "2026-04-24T02:35:41.160000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "erb: ERB: Arbitrary code execution via deserialization bypass", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41316.json", "version": "3", "product_status": {"fixed": 1349, "known_not_affected": 31}, "imported": 1785876820.0, "vulnerability_id": "CVE-2026-41316", "vulnerability_url": "/vuln/CVE-2026-41316"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T20:53:33+00:00", "cve": "CVE-2026-39835", "id": "CVE-2026-39835", "initial_release_date": "2026-05-22T02:31:26.982000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39835.json", "version": "3", "product_status": {"fixed": 795, "known_affected": 104, "known_not_affected": 920}, "imported": 1785876813.0, "vulnerability_id": "CVE-2026-39835", "vulnerability_url": "/vuln/CVE-2026-39835"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T20:53:15+00:00", "cve": "CVE-2026-34993", "id": "CVE-2026-34993", "initial_release_date": "2026-06-02T18:29:15.847000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34993.json", "version": "3", "product_status": {"fixed": 69, "known_affected": 65, "known_not_affected": 1458, "under_investigation": 5}, "imported": 1785876795.0, "vulnerability_id": "CVE-2026-34993", "vulnerability_url": "/vuln/CVE-2026-34993"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T20:53:10+00:00", "cve": "CVE-2026-44705", "id": "CVE-2026-44705", "initial_release_date": "2026-06-11T15:42:46.565000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "tmp: path Traversal via unsanitized prefix/postfix enables directory escape", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44705.json", "version": "3", "product_status": {"known_affected": 92, "known_not_affected": 8}, "imported": 1785876790.0, "vulnerability_id": "CVE-2026-44705", "vulnerability_url": "/vuln/CVE-2026-44705"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T20:53:07+00:00", "cve": "CVE-2026-42258", "id": "CVE-2026-42258", "initial_release_date": "2026-05-09T19:40:49.405000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42258.json", "version": "3", "product_status": {"fixed": 1917, "known_affected": 1, "known_not_affected": 12, "under_investigation": 9}, "imported": 1785876787.0, "vulnerability_id": "CVE-2026-42258", "vulnerability_url": "/vuln/CVE-2026-42258"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T20:53:05+00:00", "cve": "CVE-2026-10649", "id": "CVE-2026-10649", "initial_release_date": "2026-06-16T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "pacemaker: Pacemaker: Denial of Service via integer overflow in remote message decompression", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-10649.json", "version": "3", "product_status": {"fixed": 1058, "known_not_affected": 10}, "imported": 1785876785.0, "vulnerability_id": "CVE-2026-10649", "vulnerability_url": "/vuln/CVE-2026-10649"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T20:52:55+00:00", "cve": "CVE-2026-42246", "id": "CVE-2026-42246", "initial_release_date": "2026-05-09T19:33:17.880000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42246.json", "version": "3", "product_status": {"fixed": 1917, "known_affected": 10, "known_not_affected": 10}, "imported": 1785876775.0, "vulnerability_id": "CVE-2026-42246", "vulnerability_url": "/vuln/CVE-2026-42246"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T20:52:28+00:00", "cve": "CVE-2025-61726", "id": "CVE-2025-61726", "initial_release_date": "2025-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-61726.json", "version": "3", "product_status": {"fixed": 10415, "known_affected": 450, "known_not_affected": 16980}, "imported": 1785876748.0, "vulnerability_id": "CVE-2025-61726", "vulnerability_url": "/vuln/CVE-2025-61726"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T20:51:48+00:00", "cve": "CVE-2026-39830", "id": "CVE-2026-39830", "initial_release_date": "2026-05-22T02:31:27.208000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39830.json", "version": "3", "product_status": {"fixed": 943, "known_affected": 134, "known_not_affected": 998, "under_investigation": 3}, "imported": 1785876708.0, "vulnerability_id": "CVE-2026-39830", "vulnerability_url": "/vuln/CVE-2026-39830"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T20:51:06+00:00", "cve": "CVE-2026-33186", "id": "CVE-2026-33186", "initial_release_date": "2026-03-20T22:23:32.147000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33186.json", "version": "3", "product_status": {"fixed": 2886, "known_affected": 396, "known_not_affected": 34270}, "imported": 1785876666.0, "vulnerability_id": "CVE-2026-33186", "vulnerability_url": "/vuln/CVE-2026-33186"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T20:51:01+00:00", "cve": "CVE-2026-59197", "id": "CVE-2026-59197", "initial_release_date": "2026-07-14T16:25:23.520000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Pillow: Pillow: Native heap out-of-bounds write", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59197.json", "version": "3", "product_status": {"fixed": 98, "known_affected": 67, "known_not_affected": 543}, "imported": 1785876661.0, "vulnerability_id": "CVE-2026-59197", "vulnerability_url": "/vuln/CVE-2026-59197"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T20:50:50+00:00", "cve": "CVE-2026-10846", "id": "CVE-2026-10846", "initial_release_date": "2026-06-10T06:37:59.538000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "ldns: ldns: Off-path poisoning attacks due to insufficient query-response matching", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-10846.json", "version": "3", "product_status": {"fixed": 204, "known_affected": 11, "known_not_affected": 1}, "imported": 1785876650.0, "vulnerability_id": "CVE-2026-10846", "vulnerability_url": "/vuln/CVE-2026-10846"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T20:50:39+00:00", "cve": "CVE-2026-54297", "id": "CVE-2026-54297", "initial_release_date": "2026-06-24T15:50:08.949000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "faraday: Faraday: Denial of Service via crafted nested query strings", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54297.json", "version": "3", "product_status": {"fixed": 20, "known_affected": 45, "known_not_affected": 356}, "imported": 1785876639.0, "vulnerability_id": "CVE-2026-54297", "vulnerability_url": "/vuln/CVE-2026-54297"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T20:50:33+00:00", "cve": "CVE-2026-2332", "id": "CVE-2026-2332", "initial_release_date": "2026-04-14T10:59:10.193000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "org.eclipse.jetty/jetty-http: HTTP request smuggling via chunked extension quoted-string parsing", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2332.json", "version": "3", "product_status": {"fixed": 36, "known_affected": 16, "known_not_affected": 411}, "imported": 1785876633.0, "vulnerability_id": "CVE-2026-2332", "vulnerability_url": "/vuln/CVE-2026-2332"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T20:50:27+00:00", "cve": "CVE-2026-59886", "id": "CVE-2026-59886", "initial_release_date": "2026-07-14T16:38:29.691000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59886.json", "version": "3", "product_status": {"fixed": 15, "known_affected": 85, "known_not_affected": 419, "under_investigation": 215}, "imported": 1785876627.0, "vulnerability_id": "CVE-2026-59886", "vulnerability_url": "/vuln/CVE-2026-59886"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T20:50:20+00:00", "cve": "CVE-2026-59885", "id": "CVE-2026-59885", "initial_release_date": "2026-07-14T16:40:00.515000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "pyasn1: python-pyasn1: pyasn1: Denial of Service via crafted ASN.1 OBJECT IDENTIFIER", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59885.json", "version": "3", "product_status": {"fixed": 12, "known_affected": 132, "known_not_affected": 354}, "imported": 1785876620.0, "vulnerability_id": "CVE-2026-59885", "vulnerability_url": "/vuln/CVE-2026-59885"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T20:50:13+00:00", "cve": "CVE-2026-55380", "id": "CVE-2026-55380", "initial_release_date": "2026-07-06T18:50:14.789000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "python-pillow: Pillow: Denial of Service via crafted GD 2.x image file", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-55380.json", "version": "3", "product_status": {"fixed": 151, "known_affected": 66, "known_not_affected": 738, "under_investigation": 3}, "imported": 1785876613.0, "vulnerability_id": "CVE-2026-55380", "vulnerability_url": "/vuln/CVE-2026-55380"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T20:50:04+00:00", "cve": "CVE-2026-55379", "id": "CVE-2026-55379", "initial_release_date": "2026-07-06T18:52:11.633000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "python-pillow: Pillow: Denial of Service via crafted BDF font file", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-55379.json", "version": "3", "product_status": {"fixed": 155, "known_affected": 64, "known_not_affected": 835, "under_investigation": 1}, "imported": 1785876604.0, "vulnerability_id": "CVE-2026-55379", "vulnerability_url": "/vuln/CVE-2026-55379"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T20:49:44+00:00", "cve": "CVE-2026-54059", "id": "CVE-2026-54059", "initial_release_date": "2026-07-06T18:46:09.433000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "python-pillow: Pillow: Denial of Service via crafted PCF font data", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54059.json", "version": "3", "product_status": {"fixed": 144, "known_affected": 1, "known_not_affected": 655, "under_investigation": 1}, "imported": 1785876584.0, "vulnerability_id": "CVE-2026-54059", "vulnerability_url": "/vuln/CVE-2026-54059"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T20:49:39+00:00", "cve": "CVE-2026-48526", "id": "CVE-2026-48526", "initial_release_date": "2026-05-28T15:09:09.258000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48526.json", "version": "3", "product_status": {"fixed": 905, "known_affected": 39, "known_not_affected": 1775}, "imported": 1785876579.0, "vulnerability_id": "CVE-2026-48526", "vulnerability_url": "/vuln/CVE-2026-48526"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T20:49:35+00:00", "cve": "CVE-2026-44545", "id": "CVE-2026-44545", "initial_release_date": "2026-06-03T13:17:42.907000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "daphne: daphne: Denial of Service via excessive WebSocket message size", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44545.json", "version": "3", "product_status": {"fixed": 14, "known_affected": 5, "known_not_affected": 490}, "imported": 1785876575.0, "vulnerability_id": "CVE-2026-44545", "vulnerability_url": "/vuln/CVE-2026-44545"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T20:49:28+00:00", "cve": "CVE-2026-40898", "id": "CVE-2026-40898", "initial_release_date": "2026-06-04T17:43:36.803000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "github.com/quic-go/quic-go: quic-go: Denial of Service via excessive memory allocation in HTTP/3 trailers", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-40898.json", "version": "3", "product_status": {"fixed": 61, "known_affected": 10, "known_not_affected": 399}, "imported": 1785876568.0, "vulnerability_id": "CVE-2026-40898", "vulnerability_url": "/vuln/CVE-2026-40898"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T20:48:55+00:00", "cve": "CVE-2026-18141", "id": "CVE-2026-18141", "initial_release_date": "2026-07-31T15:28:47.213000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "aap-gateway: aap-gateway: Authentication bypass in Event-Driven Ansible via forged HTTP header", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-18141.json", "version": "3", "product_status": {"fixed": 8, "known_not_affected": 204}, "imported": 1785876535.0, "vulnerability_id": "CVE-2026-18141", "vulnerability_url": "/vuln/CVE-2026-18141"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T20:48:47+00:00", "cve": "CVE-2026-12383", "id": "CVE-2026-12383", "initial_release_date": "2026-07-27T19:04:53.794000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "eda-server: ExternalEventStreamViewSet trusts Subject header without validation and leaks expected DN", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12383.json", "version": "3", "product_status": {"fixed": 20, "known_not_affected": 381}, "imported": 1785876527.0, "vulnerability_id": "CVE-2026-12383", "vulnerability_url": "/vuln/CVE-2026-12383"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T20:43:42+00:00", "cve": "CVE-2026-34486", "id": "CVE-2026-34486", "initial_release_date": "2026-04-09T19:35:35.994000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Apache Tomcat: Apache Tomcat: Missing Encryption of Sensitive Data due to EncryptInterceptor bypass", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34486.json", "version": "3", "product_status": {"fixed": 150, "known_affected": 14, "known_not_affected": 62}, "imported": 1785876222.0, "vulnerability_id": "CVE-2026-34486", "vulnerability_url": "/vuln/CVE-2026-34486"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T20:40:12+00:00", "cve": "CVE-2023-39325", "id": "CVE-2023-39325", "initial_release_date": "2023-10-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-39325.json", "version": "3", "product_status": {"fixed": 4761, "known_affected": 244, "known_not_affected": 30354}, "imported": 1785876012.0, "vulnerability_id": "CVE-2023-39325", "vulnerability_url": "/vuln/CVE-2023-39325"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T20:40:08+00:00", "cve": "CVE-2023-30551", "id": "CVE-2023-30551", "initial_release_date": "2023-05-09T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "rekor: compressed archives can result in OOM conditions", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-30551.json", "version": "3", "product_status": {"fixed": 8, "known_affected": 1, "known_not_affected": 893}, "imported": 1785876008.0, "vulnerability_id": "CVE-2023-30551", "vulnerability_url": "/vuln/CVE-2023-30551"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T20:40:00+00:00", "cve": "CVE-2023-25151", "id": "CVE-2023-25151", "initial_release_date": "2023-02-08T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "opentelemetry-go: DoS vulnerability for high cardinality metrics in otelhttp and otelbeego", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-25151.json", "version": "3", "product_status": {"known_not_affected": 281}, "imported": 1785876000.0, "vulnerability_id": "CVE-2023-25151", "vulnerability_url": "/vuln/CVE-2023-25151"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T20:39:56+00:00", "cve": "CVE-2023-5332", "id": "CVE-2023-5332", "initial_release_date": "2023-12-04T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "consul: Command injection through script checks option", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-5332.json", "version": "3", "product_status": {"known_affected": 20, "known_not_affected": 55}, "imported": 1785875996.0, "vulnerability_id": "CVE-2023-5332", "vulnerability_url": "/vuln/CVE-2023-5332"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T20:39:26+00:00", "cve": "CVE-2021-3918", "id": "CVE-2021-3918", "initial_release_date": "2021-10-03T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "nodejs-json-schema: Prototype pollution vulnerability", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-3918.json", "version": "3", "product_status": {"fixed": 242, "known_affected": 29, "known_not_affected": 9}, "imported": 1785875966.0, "vulnerability_id": "CVE-2021-3918", "vulnerability_url": "/vuln/CVE-2021-3918"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T20:31:25+00:00", "cve": "CVE-2026-34986", "id": "CVE-2026-34986", "initial_release_date": "2026-04-06T16:22:45.353000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34986.json", "version": "3", "product_status": {"fixed": 2397, "known_affected": 161, "known_not_affected": 11721, "under_investigation": 1}, "imported": 1785875485.0, "vulnerability_id": "CVE-2026-34986", "vulnerability_url": "/vuln/CVE-2026-34986"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T20:24:55+00:00", "cve": "CVE-2020-9283", "id": "CVE-2020-9283", "initial_release_date": "2020-02-21T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2020/cve-2020-9283.json", "version": "3", "product_status": {"fixed": 75, "known_affected": 85, "known_not_affected": 637}, "imported": 1785875095.0, "vulnerability_id": "CVE-2020-9283", "vulnerability_url": "/vuln/CVE-2020-9283"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T20:24:45+00:00", "cve": "CVE-2020-7660", "id": "CVE-2020-7660", "initial_release_date": "2020-04-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "npm-serialize-javascript: allows remote attackers to inject arbitrary code via the function deleteFunctions within index.js", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2020/cve-2020-7660.json", "version": "3", "product_status": {"fixed": 6, "known_affected": 5, "known_not_affected": 2}, "imported": 1785875085.0, "vulnerability_id": "CVE-2020-7660", "vulnerability_url": "/vuln/CVE-2020-7660"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T20:24:38+00:00", "cve": "CVE-2019-20933", "id": "CVE-2019-20933", "initial_release_date": "2019-03-27T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "influxdb: authentication bypass because a JWT token may have an empty SharedSecret", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2019/cve-2019-20933.json", "version": "3", "product_status": {"known_not_affected": 15}, "imported": 1785875078.0, "vulnerability_id": "CVE-2019-20933", "vulnerability_url": "/vuln/CVE-2019-20933"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T20:15:45+00:00", "cve": "CVE-2024-29018", "id": "CVE-2024-29018", "initial_release_date": "2024-03-20T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "moby: external DNS requests from 'internal' networks could lead to data exfiltration", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-29018.json", "version": "3", "product_status": {"fixed": 1, "known_not_affected": 153}, "imported": 1785874545.0, "vulnerability_id": "CVE-2024-29018", "vulnerability_url": "/vuln/CVE-2024-29018"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T20:15:36+00:00", "cve": "CVE-2024-28176", "id": "CVE-2024-28176", "initial_release_date": "2024-03-09T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "jose: resource exhaustion", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-28176.json", "version": "3", "product_status": {"fixed": 584, "known_affected": 3, "known_not_affected": 2423}, "imported": 1785874536.0, "vulnerability_id": "CVE-2024-28176", "vulnerability_url": "/vuln/CVE-2024-28176"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T20:15:29+00:00", "cve": "CVE-2024-27304", "id": "CVE-2024-27304", "initial_release_date": "2024-03-06T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "pgx: SQL Injection via Protocol Message Size Overflow", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-27304.json", "version": "3", "product_status": {"fixed": 33, "known_affected": 39, "known_not_affected": 7}, "imported": 1785874529.0, "vulnerability_id": "CVE-2024-27304", "vulnerability_url": "/vuln/CVE-2024-27304"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T20:15:28+00:00", "cve": "CVE-2024-27289", "id": "CVE-2024-27289", "initial_release_date": "2024-03-07T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "pgx: SQL Injection via Line Comment Creation", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-27289.json", "version": "3", "product_status": {"fixed": 41, "known_affected": 29, "known_not_affected": 786}, "imported": 1785874528.0, "vulnerability_id": "CVE-2024-27289", "vulnerability_url": "/vuln/CVE-2024-27289"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T20:15:19+00:00", "cve": "CVE-2024-24786", "id": "CVE-2024-24786", "initial_release_date": "2024-03-05T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-24786.json", "version": "3", "product_status": {"fixed": 2012, "known_affected": 116, "known_not_affected": 11938, "under_investigation": 58}, "imported": 1785874519.0, "vulnerability_id": "CVE-2024-24786", "vulnerability_url": "/vuln/CVE-2024-24786"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T20:15:11+00:00", "cve": "CVE-2023-48795", "id": "CVE-2023-48795", "initial_release_date": "2023-12-18T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "ssh: Prefix truncation attack on Binary Packet Protocol (BPP)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-48795.json", "version": "3", "product_status": {"fixed": 2195, "known_affected": 153, "known_not_affected": 12094}, "imported": 1785874511.0, "vulnerability_id": "CVE-2023-48795", "vulnerability_url": "/vuln/CVE-2023-48795"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T20:15:07+00:00", "cve": "CVE-2023-45287", "id": "CVE-2023-45287", "initial_release_date": "2023-12-05T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges.", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-45287.json", "version": "3", "product_status": {"fixed": 938, "known_affected": 72, "known_not_affected": 717, "under_investigation": 1}, "imported": 1785874507.0, "vulnerability_id": "CVE-2023-45287", "vulnerability_url": "/vuln/CVE-2023-45287"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T20:14:58+00:00", "cve": "CVE-2023-45142", "id": "CVE-2023-45142", "initial_release_date": "2023-10-12T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "opentelemetry: DoS vulnerability in otelhttp", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-45142.json", "version": "3", "product_status": {"fixed": 1109, "known_affected": 134, "known_not_affected": 8199}, "imported": 1785874498.0, "vulnerability_id": "CVE-2023-45142", "vulnerability_url": "/vuln/CVE-2023-45142"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T20:14:51+00:00", "cve": "CVE-2023-39326", "id": "CVE-2023-39326", "initial_release_date": "2023-12-06T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-39326.json", "version": "3", "product_status": {"fixed": 2570, "known_affected": 71, "known_not_affected": 987}, "imported": 1785874491.0, "vulnerability_id": "CVE-2023-39326", "vulnerability_url": "/vuln/CVE-2023-39326"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T20:14:44+00:00", "cve": "CVE-2023-37788", "id": "CVE-2023-37788", "initial_release_date": "2023-07-18T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "goproxy: Denial of service (DoS) via unspecified vectors.", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-37788.json", "version": "3", "product_status": {"fixed": 335, "known_affected": 134, "known_not_affected": 4135}, "imported": 1785874484.0, "vulnerability_id": "CVE-2023-37788", "vulnerability_url": "/vuln/CVE-2023-37788"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T20:13:43+00:00", "cve": "CVE-2023-29401", "id": "CVE-2023-29401", "initial_release_date": "2023-06-08T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang-github-gin-gonic-gin: Gin Web Framework does not properly sanitize filename parameter of Context.FileAttachment function", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-29401.json", "version": "3", "product_status": {"fixed": 13, "known_affected": 16, "known_not_affected": 2030}, "imported": 1785874423.0, "vulnerability_id": "CVE-2023-29401", "vulnerability_url": "/vuln/CVE-2023-29401"}]}