VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
304216 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-93749 | redhat_vex | source-map-js: source-map-js: Denial of Service via malformed indexed source maps | known affected: 101 known not affected: 76 | 2026-10-02T16:45:55+00:00 | Vulnerability · Source |
| CVE-2026-93748 | redhat_vex | http-cache-semantics: http-cache-semantics: Information Disclosure via max-stale directive | known affected: 203 known not affected: 11 | 2026-10-02T16:45:50+00:00 | Vulnerability · Source |
| CVE-2026-93355 | redhat_vex | litellm: LiteLLM: Privilege escalation via unverified email lookup in JWT authentication | known affected: 7 known not affected: 1 | 2026-10-02T16:45:45+00:00 | Vulnerability · Source |
| CVE-2026-92609 | redhat_vex | apache-qpid-broker-j: org.apache.qpid/qpid-broker-plugins-management-http: Apache Qpid Broker-J: Unauthorized management session access via session fixation | known not affected: 1 | 2026-10-02T16:45:43+00:00 | Vulnerability · Source |
| CVE-2026-92564 | redhat_vex | org.apache.qpid/qpid-broker-plugins-amqp-0-8-protocol: Apache Qpid Broker-J: Denial of Service via unbounded type nesting | known not affected: 1 | 2026-10-02T16:45:38+00:00 | Vulnerability · Source |
| CVE-2026-92560 | redhat_vex | org.apache.qpid/qpid-broker-plugins-amqp-0-10-protocol: Apache Qpid Broker-J: Denial of Service via excessive memory allocation in AMQP 0-10 decoder | known not affected: 1 | 2026-10-02T16:45:32+00:00 | Vulnerability · Source |
| CVE-2026-92550 | redhat_vex | qpid-java: org.apache.qpid/qpid-broker-plugins-amqp-0-8-protocol: Apache Qpid Broker-J: Denial of Service via excessive memory allocation in AMQP decoder | known not affected: 1 | 2026-10-02T16:45:26+00:00 | Vulnerability · Source |
| CVE-2026-91866 | redhat_vex | Neethi: Neethi: Denial of Service via crafted WS-Policy documents | known affected: 9 known not affected: 1 | 2026-10-02T16:45:19+00:00 | Vulnerability · Source |
| CVE-2026-91865 | redhat_vex | org.apache.neethi/neethi: Apache Neethi: Denial of Service via crafted WS-Policy documents | known affected: 9 known not affected: 1 | 2026-10-02T16:45:14+00:00 | Vulnerability · Source |
| CVE-2026-91864 | redhat_vex | org.apache.neethi/neethi: Apache Neethi: Denial of Service via crafted WS-Policy documents | known affected: 9 known not affected: 1 | 2026-10-02T16:45:09+00:00 | Vulnerability · Source |
| CVE-2026-91863 | redhat_vex | org.apache.neethi/neethi: Apache Neethi: Denial of Service via uncontrolled recursion in WS-Policy document parsing | known affected: 9 known not affected: 1 | 2026-10-02T16:45:04+00:00 | Vulnerability · Source |
| CVE-2026-91012 | redhat_vex | org.apache.karaf.config/org.apache.karaf.config.core: Apache Karaf: Privilege escalation via path traversal in configuration service | known not affected: 1 | 2026-10-02T16:44:59+00:00 | Vulnerability · Source |
| CVE-2026-91006 | redhat_vex | org.apache.karaf.instance/org.apache.karaf.instance.core: karaf: Apache Karaf: Arbitrary command execution via unquoted instance options | known not affected: 1 | 2026-10-02T16:44:56+00:00 | Vulnerability · Source |
| CVE-2026-88920 | redhat_vex | org.apache.wss4j/wss4j-ws-security-dom: Apache WSS4J: Authentication bypass via unsigned SAML sender-vouches assertion | known affected: 8 known not affected: 2 | 2026-10-02T16:44:44+00:00 | Vulnerability · Source |
| CVE-2026-85721 | redhat_vex | org.asynchttpclient/async-http-client: AsyncHttpClient: Denial of Service via unbounded HTTP response decompression | known not affected: 1 | 2026-10-02T16:44:42+00:00 | Vulnerability · Source |
| CVE-2026-85719 | redhat_vex | AsyncHttpClient: AsyncHttpClient: SOCKS proxy credentials exposed to origin server | known not affected: 1 | 2026-10-02T16:44:20+00:00 | Vulnerability · Source |
| CVE-2026-44740 | redhat_vex | github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation | fixed: 525 known affected: 100 known not affected: 2311 | 2026-10-02T16:40:32+00:00 | Vulnerability · Source |
| CVE-2026-71556 | redhat_vex | github.com/go-git/go-git/v5: go-git: Arbitrary file read/write via symbolic link resolution | fixed: 232 known affected: 122 known not affected: 1699 | 2026-10-02T16:37:08+00:00 | Vulnerability · Source |
| CVE-2026-56853 | redhat_vex | net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service | fixed: 2408 known affected: 258 known not affected: 2081 | 2026-10-02T16:36:26+00:00 | Vulnerability · Source |
| CVE-2026-32283 | redhat_vex | crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages | fixed: 3227 known affected: 156 known not affected: 3391 | 2026-10-02T16:16:49+00:00 | Vulnerability · Source |
| CVE-2026-25679 | redhat_vex | net/url: Incorrect parsing of IPv6 host literals in net/url | fixed: 10127 known affected: 141 known not affected: 5772 under investigation: 1 | 2026-10-02T16:16:36+00:00 | Vulnerability · Source |
| CVE-2025-66506 | redhat_vex | github.com/sigstore/fulcio: Fulcio: Denial of Service via crafted OpenID Connect (OIDC) token | fixed: 329 known affected: 42 known not affected: 1297 | 2026-10-02T16:16:21+00:00 | Vulnerability · Source |
| CVE-2025-64756 | redhat_vex | glob: glob: Command Injection Vulnerability via Malicious Filenames | fixed: 171 known affected: 115 known not affected: 1099 | 2026-10-02T16:15:27+00:00 | Vulnerability · Source |
| CVE-2025-52881 | redhat_vex | runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects | fixed: 2419 known affected: 40 known not affected: 4478 | 2026-10-02T16:13:36+00:00 | Vulnerability · Source |
| CVE-2025-30204 | redhat_vex | golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing | fixed: 3866 known affected: 68 known not affected: 13220 | 2026-10-02T16:12:53+00:00 | Vulnerability · Source |
| CVE-2025-22869 | redhat_vex | golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh | fixed: 2839 known affected: 57 known not affected: 6263 under investigation: 1 | 2026-10-02T16:12:38+00:00 | Vulnerability · Source |
| CVE-2025-22868 | redhat_vex | golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws | fixed: 2199 known affected: 93 known not affected: 8426 | 2026-10-02T16:12:34+00:00 | Vulnerability · Source |
| CVE-2025-13465 | redhat_vex | lodash: prototype pollution in _.unset and _.omit functions | fixed: 677 known affected: 303 known not affected: 12886 | 2026-10-02T16:12:19+00:00 | Vulnerability · Source |
| CVE-2023-39325 | redhat_vex | golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) | fixed: 6046 known affected: 223 known not affected: 30360 | 2026-10-02T15:57:41+00:00 | Vulnerability · Source |
| CVE-2026-33871 | redhat_vex | netty: Netty: Denial of Service via HTTP/2 CONTINUATION frame flood | fixed: 69 known affected: 51 known not affected: 3755 | 2026-10-02T15:40:05+00:00 | Vulnerability · Source |
| CVE-2026-33870 | redhat_vex | io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values | fixed: 69 known affected: 31 known not affected: 3190 | 2026-10-02T15:39:47+00:00 | Vulnerability · Source |
| CVE-2020-11023 | redhat_vex | jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods | fixed: 5510 known affected: 169 known not affected: 3184 | 2026-10-02T15:33:56+00:00 | Vulnerability · Source |
| CVE-2026-2229 | redhat_vex | undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameter | fixed: 415 known affected: 5 known not affected: 589 | 2026-10-02T15:33:43+00:00 | Vulnerability · Source |
| CVE-2026-1528 | redhat_vex | undici: undici: Denial of Service via crafted WebSocket frame with large length | fixed: 347 known affected: 5 known not affected: 576 | 2026-10-02T15:33:27+00:00 | Vulnerability · Source |
| CVE-2026-1526 | redhat_vex | undici: undici: Denial of Service via unbounded memory consumption during WebSocket permessage-deflate decompression | fixed: 415 known affected: 6 known not affected: 588 | 2026-10-02T15:33:03+00:00 | Vulnerability · Source |
| CVE-2026-24308 | redhat_vex | Apache ZooKeeper: Apache ZooKeeper: Information disclosure via improper handling of configuration values | fixed: 5 known affected: 7 known not affected: 770 | 2026-10-02T15:31:54+00:00 | Vulnerability · Source |
| CVE-2026-24281 | redhat_vex | Apache ZooKeeper: Apache ZooKeeper: Impersonation of servers or clients via reverse DNS spoofing | fixed: 5 known affected: 7 known not affected: 770 | 2026-10-02T15:31:11+00:00 | Vulnerability · Source |
| CVE-2026-1605 | redhat_vex | org.eclipse.jetty/jetty-server: Eclipse Jetty: Denial of Service due to unreleased JDK Inflater from compressed HTTP requests | fixed: 100 known affected: 1 known not affected: 2652 | 2026-10-02T15:30:30+00:00 | Vulnerability · Source |
| CVE-2021-47419 | redhat_vex | kernel: net/sched: sch_taprio: properly cancel timer from taprio_destroy() | known affected: 48 known not affected: 150 | 2026-10-02T15:12:31+00:00 | Vulnerability · Source |
| CVE-2025-43023 | redhat_vex | hplip: HP Linux Imaging and Printing Software - Use of DSA Key | known affected: 29 | 2026-10-02T15:07:41+00:00 | Vulnerability · Source |
| CVE-2021-47562 | redhat_vex | kernel: ice: fix vsi->txq_map sizing | known affected: 44 known not affected: 154 | 2026-10-02T15:07:40+00:00 | Vulnerability · Source |
| CVE-2021-47415 | redhat_vex | kernel: iwlwifi: mvm: Fix possible NULL dereference | known affected: 44 known not affected: 154 | 2026-10-02T15:07:31+00:00 | Vulnerability · Source |
| CVE-2021-47238 | redhat_vex | kernel: net: ipv4: fix memory leak in ip_mc_add1_src | known affected: 60 known not affected: 138 | 2026-10-02T15:07:24+00:00 | Vulnerability · Source |
| CVE-2021-47225 | redhat_vex | kernel: mac80211: fix deadlock in AP/VLAN handling | known affected: 90 known not affected: 108 | 2026-10-02T15:06:46+00:00 | Vulnerability · Source |
| CVE-2021-46973 | redhat_vex | kernel: net: qrtr: Avoid potential use after free in MHI send | known affected: 58 known not affected: 140 | 2026-10-02T15:06:45+00:00 | Vulnerability · Source |
| CVE-2021-47194 | redhat_vex | kernel: cfg80211: call cfg80211_stop_ap when switch from P2P_GO type | known affected: 58 known not affected: 140 | 2026-10-02T15:06:45+00:00 | Vulnerability · Source |
| CVE-2021-47167 | redhat_vex | kernel: NFS: Fix an Oopsable condition in __nfs_pageio_add_request() | known affected: 58 known not affected: 140 | 2026-10-02T15:06:45+00:00 | Vulnerability · Source |
| CVE-2026-43257 | redhat_vex | kernel: media: cx88: Add missing unmap in snd_cx88_hw_params() | known affected: 48 known not affected: 226 | 2026-10-02T14:45:53+00:00 | Vulnerability · Source |
| CVE-2026-43135 | redhat_vex | kernel: media: cx23885: Add missing unmap in snd_cx23885_hw_params() | known affected: 48 known not affected: 226 | 2026-10-02T14:45:50+00:00 | Vulnerability · Source |
| CVE-2026-43065 | redhat_vex | kernel: ext4: always drain queued discard work in ext4_mb_release() | known affected: 198 known not affected: 76 | 2026-10-02T14:45:46+00:00 | Vulnerability · Source |