{"metadata": {"count": 291265, "page": 1, "per_page": 100}, "data": [{"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T06:02:57+00:00", "cve": "CVE-2026-74630", "id": "CVE-2026-74630", "initial_release_date": "2026-08-22T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: ipv6: prevent in6_dev_get() from resurrecting inet6_dev", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74630.json", "version": "3", "product_status": {"known_affected": 260, "under_investigation": 14}, "imported": 1787637777.0, "vulnerability_id": "CVE-2026-74630", "vulnerability_url": "/vuln/CVE-2026-74630"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T06:02:53+00:00", "cve": "CVE-2026-74616", "id": "CVE-2026-74616", "initial_release_date": "2026-08-22T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: xdp: reject clones that overrun skb_shared_info tailroom", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74616.json", "version": "3", "product_status": {"known_affected": 232, "known_not_affected": 42}, "imported": 1787637773.0, "vulnerability_id": "CVE-2026-74616", "vulnerability_url": "/vuln/CVE-2026-74616"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T06:02:49+00:00", "cve": "CVE-2026-74615", "id": "CVE-2026-74615", "initial_release_date": "2026-08-22T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: vxlan: do not arm the ageing timer on a device that is down", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74615.json", "version": "3", "product_status": {"known_affected": 184, "known_not_affected": 90}, "imported": 1787637769.0, "vulnerability_id": "CVE-2026-74615", "vulnerability_url": "/vuln/CVE-2026-74615"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T06:02:47+00:00", "cve": "CVE-2026-74611", "id": "CVE-2026-74611", "initial_release_date": "2026-08-22T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: tls: rx: restore msg_iter before TLS 1.3 optimistic retry", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74611.json", "version": "3", "product_status": {"known_affected": 184, "known_not_affected": 90}, "imported": 1787637767.0, "vulnerability_id": "CVE-2026-74611", "vulnerability_url": "/vuln/CVE-2026-74611"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T06:02:43+00:00", "cve": "CVE-2026-74597", "id": "CVE-2026-74597", "initial_release_date": "2026-08-22T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: ip6_tunnel: clear skb2->cb[] in ip6ip6_err()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74597.json", "version": "3", "product_status": {"known_affected": 260, "under_investigation": 14}, "imported": 1787637763.0, "vulnerability_id": "CVE-2026-74597", "vulnerability_url": "/vuln/CVE-2026-74597"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T06:02:40+00:00", "cve": "CVE-2026-74588", "id": "CVE-2026-74588", "initial_release_date": "2026-08-22T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: sctp: keep chunk->transport in step with the list it is queued on", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74588.json", "version": "3", "product_status": {"known_affected": 260, "under_investigation": 14}, "imported": 1787637760.0, "vulnerability_id": "CVE-2026-74588", "vulnerability_url": "/vuln/CVE-2026-74588"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T06:02:38+00:00", "cve": "CVE-2026-74586", "id": "CVE-2026-74586", "initial_release_date": "2026-08-22T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: sctp: clear new_transport when removing a peer", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74586.json", "version": "3", "product_status": {"known_affected": 260, "under_investigation": 14}, "imported": 1787637758.0, "vulnerability_id": "CVE-2026-74586", "vulnerability_url": "/vuln/CVE-2026-74586"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T06:02:35+00:00", "cve": "CVE-2026-74582", "id": "CVE-2026-74582", "initial_release_date": "2026-08-21T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: packet: use consistent hard_header_len in non-ring send paths", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74582.json", "version": "3", "product_status": {"known_affected": 232, "known_not_affected": 42}, "imported": 1787637755.0, "vulnerability_id": "CVE-2026-74582", "vulnerability_url": "/vuln/CVE-2026-74582"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T06:02:26+00:00", "cve": "CVE-2026-74581", "id": "CVE-2026-74581", "initial_release_date": "2026-08-21T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74581.json", "version": "3", "product_status": {"known_affected": 232, "known_not_affected": 42}, "imported": 1787637746.0, "vulnerability_id": "CVE-2026-74581", "vulnerability_url": "/vuln/CVE-2026-74581"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T06:02:22+00:00", "cve": "CVE-2026-74580", "id": "CVE-2026-74580", "initial_release_date": "2026-08-21T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: vhost: reset the vring metadata cache on vring reconfiguration", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74580.json", "version": "3", "product_status": {"known_affected": 274}, "imported": 1787637742.0, "vulnerability_id": "CVE-2026-74580", "vulnerability_url": "/vuln/CVE-2026-74580"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T06:02:16+00:00", "cve": "CVE-2026-41178", "id": "CVE-2026-41178", "initial_release_date": "2026-06-04T14:38:23.707000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41178.json", "version": "3", "product_status": {"fixed": 8, "known_affected": 583, "known_not_affected": 164}, "imported": 1787637736.0, "vulnerability_id": "CVE-2026-41178", "vulnerability_url": "/vuln/CVE-2026-41178"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T06:02:06+00:00", "cve": "CVE-2026-33814", "id": "CVE-2026-33814", "initial_release_date": "2026-05-07T19:41:17.631000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33814.json", "version": "3", "product_status": {"fixed": 275, "known_affected": 598, "known_not_affected": 733, "under_investigation": 500}, "imported": 1787637726.0, "vulnerability_id": "CVE-2026-33814", "vulnerability_url": "/vuln/CVE-2026-33814"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T06:02:05+00:00", "cve": "CVE-2026-33811", "id": "CVE-2026-33811", "initial_release_date": "2026-05-07T19:41:19.285000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33811.json", "version": "3", "product_status": {"fixed": 913, "known_affected": 194, "known_not_affected": 4084, "under_investigation": 5}, "imported": 1787637725.0, "vulnerability_id": "CVE-2026-33811", "vulnerability_url": "/vuln/CVE-2026-33811"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T06:01:55+00:00", "cve": "CVE-2026-33810", "id": "CVE-2026-33810", "initial_release_date": "2026-04-08T01:06:56.546000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33810.json", "version": "3", "product_status": {"fixed": 420, "known_affected": 231, "known_not_affected": 1181}, "imported": 1787637715.0, "vulnerability_id": "CVE-2026-33810", "vulnerability_url": "/vuln/CVE-2026-33810"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T06:01:50+00:00", "cve": "CVE-2026-21441", "id": "CVE-2026-21441", "initial_release_date": "2026-01-07T22:09:01.936000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-21441.json", "version": "3", "product_status": {"fixed": 1947, "known_affected": 385, "known_not_affected": 2923, "under_investigation": 1}, "imported": 1787637710.0, "vulnerability_id": "CVE-2026-21441", "vulnerability_url": "/vuln/CVE-2026-21441"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T06:01:43+00:00", "cve": "CVE-2025-66471", "id": "CVE-2025-66471", "initial_release_date": "2025-12-05T16:06:08.531000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "urllib3: urllib3 Streaming API improperly handles highly compressed data", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-66471.json", "version": "3", "product_status": {"fixed": 1957, "known_affected": 347, "known_not_affected": 3325, "under_investigation": 1}, "imported": 1787637703.0, "vulnerability_id": "CVE-2025-66471", "vulnerability_url": "/vuln/CVE-2025-66471"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T06:01:38+00:00", "cve": "CVE-2025-68156", "id": "CVE-2025-68156", "initial_release_date": "2025-12-16T18:24:11.648000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "github.com/expr-lang/expr: Expr: Denial of Service via uncontrolled recursion in expression evaluation", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-68156.json", "version": "3", "product_status": {"fixed": 180, "known_affected": 2, "known_not_affected": 730}, "imported": 1787637698.0, "vulnerability_id": "CVE-2025-68156", "vulnerability_url": "/vuln/CVE-2025-68156"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T06:01:28+00:00", "cve": "CVE-2025-64756", "id": "CVE-2025-64756", "initial_release_date": "2025-11-17T17:29:08.029000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "glob: glob: Command Injection Vulnerability via Malicious Filenames", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-64756.json", "version": "3", "product_status": {"fixed": 171, "known_affected": 115, "known_not_affected": 1097}, "imported": 1787637688.0, "vulnerability_id": "CVE-2025-64756", "vulnerability_url": "/vuln/CVE-2025-64756"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T06:01:23+00:00", "cve": "CVE-2025-66418", "id": "CVE-2025-66418", "initial_release_date": "2025-12-05T16:02:15.271000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-66418.json", "version": "3", "product_status": {"fixed": 1941, "known_affected": 413, "known_not_affected": 2590, "under_investigation": 1}, "imported": 1787637683.0, "vulnerability_id": "CVE-2025-66418", "vulnerability_url": "/vuln/CVE-2025-66418"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T06:01:06+00:00", "cve": "CVE-2026-41607", "id": "CVE-2026-41607", "initial_release_date": "2026-04-28T09:21:48.502000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Apache Thrift: apache.com/apache/thrift: Apache Thrift: Out-of-bounds Read vulnerability", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41607.json", "version": "3", "product_status": {"fixed": 36, "known_affected": 13, "known_not_affected": 439}, "imported": 1787637666.0, "vulnerability_id": "CVE-2026-41607", "vulnerability_url": "/vuln/CVE-2026-41607"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T06:01:00+00:00", "cve": "CVE-2026-41606", "id": "CVE-2026-41606", "initial_release_date": "2026-04-28T09:21:12.815000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Apache Thrift: Apache Thrift: Denial of Service via uncontrolled recursion", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41606.json", "version": "3", "product_status": {"fixed": 36, "known_affected": 13, "known_not_affected": 439}, "imported": 1787637660.0, "vulnerability_id": "CVE-2026-41606", "vulnerability_url": "/vuln/CVE-2026-41606"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T06:00:58+00:00", "cve": "CVE-2026-41605", "id": "CVE-2026-41605", "initial_release_date": "2026-04-28T09:20:44.319000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Apache Thrift: Apache Thrift: Integer Overflow or Wraparound Vulnerability", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41605.json", "version": "3", "product_status": {"fixed": 36, "known_affected": 13, "known_not_affected": 439}, "imported": 1787637658.0, "vulnerability_id": "CVE-2026-41605", "vulnerability_url": "/vuln/CVE-2026-41605"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T06:00:51+00:00", "cve": "CVE-2026-41604", "id": "CVE-2026-41604", "initial_release_date": "2026-04-28T09:20:13.996000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Apache Thrift: apache.com/apache/thrift: Apache Thrift: Out-of-bounds Read vulnerability", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41604.json", "version": "3", "product_status": {"fixed": 36, "known_affected": 13, "known_not_affected": 439}, "imported": 1787637651.0, "vulnerability_id": "CVE-2026-41604", "vulnerability_url": "/vuln/CVE-2026-41604"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T06:00:43+00:00", "cve": "CVE-2026-41603", "id": "CVE-2026-41603", "initial_release_date": "2026-04-28T09:19:40.564000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Apache Thrift: apache.com/apache/thrift: Apache Thrift: Security Bypass via Improper Certificate Hostname Validation", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41603.json", "version": "3", "product_status": {"fixed": 36, "known_affected": 13, "known_not_affected": 439}, "imported": 1787637643.0, "vulnerability_id": "CVE-2026-41603", "vulnerability_url": "/vuln/CVE-2026-41603"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T06:00:41+00:00", "cve": "CVE-2026-41602", "id": "CVE-2026-41602", "initial_release_date": "2026-04-28T09:19:06.646000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "github.com/apache/thrift: Apache Thrift: Integer Overflow in TFramedTransport Go implementation", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41602.json", "version": "3", "product_status": {"fixed": 48, "known_affected": 11, "known_not_affected": 647}, "imported": 1787637641.0, "vulnerability_id": "CVE-2026-41602", "vulnerability_url": "/vuln/CVE-2026-41602"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T06:00:16+00:00", "cve": "CVE-2025-7425", "id": "CVE-2025-7425", "initial_release_date": "2025-07-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "libxslt: libxml2: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-7425.json", "version": "3", "product_status": {"fixed": 633, "known_affected": 4, "known_not_affected": 12}, "imported": 1787637616.0, "vulnerability_id": "CVE-2025-7425", "vulnerability_url": "/vuln/CVE-2025-7425"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T06:00:09+00:00", "cve": "CVE-2025-5914", "id": "CVE-2025-5914", "initial_release_date": "2025-05-20T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-5914.json", "version": "3", "product_status": {"fixed": 679, "known_affected": 3, "known_not_affected": 14}, "imported": 1787637609.0, "vulnerability_id": "CVE-2025-5914", "vulnerability_url": "/vuln/CVE-2025-5914"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:59:34+00:00", "cve": "CVE-2025-61729", "id": "CVE-2025-61729", "initial_release_date": "2025-12-02T18:54:10.166000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-61729.json", "version": "3", "product_status": {"fixed": 8083, "known_affected": 431, "known_not_affected": 4939, "under_investigation": 2}, "imported": 1787637574.0, "vulnerability_id": "CVE-2025-61729", "vulnerability_url": "/vuln/CVE-2025-61729"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:59:19+00:00", "cve": "CVE-2026-34986", "id": "CVE-2026-34986", "initial_release_date": "2026-04-06T16:22:45.353000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34986.json", "version": "3", "product_status": {"fixed": 2740, "known_affected": 156, "known_not_affected": 13124, "under_investigation": 1}, "imported": 1787637559.0, "vulnerability_id": "CVE-2026-34986", "vulnerability_url": "/vuln/CVE-2026-34986"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:58:37+00:00", "cve": "CVE-2026-32285", "id": "CVE-2026-32285", "initial_release_date": "2026-03-26T19:40:51.837000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "github.com/buger/jsonparser: github.com/buger/jsonparser: Denial of Service via malformed JSON input", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32285.json", "version": "3", "product_status": {"fixed": 54, "known_affected": 7, "known_not_affected": 510}, "imported": 1787637517.0, "vulnerability_id": "CVE-2026-32285", "vulnerability_url": "/vuln/CVE-2026-32285"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:58:27+00:00", "cve": "CVE-2026-32280", "id": "CVE-2026-32280", "initial_release_date": "2026-04-08T01:06:58.595000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32280.json", "version": "3", "product_status": {"fixed": 3402, "known_affected": 166, "known_not_affected": 3360}, "imported": 1787637507.0, "vulnerability_id": "CVE-2026-32280", "vulnerability_url": "/vuln/CVE-2026-32280"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:58:13+00:00", "cve": "CVE-2026-25679", "id": "CVE-2026-25679", "initial_release_date": "2026-03-06T21:28:14.211000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "net/url: Incorrect parsing of IPv6 host literals in net/url", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25679.json", "version": "3", "product_status": {"fixed": 9367, "known_affected": 155, "known_not_affected": 4557, "under_investigation": 1}, "imported": 1787637493.0, "vulnerability_id": "CVE-2026-25679", "vulnerability_url": "/vuln/CVE-2026-25679"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:57:48+00:00", "cve": "CVE-2025-29786", "id": "CVE-2025-29786", "initial_release_date": "2025-03-17T13:15:32.836000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "github.com/expr-lang/expr: Memory Exhaustion in Expr Parser with Unrestricted Input", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-29786.json", "version": "3", "product_status": {"fixed": 71, "known_affected": 13, "known_not_affected": 49}, "imported": 1787637468.0, "vulnerability_id": "CVE-2025-29786", "vulnerability_url": "/vuln/CVE-2025-29786"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:57:04+00:00", "cve": "CVE-2025-13465", "id": "CVE-2025-13465", "initial_release_date": "2025-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "lodash: prototype pollution in _.unset and _.omit functions", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-13465.json", "version": "3", "product_status": {"fixed": 673, "known_affected": 303, "known_not_affected": 12232}, "imported": 1787637424.0, "vulnerability_id": "CVE-2025-13465", "vulnerability_url": "/vuln/CVE-2025-13465"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:56:54+00:00", "cve": "CVE-2025-22868", "id": "CVE-2025-22868", "initial_release_date": "2025-02-26T03:07:49.012000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-22868.json", "version": "3", "product_status": {"fixed": 2199, "known_affected": 93, "known_not_affected": 8426}, "imported": 1787637414.0, "vulnerability_id": "CVE-2025-22868", "vulnerability_url": "/vuln/CVE-2025-22868"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:56:48+00:00", "cve": "CVE-2025-6020", "id": "CVE-2025-6020", "initial_release_date": "2025-06-17T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "linux-pam: Linux-pam directory Traversal", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-6020.json", "version": "3", "product_status": {"fixed": 492, "known_not_affected": 31}, "imported": 1787637408.0, "vulnerability_id": "CVE-2025-6020", "vulnerability_url": "/vuln/CVE-2025-6020"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:56:29+00:00", "cve": "CVE-2025-61726", "id": "CVE-2025-61726", "initial_release_date": "2025-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-61726.json", "version": "3", "product_status": {"fixed": 10818, "known_affected": 443, "known_not_affected": 17238}, "imported": 1787637389.0, "vulnerability_id": "CVE-2025-61726", "vulnerability_url": "/vuln/CVE-2025-61726"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:56:17+00:00", "cve": "CVE-2025-48431", "id": "CVE-2025-48431", "initial_release_date": "2025-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Apache Thrift: c_glib: Apache Thrift c_glib: Denial of Service via specially crafted requests", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-48431.json", "version": "3", "product_status": {"fixed": 18, "known_affected": 20, "known_not_affected": 595}, "imported": 1787637377.0, "vulnerability_id": "CVE-2025-48431", "vulnerability_url": "/vuln/CVE-2025-48431"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:56:07+00:00", "cve": "CVE-2025-22874", "id": "CVE-2025-22874", "initial_release_date": "2025-06-11T16:42:52.856000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "crypto/x509: Usage of ExtKeyUsageAny disables policy validation in crypto/x509", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-22874.json", "version": "3", "product_status": {"fixed": 880, "known_affected": 57, "known_not_affected": 219}, "imported": 1787637367.0, "vulnerability_id": "CVE-2025-22874", "vulnerability_url": "/vuln/CVE-2025-22874"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:56:00+00:00", "cve": "CVE-2026-39820", "id": "CVE-2026-39820", "initial_release_date": "2026-05-07T19:41:19.854000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39820.json", "version": "3", "product_status": {"fixed": 267, "known_affected": 99, "known_not_affected": 2948, "under_investigation": 129}, "imported": 1787637360.0, "vulnerability_id": "CVE-2026-39820", "vulnerability_url": "/vuln/CVE-2026-39820"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:55:33+00:00", "cve": "CVE-2026-27145", "id": "CVE-2026-27145", "initial_release_date": "2026-06-02T22:01:36.954000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27145.json", "version": "3", "product_status": {"fixed": 633, "known_affected": 75, "known_not_affected": 2401}, "imported": 1787637333.0, "vulnerability_id": "CVE-2026-27145", "vulnerability_url": "/vuln/CVE-2026-27145"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:55:00+00:00", "cve": "CVE-2025-24928", "id": "CVE-2025-24928", "initial_release_date": "2025-02-18T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "libxml2: Stack-based buffer overflow in xmlSnprintfElements of libxml2", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24928.json", "version": "3", "product_status": {"fixed": 1267, "known_affected": 5, "known_not_affected": 3715}, "imported": 1787637300.0, "vulnerability_id": "CVE-2025-24928", "vulnerability_url": "/vuln/CVE-2025-24928"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:54:46+00:00", "cve": "CVE-2024-56171", "id": "CVE-2024-56171", "initial_release_date": "2024-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "libxml2: Use-After-Free in libxml2", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-56171.json", "version": "3", "product_status": {"fixed": 1267, "known_affected": 5, "known_not_affected": 3737}, "imported": 1787637286.0, "vulnerability_id": "CVE-2024-56171", "vulnerability_url": "/vuln/CVE-2024-56171"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:54:23+00:00", "cve": "CVE-2024-45338", "id": "CVE-2024-45338", "initial_release_date": "2024-12-18T20:38:22.660000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-45338.json", "version": "3", "product_status": {"fixed": 2836, "known_affected": 116, "known_not_affected": 16027}, "imported": 1787637263.0, "vulnerability_id": "CVE-2024-45338", "vulnerability_url": "/vuln/CVE-2024-45338"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:53:56+00:00", "cve": "CVE-2026-39822", "id": "CVE-2026-39822", "initial_release_date": "2026-07-08T15:46:27.199000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: Go os.Root: Symlink following vulnerability allows directory traversal", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39822.json", "version": "3", "product_status": {"fixed": 208, "known_affected": 21, "known_not_affected": 286}, "imported": 1787637236.0, "vulnerability_id": "CVE-2026-39822", "vulnerability_url": "/vuln/CVE-2026-39822"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:53:32+00:00", "cve": "CVE-2025-30204", "id": "CVE-2025-30204", "initial_release_date": "2025-03-21T21:42:01.382000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-30204.json", "version": "3", "product_status": {"fixed": 3850, "known_affected": 66, "known_not_affected": 11715}, "imported": 1787637212.0, "vulnerability_id": "CVE-2025-30204", "vulnerability_url": "/vuln/CVE-2025-30204"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:52:33+00:00", "cve": "CVE-2026-39821", "id": "CVE-2026-39821", "initial_release_date": "2026-05-22T15:01:21.462000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39821.json", "version": "3", "product_status": {"fixed": 1185, "known_affected": 211, "known_not_affected": 3255}, "imported": 1787637153.0, "vulnerability_id": "CVE-2026-39821", "vulnerability_url": "/vuln/CVE-2026-39821"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T05:48:19+00:00", "cve": "CVE-2025-47907", "id": "CVE-2025-47907", "initial_release_date": "2025-08-07T15:25:30.704000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "database/sql: Postgres Scan Race Condition", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-47907.json", "version": "3", "product_status": {"fixed": 5292, "known_affected": 158, "known_not_affected": 2262}, "imported": 1787636899.0, "vulnerability_id": "CVE-2025-47907", "vulnerability_url": "/vuln/CVE-2025-47907"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T05:46:32+00:00", "cve": "CVE-2025-55199", "id": "CVE-2025-55199", "initial_release_date": "2025-08-13T23:23:43.304000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "helm.sh/helm/v3: Helm Chart JSON Schema Denial of Service", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-55199.json", "version": "3", "product_status": {"fixed": 8, "known_affected": 97, "known_not_affected": 1318}, "imported": 1787636792.0, "vulnerability_id": "CVE-2025-55199", "vulnerability_url": "/vuln/CVE-2025-55199"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T05:42:43+00:00", "cve": "CVE-2025-68121", "id": "CVE-2025-68121", "initial_release_date": "2025-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-68121.json", "version": "3", "product_status": {"fixed": 7473, "known_affected": 194, "known_not_affected": 4387, "under_investigation": 42}, "imported": 1787636563.0, "vulnerability_id": "CVE-2025-68121", "vulnerability_url": "/vuln/CVE-2025-68121"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T05:41:17+00:00", "cve": "CVE-2025-61728", "id": "CVE-2025-61728", "initial_release_date": "2025-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-61728.json", "version": "3", "product_status": {"fixed": 7014, "known_affected": 110, "known_not_affected": 4132}, "imported": 1787636477.0, "vulnerability_id": "CVE-2025-61728", "vulnerability_url": "/vuln/CVE-2025-61728"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T05:40:25+00:00", "cve": "CVE-2026-26996", "id": "CVE-2026-26996", "initial_release_date": "2026-02-20T03:05:21.105000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "minimatch: minimatch: Denial of Service via specially crafted glob patterns", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-26996.json", "version": "3", "product_status": {"fixed": 765, "known_affected": 32, "known_not_affected": 5212}, "imported": 1787636425.0, "vulnerability_id": "CVE-2026-26996", "vulnerability_url": "/vuln/CVE-2026-26996"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T05:36:22+00:00", "cve": "CVE-2025-65637", "id": "CVE-2025-65637", "initial_release_date": "2025-12-04T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "github.com/sirupsen/logrus: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-65637.json", "version": "3", "product_status": {"fixed": 2257, "known_affected": 268, "known_not_affected": 22245}, "imported": 1787636182.0, "vulnerability_id": "CVE-2025-65637", "vulnerability_url": "/vuln/CVE-2025-65637"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T05:36:07+00:00", "cve": "CVE-2025-58068", "id": "CVE-2025-58068", "initial_release_date": "2025-08-29T21:12:24.534000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "python-eventlet: Eventlet HTTP request smuggling", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-58068.json", "version": "3", "product_status": {"fixed": 38, "known_affected": 5, "known_not_affected": 5642}, "imported": 1787636167.0, "vulnerability_id": "CVE-2025-58068", "vulnerability_url": "/vuln/CVE-2025-58068"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-25T05:32:41+00:00", "cve": "CVE-2025-58183", "id": "CVE-2025-58183", "initial_release_date": "2025-10-29T22:10:14.376000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: archive/tar: Unbounded allocation when parsing GNU sparse map", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-58183.json", "version": "3", "product_status": {"fixed": 8922, "known_affected": 128, "known_not_affected": 8347}, "imported": 1787635961.0, "vulnerability_id": "CVE-2025-58183", "vulnerability_url": "/vuln/CVE-2025-58183"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:22:32+00:00", "cve": "CVE-2026-67298", "id": "CVE-2026-67298", "initial_release_date": "2026-08-01T12:22:18.323000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "FreeRDP: FreeRDP: Denial of Service via integer underflow in RAIL channel handling", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-67298.json", "version": "3", "product_status": {"known_affected": 31}, "imported": 1787635352.0, "vulnerability_id": "CVE-2026-67298", "vulnerability_url": "/vuln/CVE-2026-67298"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:22:24+00:00", "cve": "CVE-2026-55192", "id": "CVE-2026-55192", "initial_release_date": "2026-08-19T17:51:19.479000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "FreeRDP: FreeRDP: Out-of-bounds read leads to memory disclosure or client crash", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-55192.json", "version": "3", "product_status": {"known_affected": 19, "known_not_affected": 12}, "imported": 1787635344.0, "vulnerability_id": "CVE-2026-55192", "vulnerability_url": "/vuln/CVE-2026-55192"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:22:18+00:00", "cve": "CVE-2026-44990", "id": "CVE-2026-44990", "initial_release_date": "2026-06-12T20:39:47.065000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44990.json", "version": "3", "product_status": {"fixed": 74, "known_affected": 5, "known_not_affected": 1624}, "imported": 1787635338.0, "vulnerability_id": "CVE-2026-44990", "vulnerability_url": "/vuln/CVE-2026-44990"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:22:15+00:00", "cve": "CVE-2026-27136", "id": "CVE-2026-27136", "initial_release_date": "2026-05-22T15:01:22.111000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27136.json", "version": "3", "product_status": {"fixed": 805, "known_affected": 254, "known_not_affected": 4413}, "imported": 1787635335.0, "vulnerability_id": "CVE-2026-27136", "vulnerability_url": "/vuln/CVE-2026-27136"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:22:10+00:00", "cve": "CVE-2026-25681", "id": "CVE-2026-25681", "initial_release_date": "2026-05-22T15:01:21.975000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25681.json", "version": "3", "product_status": {"fixed": 822, "known_affected": 315, "known_not_affected": 3206}, "imported": 1787635330.0, "vulnerability_id": "CVE-2026-25681", "vulnerability_url": "/vuln/CVE-2026-25681"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:19:28+00:00", "cve": "CVE-2025-12816", "id": "CVE-2025-12816", "initial_release_date": "2025-11-25T19:15:50.243000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-12816.json", "version": "3", "product_status": {"fixed": 460, "known_affected": 37, "known_not_affected": 2169}, "imported": 1787635168.0, "vulnerability_id": "CVE-2025-12816", "vulnerability_url": "/vuln/CVE-2025-12816"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:19:23+00:00", "cve": "CVE-2026-42044", "id": "CVE-2026-42044", "initial_release_date": "2026-04-24T17:49:49.517000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "axios: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42044.json", "version": "3", "product_status": {"fixed": 142, "known_affected": 45, "known_not_affected": 1655}, "imported": 1787635163.0, "vulnerability_id": "CVE-2026-42044", "vulnerability_url": "/vuln/CVE-2026-42044"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:19:18+00:00", "cve": "CVE-2025-53547", "id": "CVE-2025-53547", "initial_release_date": "2025-07-08T21:39:59.075000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "helm.sh/helm/v3: Helm Chart Code Execution", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-53547.json", "version": "3", "product_status": {"fixed": 97, "known_affected": 37, "known_not_affected": 2030}, "imported": 1787635158.0, "vulnerability_id": "CVE-2025-53547", "vulnerability_url": "/vuln/CVE-2025-53547"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:19:09+00:00", "cve": "CVE-2025-9288", "id": "CVE-2025-9288", "initial_release_date": "2025-08-20T21:59:44.728000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "sha.js: Missing type checks leading to hash rewind and passing on crafted data", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-9288.json", "version": "3", "product_status": {"fixed": 71, "known_affected": 15, "known_not_affected": 1305}, "imported": 1787635149.0, "vulnerability_id": "CVE-2025-9288", "vulnerability_url": "/vuln/CVE-2025-9288"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:19:03+00:00", "cve": "CVE-2025-9287", "id": "CVE-2025-9287", "initial_release_date": "2025-08-20T21:43:56.548000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "cipher-base: Cipher-base hash manipulation", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-9287.json", "version": "3", "product_status": {"fixed": 62, "known_affected": 25, "known_not_affected": 1128}, "imported": 1787635143.0, "vulnerability_id": "CVE-2025-9287", "vulnerability_url": "/vuln/CVE-2025-9287"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:18:45+00:00", "cve": "CVE-2026-43869", "id": "CVE-2026-43869", "initial_release_date": "2026-05-05T07:25:48.611000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Apache Thrift: Apache Thrift: Security bypass due to improper certificate validation", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43869.json", "version": "3", "product_status": {"fixed": 45, "known_affected": 15, "known_not_affected": 1057}, "imported": 1787635125.0, "vulnerability_id": "CVE-2026-43869", "vulnerability_url": "/vuln/CVE-2026-43869"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:18:28+00:00", "cve": "CVE-2026-33487", "id": "CVE-2026-33487", "initial_release_date": "2026-03-26T17:17:51.101000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "github.com/russellhaering/goxmldsig: goxmlsig: Integrity bypass due to incorrect XML Digital Signature validation via loop variable capture issue", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33487.json", "version": "3", "product_status": {"fixed": 32, "known_not_affected": 523}, "imported": 1787635108.0, "vulnerability_id": "CVE-2026-33487", "vulnerability_url": "/vuln/CVE-2026-33487"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:18:13+00:00", "cve": "CVE-2026-40175", "id": "CVE-2026-40175", "initial_release_date": "2026-04-10T19:23:52.285000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "axios: Axios: Remote Code Execution via Prototype Pollution escalation", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-40175.json", "version": "3", "product_status": {"fixed": 162, "known_affected": 11, "known_not_affected": 4880}, "imported": 1787635093.0, "vulnerability_id": "CVE-2026-40175", "vulnerability_url": "/vuln/CVE-2026-40175"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:18:03+00:00", "cve": "CVE-2026-25639", "id": "CVE-2026-25639", "initial_release_date": "2026-02-09T20:11:22.374000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "axios: Axios affected by Denial of Service via __proto__ Key in mergeConfig", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25639.json", "version": "3", "product_status": {"fixed": 170, "known_affected": 34, "known_not_affected": 3907}, "imported": 1787635083.0, "vulnerability_id": "CVE-2026-25639", "vulnerability_url": "/vuln/CVE-2026-25639"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:17:55+00:00", "cve": "CVE-2026-22029", "id": "CVE-2026-22029", "initial_release_date": "2026-01-10T02:42:32.736000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "@remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-22029.json", "version": "3", "product_status": {"fixed": 386, "known_affected": 62, "known_not_affected": 8671}, "imported": 1787635075.0, "vulnerability_id": "CVE-2026-22029", "vulnerability_url": "/vuln/CVE-2026-22029"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:16:55+00:00", "cve": "CVE-2026-33186", "id": "CVE-2026-33186", "initial_release_date": "2026-03-20T22:23:32.147000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33186.json", "version": "3", "product_status": {"fixed": 3260, "known_affected": 380, "known_not_affected": 35985}, "imported": 1787635015.0, "vulnerability_id": "CVE-2026-33186", "vulnerability_url": "/vuln/CVE-2026-33186"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:16:36+00:00", "cve": "CVE-2026-6322", "id": "CVE-2026-6322", "initial_release_date": "2026-05-05T10:29:16.378000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6322.json", "version": "3", "product_status": {"fixed": 583, "known_affected": 46, "known_not_affected": 5973}, "imported": 1787634996.0, "vulnerability_id": "CVE-2026-6322", "vulnerability_url": "/vuln/CVE-2026-6322"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:16:34+00:00", "cve": "CVE-2026-4740", "id": "CVE-2026-4740", "initial_release_date": "2026-04-07T14:00:35.240000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "rhacm: Open Cluster Management (OCM): Cross-cluster privilege escalation via improper Kubernetes client certificate renewal validation", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4740.json", "version": "3", "product_status": {"fixed": 20, "known_not_affected": 568, "under_investigation": 6}, "imported": 1787634994.0, "vulnerability_id": "CVE-2026-4740", "vulnerability_url": "/vuln/CVE-2026-4740"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:16:29+00:00", "cve": "CVE-2026-73086", "id": "CVE-2026-73086", "initial_release_date": "2026-08-11T16:46:23.024000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "nanoid: nanoid: Predictable ID generation due to integer overflow", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-73086.json", "version": "3", "product_status": {"fixed": 27, "known_affected": 94, "known_not_affected": 365}, "imported": 1787634989.0, "vulnerability_id": "CVE-2026-73086", "vulnerability_url": "/vuln/CVE-2026-73086"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:16:22+00:00", "cve": "CVE-2026-69153", "id": "CVE-2026-69153", "initial_release_date": "2026-08-03T16:56:25.733000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "postcss: PostCSS: Information disclosure via crafted sourceMappingURL", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69153.json", "version": "3", "product_status": {"fixed": 27, "known_affected": 57, "known_not_affected": 404}, "imported": 1787634982.0, "vulnerability_id": "CVE-2026-69153", "vulnerability_url": "/vuln/CVE-2026-69153"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:16:18+00:00", "cve": "CVE-2026-66808", "id": "CVE-2026-66808", "initial_release_date": "2026-08-06T20:21:07.177000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "hypershift-addon-operator: hypershift-addon-operator: unsanitized hub ConfigMap data passed as CLI arguments to privileged install Job (argument injection)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-66808.json", "version": "3", "product_status": {"fixed": 8, "known_not_affected": 244}, "imported": 1787634978.0, "vulnerability_id": "CVE-2026-66808", "vulnerability_url": "/vuln/CVE-2026-66808"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:16:12+00:00", "cve": "CVE-2026-66804", "id": "CVE-2026-66804", "initial_release_date": "2026-08-13T13:30:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "console: console: authenticated SSRF via /ansibletower allows arbitrary host access with full response disclosure", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-66804.json", "version": "3", "product_status": {"fixed": 8, "known_not_affected": 308}, "imported": 1787634972.0, "vulnerability_id": "CVE-2026-66804", "vulnerability_url": "/vuln/CVE-2026-66804"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:16:03+00:00", "cve": "CVE-2026-59869", "id": "CVE-2026-59869", "initial_release_date": "2026-07-08T15:15:54.675000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "js-yaml: js-yaml: Denial of Service via crafted YAML documents", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-59869.json", "version": "3", "product_status": {"fixed": 419, "known_affected": 61, "known_not_affected": 5057, "under_investigation": 73}, "imported": 1787634963.0, "vulnerability_id": "CVE-2026-59869", "vulnerability_url": "/vuln/CVE-2026-59869"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:15:58+00:00", "cve": "CVE-2026-46597", "id": "CVE-2026-46597", "initial_release_date": "2026-05-22T02:31:26.754000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46597.json", "version": "3", "product_status": {"fixed": 272, "known_affected": 183, "known_not_affected": 4413}, "imported": 1787634958.0, "vulnerability_id": "CVE-2026-46597", "vulnerability_url": "/vuln/CVE-2026-46597"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:15:56+00:00", "cve": "CVE-2026-42504", "id": "CVE-2026-42504", "initial_release_date": "2026-06-02T22:01:37.219000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42504.json", "version": "3", "product_status": {"fixed": 191, "known_affected": 98, "known_not_affected": 836, "under_investigation": 193}, "imported": 1787634956.0, "vulnerability_id": "CVE-2026-42504", "vulnerability_url": "/vuln/CVE-2026-42504"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:15:50+00:00", "cve": "CVE-2026-42499", "id": "CVE-2026-42499", "initial_release_date": "2026-05-07T19:41:18.615000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42499.json", "version": "3", "product_status": {"fixed": 246, "known_affected": 131, "known_not_affected": 2935, "under_investigation": 113}, "imported": 1787634950.0, "vulnerability_id": "CVE-2026-42499", "vulnerability_url": "/vuln/CVE-2026-42499"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:15:39+00:00", "cve": "CVE-2026-39832", "id": "CVE-2026-39832", "initial_release_date": "2026-05-22T02:31:26.660000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39832.json", "version": "3", "product_status": {"fixed": 939, "known_affected": 67, "known_not_affected": 641}, "imported": 1787634939.0, "vulnerability_id": "CVE-2026-39832", "vulnerability_url": "/vuln/CVE-2026-39832"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:15:31+00:00", "cve": "CVE-2026-39831", "id": "CVE-2026-39831", "initial_release_date": "2026-05-22T02:31:27.436000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39831.json", "version": "3", "product_status": {"fixed": 212, "known_affected": 180, "known_not_affected": 1343}, "imported": 1787634931.0, "vulnerability_id": "CVE-2026-39831", "vulnerability_url": "/vuln/CVE-2026-39831"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:15:23+00:00", "cve": "CVE-2026-13676", "id": "CVE-2026-13676", "initial_release_date": "2026-06-29T13:22:44.674000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-13676.json", "version": "3", "product_status": {"fixed": 319, "known_affected": 55, "known_not_affected": 4489}, "imported": 1787634923.0, "vulnerability_id": "CVE-2026-13676", "vulnerability_url": "/vuln/CVE-2026-13676"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:15:02+00:00", "cve": "CVE-2026-66805", "id": "CVE-2026-66805", "initial_release_date": "2026-08-10T20:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "console: console: stored DOM XSS via unescaped pod logs in document.write", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-66805.json", "version": "3", "product_status": {"fixed": 12, "known_not_affected": 424}, "imported": 1787634902.0, "vulnerability_id": "CVE-2026-66805", "vulnerability_url": "/vuln/CVE-2026-66805"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:14:44+00:00", "cve": "CVE-2026-44496", "id": "CVE-2026-44496", "initial_release_date": "2026-06-11T15:34:28.492000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44496.json", "version": "3", "product_status": {"fixed": 146, "known_affected": 25, "known_not_affected": 4651}, "imported": 1787634884.0, "vulnerability_id": "CVE-2026-44496", "vulnerability_url": "/vuln/CVE-2026-44496"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:14:36+00:00", "cve": "CVE-2026-44495", "id": "CVE-2026-44495", "initial_release_date": "2026-06-11T15:33:12.433000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "axios: Axios: Information disclosure due to prototype pollution vulnerability", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44495.json", "version": "3", "product_status": {"fixed": 161, "known_affected": 29, "known_not_affected": 7019}, "imported": 1787634876.0, "vulnerability_id": "CVE-2026-44495", "vulnerability_url": "/vuln/CVE-2026-44495"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:14:31+00:00", "cve": "CVE-2026-44494", "id": "CVE-2026-44494", "initial_release_date": "2026-06-11T15:32:03.155000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44494.json", "version": "3", "product_status": {"fixed": 168, "known_affected": 24, "known_not_affected": 7411}, "imported": 1787634871.0, "vulnerability_id": "CVE-2026-44494", "vulnerability_url": "/vuln/CVE-2026-44494"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:14:20+00:00", "cve": "CVE-2026-44492", "id": "CVE-2026-44492", "initial_release_date": "2026-06-11T15:29:13.890000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44492.json", "version": "3", "product_status": {"fixed": 155, "known_affected": 23, "known_not_affected": 4866}, "imported": 1787634860.0, "vulnerability_id": "CVE-2026-44492", "vulnerability_url": "/vuln/CVE-2026-44492"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:14:09+00:00", "cve": "CVE-2026-44488", "id": "CVE-2026-44488", "initial_release_date": "2026-06-11T15:37:38.013000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "axios: Axios: Denial of Service due to unenforced request and response size limits", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44488.json", "version": "3", "product_status": {"fixed": 163, "known_affected": 23, "known_not_affected": 7018}, "imported": 1787634849.0, "vulnerability_id": "CVE-2026-44488", "vulnerability_url": "/vuln/CVE-2026-44488"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:14:02+00:00", "cve": "CVE-2026-44487", "id": "CVE-2026-44487", "initial_release_date": "2026-06-11T15:38:25.150000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "axios: Axios: Information disclosure of proxy credentials via redirect flows", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44487.json", "version": "3", "product_status": {"fixed": 162, "known_affected": 23, "known_not_affected": 7149}, "imported": 1787634842.0, "vulnerability_id": "CVE-2026-44487", "vulnerability_url": "/vuln/CVE-2026-44487"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:13:56+00:00", "cve": "CVE-2026-44486", "id": "CVE-2026-44486", "initial_release_date": "2026-06-11T15:39:07.714000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44486.json", "version": "3", "product_status": {"fixed": 156, "known_affected": 24, "known_not_affected": 5726}, "imported": 1787634836.0, "vulnerability_id": "CVE-2026-44486", "vulnerability_url": "/vuln/CVE-2026-44486"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:13:23+00:00", "cve": "CVE-2026-39835", "id": "CVE-2026-39835", "initial_release_date": "2026-05-22T02:31:26.982000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39835.json", "version": "3", "product_status": {"fixed": 853, "known_affected": 92, "known_not_affected": 2046}, "imported": 1787634803.0, "vulnerability_id": "CVE-2026-39835", "vulnerability_url": "/vuln/CVE-2026-39835"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:13:14+00:00", "cve": "CVE-2026-39830", "id": "CVE-2026-39830", "initial_release_date": "2026-05-22T02:31:27.208000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39830.json", "version": "3", "product_status": {"fixed": 979, "known_affected": 123, "known_not_affected": 1248}, "imported": 1787634794.0, "vulnerability_id": "CVE-2026-39830", "vulnerability_url": "/vuln/CVE-2026-39830"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:13:10+00:00", "cve": "CVE-2026-39829", "id": "CVE-2026-39829", "initial_release_date": "2026-05-22T02:31:27.324000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39829.json", "version": "3", "product_status": {"fixed": 1057, "known_affected": 111, "known_not_affected": 2580, "under_investigation": 2}, "imported": 1787634790.0, "vulnerability_id": "CVE-2026-39829", "vulnerability_url": "/vuln/CVE-2026-39829"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:13:06+00:00", "cve": "CVE-2026-39828", "id": "CVE-2026-39828", "initial_release_date": "2026-05-22T02:31:26.883000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39828.json", "version": "3", "product_status": {"fixed": 427, "known_affected": 93, "known_not_affected": 2274}, "imported": 1787634786.0, "vulnerability_id": "CVE-2026-39828", "vulnerability_url": "/vuln/CVE-2026-39828"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:12:48+00:00", "cve": "CVE-2026-29181", "id": "CVE-2026-29181", "initial_release_date": "2026-04-07T20:29:13.933000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "github.com/open-telemetry/opentelemetry-go: OpenTelemetry-Go: Denial of Service via crafted multi-value baggage headers", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-29181.json", "version": "3", "product_status": {"fixed": 8, "known_affected": 14, "known_not_affected": 229, "under_investigation": 1}, "imported": 1787634768.0, "vulnerability_id": "CVE-2026-29181", "vulnerability_url": "/vuln/CVE-2026-29181"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:12:00+00:00", "cve": "CVE-2026-17107", "id": "CVE-2026-17107", "initial_release_date": "2026-07-24T18:49:48.386000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "cluster-proxy: cluster-proxy: Impersonation header injection in service-proxy grants cluster-admin on every managed cluster", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-17107.json", "version": "3", "product_status": {"fixed": 24, "known_not_affected": 704}, "imported": 1787634720.0, "vulnerability_id": "CVE-2026-17107", "vulnerability_url": "/vuln/CVE-2026-17107"}, {"meta_source": "redhat_vex", "aggregate_severity": "Critical", "current_release_date": "2026-08-25T05:11:50+00:00", "cve": "CVE-2026-16242", "id": "CVE-2026-16242", "initial_release_date": "2026-07-17T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "hypershift: Konnectivity proxy-server accepts agent connections without validating client certificates", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-16242.json", "version": "3", "product_status": {"fixed": 52, "known_affected": 3, "known_not_affected": 4088}, "imported": 1787634710.0, "vulnerability_id": "CVE-2026-16242", "vulnerability_url": "/vuln/CVE-2026-16242"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-25T05:11:36+00:00", "cve": "CVE-2026-29063", "id": "CVE-2026-29063", "initial_release_date": "2026-03-06T18:25:22.438000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-29063.json", "version": "3", "product_status": {"fixed": 498, "known_affected": 34, "known_not_affected": 12737}, "imported": 1787634696.0, "vulnerability_id": "CVE-2026-29063", "vulnerability_url": "/vuln/CVE-2026-29063"}]}