{"metadata": {"count": 287138, "page": 1, "per_page": 50}, "data": [{"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-09T07:25:12+00:00", "cve": "CVE-2026-71438", "id": "CVE-2026-71438", "initial_release_date": "2026-08-06T19:59:07.450000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mermaid: Mermaid: Prototype pollution vulnerability via configuration APIs", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-71438.json", "version": "3", "product_status": {"known_affected": 3}, "imported": 1786260312.0, "vulnerability_id": "CVE-2026-71438", "vulnerability_url": "/vuln/CVE-2026-71438"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-09T07:20:32+00:00", "cve": "CVE-2026-71437", "id": "CVE-2026-71437", "initial_release_date": "2026-08-06T19:51:52.975000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mermaid: Mermaid: Prototype pollution vulnerability allows potential arbitrary code execution", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-71437.json", "version": "3", "product_status": {"known_affected": 3}, "imported": 1786260032.0, "vulnerability_id": "CVE-2026-71437", "vulnerability_url": "/vuln/CVE-2026-71437"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-09T06:32:35+00:00", "cve": "CVE-2026-32282", "id": "CVE-2026-32282", "initial_release_date": "2026-04-08T01:06:55.953000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32282.json", "version": "3", "product_status": {"fixed": 1424, "known_affected": 183, "known_not_affected": 1958}, "imported": 1786257155.0, "vulnerability_id": "CVE-2026-32282", "vulnerability_url": "/vuln/CVE-2026-32282"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-09T06:32:03+00:00", "cve": "CVE-2026-32281", "id": "CVE-2026-32281", "initial_release_date": "2026-04-08T01:06:58.354000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32281.json", "version": "3", "product_status": {"fixed": 1871, "known_affected": 237, "known_not_affected": 1813}, "imported": 1786257123.0, "vulnerability_id": "CVE-2026-32281", "vulnerability_url": "/vuln/CVE-2026-32281"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-09T06:31:54+00:00", "cve": "CVE-2025-65637", "id": "CVE-2025-65637", "initial_release_date": "2025-12-04T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "github.com/sirupsen/logrus: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-65637.json", "version": "3", "product_status": {"fixed": 2257, "known_affected": 268, "known_not_affected": 22245}, "imported": 1786257114.0, "vulnerability_id": "CVE-2025-65637", "vulnerability_url": "/vuln/CVE-2025-65637"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-09T06:31:13+00:00", "cve": "CVE-2025-61728", "id": "CVE-2025-61728", "initial_release_date": "2025-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-61728.json", "version": "3", "product_status": {"fixed": 7014, "known_affected": 110, "known_not_affected": 4132}, "imported": 1786257073.0, "vulnerability_id": "CVE-2025-61728", "vulnerability_url": "/vuln/CVE-2025-61728"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-09T06:30:56+00:00", "cve": "CVE-2025-58183", "id": "CVE-2025-58183", "initial_release_date": "2025-10-29T22:10:14.376000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: archive/tar: Unbounded allocation when parsing GNU sparse map", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-58183.json", "version": "3", "product_status": {"fixed": 8914, "known_affected": 126, "known_not_affected": 8335}, "imported": 1786257056.0, "vulnerability_id": "CVE-2025-58183", "vulnerability_url": "/vuln/CVE-2025-58183"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-09T06:30:35+00:00", "cve": "CVE-2025-22866", "id": "CVE-2025-22866", "initial_release_date": "2025-02-06T16:54:10.252000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "crypto/internal/nistec: golang: Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-22866.json", "version": "3", "product_status": {"fixed": 247, "known_affected": 406, "known_not_affected": 513}, "imported": 1786257035.0, "vulnerability_id": "CVE-2025-22866", "vulnerability_url": "/vuln/CVE-2025-22866"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-09T06:30:22+00:00", "cve": "CVE-2024-45336", "id": "CVE-2024-45336", "initial_release_date": "2024-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: net/http: net/http: sensitive headers incorrectly sent after cross-domain redirect", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-45336.json", "version": "3", "product_status": {"fixed": 341, "known_affected": 524, "known_not_affected": 438}, "imported": 1786257022.0, "vulnerability_id": "CVE-2024-45336", "vulnerability_url": "/vuln/CVE-2024-45336"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-09T06:30:01+00:00", "cve": "CVE-2026-33811", "id": "CVE-2026-33811", "initial_release_date": "2026-05-07T19:41:19.285000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33811.json", "version": "3", "product_status": {"fixed": 722, "known_affected": 212, "known_not_affected": 2315, "under_investigation": 16}, "imported": 1786257001.0, "vulnerability_id": "CVE-2026-33811", "vulnerability_url": "/vuln/CVE-2026-33811"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-09T06:29:48+00:00", "cve": "CVE-2026-33810", "id": "CVE-2026-33810", "initial_release_date": "2026-04-08T01:06:56.546000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33810.json", "version": "3", "product_status": {"fixed": 135, "known_affected": 271, "known_not_affected": 939}, "imported": 1786256988.0, "vulnerability_id": "CVE-2026-33810", "vulnerability_url": "/vuln/CVE-2026-33810"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-09T06:29:46+00:00", "cve": "CVE-2026-33186", "id": "CVE-2026-33186", "initial_release_date": "2026-03-20T22:23:32.147000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33186.json", "version": "3", "product_status": {"fixed": 2954, "known_affected": 395, "known_not_affected": 34979}, "imported": 1786256986.0, "vulnerability_id": "CVE-2026-33186", "vulnerability_url": "/vuln/CVE-2026-33186"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-09T06:29:38+00:00", "cve": "CVE-2026-32280", "id": "CVE-2026-32280", "initial_release_date": "2026-04-08T01:06:58.595000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32280.json", "version": "3", "product_status": {"fixed": 3238, "known_affected": 172, "known_not_affected": 2960}, "imported": 1786256978.0, "vulnerability_id": "CVE-2026-32280", "vulnerability_url": "/vuln/CVE-2026-32280"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-09T06:29:25+00:00", "cve": "CVE-2026-27145", "id": "CVE-2026-27145", "initial_release_date": "2026-06-02T22:01:36.954000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27145.json", "version": "3", "product_status": {"fixed": 475, "known_affected": 83, "known_not_affected": 1558, "under_investigation": 24}, "imported": 1786256965.0, "vulnerability_id": "CVE-2026-27145", "vulnerability_url": "/vuln/CVE-2026-27145"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-09T06:29:23+00:00", "cve": "CVE-2026-27137", "id": "CVE-2026-27137", "initial_release_date": "2026-03-06T21:28:13.748000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27137.json", "version": "3", "product_status": {"fixed": 348, "known_affected": 134, "known_not_affected": 1145}, "imported": 1786256963.0, "vulnerability_id": "CVE-2026-27137", "vulnerability_url": "/vuln/CVE-2026-27137"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-09T06:29:07+00:00", "cve": "CVE-2026-27136", "id": "CVE-2026-27136", "initial_release_date": "2026-05-22T15:01:22.111000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27136.json", "version": "3", "product_status": {"fixed": 501, "known_affected": 278, "known_not_affected": 2659}, "imported": 1786256947.0, "vulnerability_id": "CVE-2026-27136", "vulnerability_url": "/vuln/CVE-2026-27136"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-09T06:28:57+00:00", "cve": "CVE-2026-25679", "id": "CVE-2026-25679", "initial_release_date": "2026-03-06T21:28:14.211000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "net/url: Incorrect parsing of IPv6 host literals in net/url", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25679.json", "version": "3", "product_status": {"fixed": 9286, "known_affected": 164, "known_not_affected": 4344, "under_investigation": 1}, "imported": 1786256937.0, "vulnerability_id": "CVE-2026-25679", "vulnerability_url": "/vuln/CVE-2026-25679"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-09T06:28:46+00:00", "cve": "CVE-2025-66506", "id": "CVE-2025-66506", "initial_release_date": "2025-12-04T22:04:41.637000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "github.com/sigstore/fulcio: Fulcio: Denial of Service via crafted OpenID Connect (OIDC) token", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-66506.json", "version": "3", "product_status": {"fixed": 329, "known_affected": 63, "known_not_affected": 1294}, "imported": 1786256926.0, "vulnerability_id": "CVE-2025-66506", "vulnerability_url": "/vuln/CVE-2025-66506"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-09T06:28:42+00:00", "cve": "CVE-2025-66418", "id": "CVE-2025-66418", "initial_release_date": "2025-12-05T16:02:15.271000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-66418.json", "version": "3", "product_status": {"fixed": 1941, "known_affected": 413, "known_not_affected": 2590, "under_investigation": 1}, "imported": 1786256922.0, "vulnerability_id": "CVE-2025-66418", "vulnerability_url": "/vuln/CVE-2025-66418"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-09T06:28:29+00:00", "cve": "CVE-2025-61729", "id": "CVE-2025-61729", "initial_release_date": "2025-12-02T18:54:10.166000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-61729.json", "version": "3", "product_status": {"fixed": 7920, "known_affected": 434, "known_not_affected": 4688, "under_investigation": 2}, "imported": 1786256909.0, "vulnerability_id": "CVE-2025-61729", "vulnerability_url": "/vuln/CVE-2025-61729"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-09T06:28:11+00:00", "cve": "CVE-2025-61726", "id": "CVE-2025-61726", "initial_release_date": "2025-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-61726.json", "version": "3", "product_status": {"fixed": 10572, "known_affected": 449, "known_not_affected": 16985}, "imported": 1786256891.0, "vulnerability_id": "CVE-2025-61726", "vulnerability_url": "/vuln/CVE-2025-61726"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-09T06:28:05+00:00", "cve": "CVE-2025-52881", "id": "CVE-2025-52881", "initial_release_date": "2025-11-05T09:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-52881.json", "version": "3", "product_status": {"fixed": 2384, "known_affected": 44, "known_not_affected": 4070}, "imported": 1786256885.0, "vulnerability_id": "CVE-2025-52881", "vulnerability_url": "/vuln/CVE-2025-52881"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-09T06:27:56+00:00", "cve": "CVE-2025-30204", "id": "CVE-2025-30204", "initial_release_date": "2025-03-21T21:42:01.382000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-30204.json", "version": "3", "product_status": {"fixed": 3041, "known_affected": 76, "known_not_affected": 11728}, "imported": 1786256876.0, "vulnerability_id": "CVE-2025-30204", "vulnerability_url": "/vuln/CVE-2025-30204"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-09T06:27:54+00:00", "cve": "CVE-2025-22869", "id": "CVE-2025-22869", "initial_release_date": "2025-02-26T03:07:48.855000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-22869.json", "version": "3", "product_status": {"fixed": 2839, "known_affected": 53, "known_not_affected": 6259, "under_investigation": 1}, "imported": 1786256874.0, "vulnerability_id": "CVE-2025-22869", "vulnerability_url": "/vuln/CVE-2025-22869"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-09T06:27:53+00:00", "cve": "CVE-2025-22868", "id": "CVE-2025-22868", "initial_release_date": "2025-02-26T03:07:49.012000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-22868.json", "version": "3", "product_status": {"fixed": 1996, "known_affected": 93, "known_not_affected": 8426}, "imported": 1786256873.0, "vulnerability_id": "CVE-2025-22868", "vulnerability_url": "/vuln/CVE-2025-22868"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-09T06:27:47+00:00", "cve": "CVE-2025-12816", "id": "CVE-2025-12816", "initial_release_date": "2025-11-25T19:15:50.243000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-12816.json", "version": "3", "product_status": {"fixed": 460, "known_affected": 37, "known_not_affected": 2169}, "imported": 1786256867.0, "vulnerability_id": "CVE-2025-12816", "vulnerability_url": "/vuln/CVE-2025-12816"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-09T06:24:53+00:00", "cve": "CVE-2026-33813", "id": "CVE-2026-33813", "initial_release_date": "2026-04-21T19:21:27.644000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/image: golang: golang.org/x/image: Denial of Service via malformed WEBP image parsing", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33813.json", "version": "3", "product_status": {"fixed": 30, "known_affected": 14, "known_not_affected": 145}, "imported": 1786256693.0, "vulnerability_id": "CVE-2026-33813", "vulnerability_url": "/vuln/CVE-2026-33813"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-09T06:17:28+00:00", "cve": "CVE-2024-24786", "id": "CVE-2024-24786", "initial_release_date": "2024-03-05T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-24786.json", "version": "3", "product_status": {"fixed": 2132, "known_affected": 114, "known_not_affected": 11938, "under_investigation": 56}, "imported": 1786256248.0, "vulnerability_id": "CVE-2024-24786", "vulnerability_url": "/vuln/CVE-2024-24786"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-09T06:17:28+00:00", "cve": "CVE-2022-30631", "id": "CVE-2022-30631", "initial_release_date": "2022-07-12T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: compress/gzip: stack exhaustion in Reader.Read", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-30631.json", "version": "3", "product_status": {"fixed": 4253, "known_affected": 91, "known_not_affected": 2159}, "imported": 1786256248.0, "vulnerability_id": "CVE-2022-30631", "vulnerability_url": "/vuln/CVE-2022-30631"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-09T06:14:57+00:00", "cve": "CVE-2021-20329", "id": "CVE-2021-20329", "initial_release_date": "2021-03-30T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mongo-go-driver: specific cstrings input may not be properly validated", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-20329.json", "version": "3", "product_status": {"fixed": 252, "known_affected": 68, "known_not_affected": 3782}, "imported": 1786256097.0, "vulnerability_id": "CVE-2021-20329", "vulnerability_url": "/vuln/CVE-2021-20329"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-09T06:10:18+00:00", "cve": "CVE-2024-40635", "id": "CVE-2024-40635", "initial_release_date": "2024-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "containerd: containerd has an integer overflow in User ID handling", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-40635.json", "version": "3", "product_status": {"fixed": 108, "known_affected": 51, "known_not_affected": 16}, "imported": 1786255818.0, "vulnerability_id": "CVE-2024-40635", "vulnerability_url": "/vuln/CVE-2024-40635"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-09T06:07:04+00:00", "cve": "CVE-2025-68121", "id": "CVE-2025-68121", "initial_release_date": "2025-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-68121.json", "version": "3", "product_status": {"fixed": 7462, "known_affected": 203, "known_not_affected": 3983, "under_investigation": 43}, "imported": 1786255624.0, "vulnerability_id": "CVE-2025-68121", "vulnerability_url": "/vuln/CVE-2025-68121"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-09T06:03:16+00:00", "cve": "CVE-2023-39325", "id": "CVE-2023-39325", "initial_release_date": "2023-10-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-39325.json", "version": "3", "product_status": {"fixed": 4828, "known_affected": 236, "known_not_affected": 30354}, "imported": 1786255396.0, "vulnerability_id": "CVE-2023-39325", "vulnerability_url": "/vuln/CVE-2023-39325"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-09T06:03:04+00:00", "cve": "CVE-2025-22871", "id": "CVE-2025-22871", "initial_release_date": "2025-04-08T20:04:34.769000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "net/http: Request smuggling due to acceptance of invalid chunked data in net/http", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-22871.json", "version": "3", "product_status": {"fixed": 6754, "known_affected": 62, "known_not_affected": 4564}, "imported": 1786255384.0, "vulnerability_id": "CVE-2025-22871", "vulnerability_url": "/vuln/CVE-2025-22871"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-09T05:57:42+00:00", "cve": "CVE-2026-44990", "id": "CVE-2026-44990", "initial_release_date": "2026-06-12T20:39:47.065000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44990.json", "version": "3", "product_status": {"fixed": 66, "known_affected": 5, "known_not_affected": 1316}, "imported": 1786255062.0, "vulnerability_id": "CVE-2026-44990", "vulnerability_url": "/vuln/CVE-2026-44990"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-09T05:57:28+00:00", "cve": "CVE-2026-42504", "id": "CVE-2026-42504", "initial_release_date": "2026-06-02T22:01:37.219000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42504.json", "version": "3", "product_status": {"fixed": 134, "known_affected": 102, "known_not_affected": 466, "under_investigation": 203}, "imported": 1786255048.0, "vulnerability_id": "CVE-2026-42504", "vulnerability_url": "/vuln/CVE-2026-42504"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-09T05:57:20+00:00", "cve": "CVE-2026-42499", "id": "CVE-2026-42499", "initial_release_date": "2026-05-07T19:41:18.615000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42499.json", "version": "3", "product_status": {"fixed": 139, "known_affected": 146, "known_not_affected": 783, "under_investigation": 116}, "imported": 1786255040.0, "vulnerability_id": "CVE-2026-42499", "vulnerability_url": "/vuln/CVE-2026-42499"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-09T05:57:13+00:00", "cve": "CVE-2026-42154", "id": "CVE-2026-42154", "initial_release_date": "2026-05-04T18:13:12.340000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42154.json", "version": "3", "product_status": {"fixed": 214, "known_affected": 40, "known_not_affected": 3858}, "imported": 1786255033.0, "vulnerability_id": "CVE-2026-42154", "vulnerability_url": "/vuln/CVE-2026-42154"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-09T05:57:05+00:00", "cve": "CVE-2026-42151", "id": "CVE-2026-42151", "initial_release_date": "2026-05-04T18:12:16.917000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42151.json", "version": "3", "product_status": {"fixed": 209, "known_affected": 66, "known_not_affected": 1054}, "imported": 1786255025.0, "vulnerability_id": "CVE-2026-42151", "vulnerability_url": "/vuln/CVE-2026-42151"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-09T05:57:03+00:00", "cve": "CVE-2026-39820", "id": "CVE-2026-39820", "initial_release_date": "2026-05-07T19:41:19.854000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39820.json", "version": "3", "product_status": {"fixed": 143, "known_affected": 131, "known_not_affected": 791, "under_investigation": 131}, "imported": 1786255023.0, "vulnerability_id": "CVE-2026-39820", "vulnerability_url": "/vuln/CVE-2026-39820"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-09T05:56:52+00:00", "cve": "CVE-2026-34986", "id": "CVE-2026-34986", "initial_release_date": "2026-04-06T16:22:45.353000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34986.json", "version": "3", "product_status": {"fixed": 2403, "known_affected": 161, "known_not_affected": 12423, "under_investigation": 1}, "imported": 1786255012.0, "vulnerability_id": "CVE-2026-34986", "vulnerability_url": "/vuln/CVE-2026-34986"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-09T05:50:36+00:00", "cve": "CVE-2020-11023", "id": "CVE-2020-11023", "initial_release_date": "2020-04-29T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "jquery: Untrusted code execution via