VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
291265 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-74630 | redhat_vex | kernel: ipv6: prevent in6_dev_get() from resurrecting inet6_dev | known affected: 260 under investigation: 14 | 2026-08-25T06:02:57+00:00 | Vulnerability · Source |
| CVE-2026-74616 | redhat_vex | kernel: xdp: reject clones that overrun skb_shared_info tailroom | known affected: 232 known not affected: 42 | 2026-08-25T06:02:53+00:00 | Vulnerability · Source |
| CVE-2026-74615 | redhat_vex | kernel: vxlan: do not arm the ageing timer on a device that is down | known affected: 184 known not affected: 90 | 2026-08-25T06:02:49+00:00 | Vulnerability · Source |
| CVE-2026-74611 | redhat_vex | kernel: tls: rx: restore msg_iter before TLS 1.3 optimistic retry | known affected: 184 known not affected: 90 | 2026-08-25T06:02:47+00:00 | Vulnerability · Source |
| CVE-2026-74597 | redhat_vex | kernel: ip6_tunnel: clear skb2->cb[] in ip6ip6_err() | known affected: 260 under investigation: 14 | 2026-08-25T06:02:43+00:00 | Vulnerability · Source |
| CVE-2026-74588 | redhat_vex | kernel: sctp: keep chunk->transport in step with the list it is queued on | known affected: 260 under investigation: 14 | 2026-08-25T06:02:40+00:00 | Vulnerability · Source |
| CVE-2026-74586 | redhat_vex | kernel: sctp: clear new_transport when removing a peer | known affected: 260 under investigation: 14 | 2026-08-25T06:02:38+00:00 | Vulnerability · Source |
| CVE-2026-74582 | redhat_vex | kernel: packet: use consistent hard_header_len in non-ring send paths | known affected: 232 known not affected: 42 | 2026-08-25T06:02:35+00:00 | Vulnerability · Source |
| CVE-2026-74581 | redhat_vex | kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer | known affected: 232 known not affected: 42 | 2026-08-25T06:02:26+00:00 | Vulnerability · Source |
| CVE-2026-74580 | redhat_vex | kernel: vhost: reset the vring metadata cache on vring reconfiguration | known affected: 274 | 2026-08-25T06:02:22+00:00 | Vulnerability · Source |
| CVE-2026-41178 | redhat_vex | github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers | fixed: 8 known affected: 583 known not affected: 164 | 2026-08-25T06:02:16+00:00 | Vulnerability · Source |
| CVE-2026-33814 | redhat_vex | net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame | fixed: 275 known affected: 598 known not affected: 733 under investigation: 500 | 2026-08-25T06:02:06+00:00 | Vulnerability · Source |
| CVE-2026-33811 | redhat_vex | net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME | fixed: 913 known affected: 194 known not affected: 4084 under investigation: 5 | 2026-08-25T06:02:05+00:00 | Vulnerability · Source |
| CVE-2026-33810 | redhat_vex | crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application | fixed: 420 known affected: 231 known not affected: 1181 | 2026-08-25T06:01:55+00:00 | Vulnerability · Source |
| CVE-2026-21441 | redhat_vex | urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) | fixed: 1947 known affected: 385 known not affected: 2923 under investigation: 1 | 2026-08-25T06:01:50+00:00 | Vulnerability · Source |
| CVE-2025-66471 | redhat_vex | urllib3: urllib3 Streaming API improperly handles highly compressed data | fixed: 1957 known affected: 347 known not affected: 3325 under investigation: 1 | 2026-08-25T06:01:43+00:00 | Vulnerability · Source |
| CVE-2025-68156 | redhat_vex | github.com/expr-lang/expr: Expr: Denial of Service via uncontrolled recursion in expression evaluation | fixed: 180 known affected: 2 known not affected: 730 | 2026-08-25T06:01:38+00:00 | Vulnerability · Source |
| CVE-2025-64756 | redhat_vex | glob: glob: Command Injection Vulnerability via Malicious Filenames | fixed: 171 known affected: 115 known not affected: 1097 | 2026-08-25T06:01:28+00:00 | Vulnerability · Source |
| CVE-2025-66418 | redhat_vex | urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion | fixed: 1941 known affected: 413 known not affected: 2590 under investigation: 1 | 2026-08-25T06:01:23+00:00 | Vulnerability · Source |
| CVE-2026-41607 | redhat_vex | Apache Thrift: apache.com/apache/thrift: Apache Thrift: Out-of-bounds Read vulnerability | fixed: 36 known affected: 13 known not affected: 439 | 2026-08-25T06:01:06+00:00 | Vulnerability · Source |
| CVE-2026-41606 | redhat_vex | Apache Thrift: Apache Thrift: Denial of Service via uncontrolled recursion | fixed: 36 known affected: 13 known not affected: 439 | 2026-08-25T06:01:00+00:00 | Vulnerability · Source |
| CVE-2026-41605 | redhat_vex | Apache Thrift: Apache Thrift: Integer Overflow or Wraparound Vulnerability | fixed: 36 known affected: 13 known not affected: 439 | 2026-08-25T06:00:58+00:00 | Vulnerability · Source |
| CVE-2026-41604 | redhat_vex | Apache Thrift: apache.com/apache/thrift: Apache Thrift: Out-of-bounds Read vulnerability | fixed: 36 known affected: 13 known not affected: 439 | 2026-08-25T06:00:51+00:00 | Vulnerability · Source |
| CVE-2026-41603 | redhat_vex | Apache Thrift: apache.com/apache/thrift: Apache Thrift: Security Bypass via Improper Certificate Hostname Validation | fixed: 36 known affected: 13 known not affected: 439 | 2026-08-25T06:00:43+00:00 | Vulnerability · Source |
| CVE-2026-41602 | redhat_vex | github.com/apache/thrift: Apache Thrift: Integer Overflow in TFramedTransport Go implementation | fixed: 48 known affected: 11 known not affected: 647 | 2026-08-25T06:00:41+00:00 | Vulnerability · Source |
| CVE-2025-7425 | redhat_vex | libxslt: libxml2: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr | fixed: 633 known affected: 4 known not affected: 12 | 2026-08-25T06:00:16+00:00 | Vulnerability · Source |
| CVE-2025-5914 | redhat_vex | libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c | fixed: 679 known affected: 3 known not affected: 14 | 2026-08-25T06:00:09+00:00 | Vulnerability · Source |
| CVE-2025-61729 | redhat_vex | crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate | fixed: 8083 known affected: 431 known not affected: 4939 under investigation: 2 | 2026-08-25T05:59:34+00:00 | Vulnerability · Source |
| CVE-2026-34986 | redhat_vex | github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object | fixed: 2740 known affected: 156 known not affected: 13124 under investigation: 1 | 2026-08-25T05:59:19+00:00 | Vulnerability · Source |
| CVE-2026-32285 | redhat_vex | github.com/buger/jsonparser: github.com/buger/jsonparser: Denial of Service via malformed JSON input | fixed: 54 known affected: 7 known not affected: 510 | 2026-08-25T05:58:37+00:00 | Vulnerability · Source |
| CVE-2026-32280 | redhat_vex | crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building | fixed: 3402 known affected: 166 known not affected: 3360 | 2026-08-25T05:58:27+00:00 | Vulnerability · Source |
| CVE-2026-25679 | redhat_vex | net/url: Incorrect parsing of IPv6 host literals in net/url | fixed: 9367 known affected: 155 known not affected: 4557 under investigation: 1 | 2026-08-25T05:58:13+00:00 | Vulnerability · Source |
| CVE-2025-29786 | redhat_vex | github.com/expr-lang/expr: Memory Exhaustion in Expr Parser with Unrestricted Input | fixed: 71 known affected: 13 known not affected: 49 | 2026-08-25T05:57:48+00:00 | Vulnerability · Source |
| CVE-2025-13465 | redhat_vex | lodash: prototype pollution in _.unset and _.omit functions | fixed: 673 known affected: 303 known not affected: 12232 | 2026-08-25T05:57:04+00:00 | Vulnerability · Source |
| CVE-2025-22868 | redhat_vex | golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws | fixed: 2199 known affected: 93 known not affected: 8426 | 2026-08-25T05:56:54+00:00 | Vulnerability · Source |
| CVE-2025-6020 | redhat_vex | linux-pam: Linux-pam directory Traversal | fixed: 492 known not affected: 31 | 2026-08-25T05:56:48+00:00 | Vulnerability · Source |
| CVE-2025-61726 | redhat_vex | golang: net/url: Memory exhaustion in query parameter parsing in net/url | fixed: 10818 known affected: 443 known not affected: 17238 | 2026-08-25T05:56:29+00:00 | Vulnerability · Source |
| CVE-2025-48431 | redhat_vex | Apache Thrift: c_glib: Apache Thrift c_glib: Denial of Service via specially crafted requests | fixed: 18 known affected: 20 known not affected: 595 | 2026-08-25T05:56:17+00:00 | Vulnerability · Source |
| CVE-2025-22874 | redhat_vex | crypto/x509: Usage of ExtKeyUsageAny disables policy validation in crypto/x509 | fixed: 880 known affected: 57 known not affected: 219 | 2026-08-25T05:56:07+00:00 | Vulnerability · Source |
| CVE-2026-39820 | redhat_vex | net/mail: golang: Go net/mail: Denial of Service via crafted email inputs | fixed: 267 known affected: 99 known not affected: 2948 under investigation: 129 | 2026-08-25T05:56:00+00:00 | Vulnerability · Source |
| CVE-2026-27145 | redhat_vex | crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries | fixed: 633 known affected: 75 known not affected: 2401 | 2026-08-25T05:55:33+00:00 | Vulnerability · Source |
| CVE-2025-24928 | redhat_vex | libxml2: Stack-based buffer overflow in xmlSnprintfElements of libxml2 | fixed: 1267 known affected: 5 known not affected: 3715 | 2026-08-25T05:55:00+00:00 | Vulnerability · Source |
| CVE-2024-56171 | redhat_vex | libxml2: Use-After-Free in libxml2 | fixed: 1267 known affected: 5 known not affected: 3737 | 2026-08-25T05:54:46+00:00 | Vulnerability · Source |
| CVE-2024-45338 | redhat_vex | golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html | fixed: 2836 known affected: 116 known not affected: 16027 | 2026-08-25T05:54:23+00:00 | Vulnerability · Source |
| CVE-2026-39822 | redhat_vex | golang: Go os.Root: Symlink following vulnerability allows directory traversal | fixed: 208 known affected: 21 known not affected: 286 | 2026-08-25T05:53:56+00:00 | Vulnerability · Source |
| CVE-2025-30204 | redhat_vex | golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing | fixed: 3850 known affected: 66 known not affected: 11715 | 2026-08-25T05:53:32+00:00 | Vulnerability · Source |
| CVE-2026-39821 | redhat_vex | golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing | fixed: 1185 known affected: 211 known not affected: 3255 | 2026-08-25T05:52:33+00:00 | Vulnerability · Source |
| CVE-2025-47907 | redhat_vex | database/sql: Postgres Scan Race Condition | fixed: 5292 known affected: 158 known not affected: 2262 | 2026-08-25T05:48:19+00:00 | Vulnerability · Source |
| CVE-2025-55199 | redhat_vex | helm.sh/helm/v3: Helm Chart JSON Schema Denial of Service | fixed: 8 known affected: 97 known not affected: 1318 | 2026-08-25T05:46:32+00:00 | Vulnerability · Source |
| CVE-2025-68121 | redhat_vex | crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption | fixed: 7473 known affected: 194 known not affected: 4387 under investigation: 42 | 2026-08-25T05:42:43+00:00 | Vulnerability · Source |