VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
283119 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2025-14921 | redhat_vex | transformers: code execution when processing a malicious Transformer-XL model file | fixed: 39 known affected: 28 known not affected: 637 | 2026-07-21T09:56:05+00:00 | Vulnerability · Source |
| CVE-2025-14920 | redhat_vex | transformers: code execution when processing a malicious Perceiver model file | fixed: 40 known affected: 30 known not affected: 633 | 2026-07-21T09:56:01+00:00 | Vulnerability · Source |
| CVE-2026-59876 | redhat_vex | protobufjs: protobufjs: Prototype pollution vulnerability in Text Format extension | known not affected: 9 under investigation: 28 | 2026-07-21T09:46:20+00:00 | Vulnerability · Source |
| CVE-2026-59198 | redhat_vex | Pillow: Pillow: Information disclosure via TGA RLE encoder out-of-bounds read | known affected: 69 under investigation: 22 | 2026-07-21T09:42:17+00:00 | Vulnerability · Source |
| CVE-2025-65637 | redhat_vex | github.com/sirupsen/logrus: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload | fixed: 2037 known affected: 270 known not affected: 22245 | 2026-07-21T09:23:43+00:00 | Vulnerability · Source |
| CVE-2026-25639 | redhat_vex | axios: Axios affected by Denial of Service via __proto__ Key in mergeConfig | fixed: 170 known affected: 34 known not affected: 3907 | 2026-07-21T09:17:14+00:00 | Vulnerability · Source |
| CVE-2026-24049 | redhat_vex | wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking | fixed: 176 known affected: 58 known not affected: 7114 | 2026-07-21T09:17:10+00:00 | Vulnerability · Source |
| CVE-2026-64089 | redhat_vex | kernel: batman-adv: tt: fix negative last_changeset_len | known not affected: 274 | 2026-07-21T09:08:14+00:00 | Vulnerability · Source |
| CVE-2024-48948 | redhat_vex | elliptic: ECDSA signature verification error may reject legitimate transactions | known affected: 7 known not affected: 43 | 2026-07-21T09:08:13+00:00 | Vulnerability · Source |
| CVE-2024-21538 | redhat_vex | cross-spawn: regular expression denial of service | fixed: 139 known affected: 74 known not affected: 2799 | 2026-07-21T09:08:13+00:00 | Vulnerability · Source |
| CVE-2023-53426 | redhat_vex | kernel: Linux kernel: Denial of Service in xsk_diag due to use-after-free during socket cleanup | fixed: 303 known affected: 22 known not affected: 166 | 2026-07-21T09:08:11+00:00 | Vulnerability · Source |
| CVE-2026-63812 | redhat_vex | kernel: f2fs: fix incorrect FI_NO_EXTENT handling in __destroy_extent_node() | known affected: 274 | 2026-07-21T09:08:08+00:00 | Vulnerability · Source |
| CVE-2026-63813 | redhat_vex | kernel: Revert "f2fs: remove non-uptodate folio from the page cache in move_data_block" | known not affected: 1 | 2026-07-21T09:08:08+00:00 | Vulnerability · Source |
| CVE-2026-64163 | redhat_vex | kernel: test_kprobes: clear kprobes between test runs | known not affected: 274 | 2026-07-21T09:08:08+00:00 | Vulnerability · Source |
| CVE-2026-63810 | redhat_vex | kernel: block: Avoid mounting the bdev pseudo-filesystem in userspace | known affected: 184 known not affected: 90 | 2026-07-21T09:08:07+00:00 | Vulnerability · Source |
| CVE-2026-63811 | redhat_vex | kernel: f2fs: read COW data with the original inode during atomic write | known not affected: 274 | 2026-07-21T09:08:05+00:00 | Vulnerability · Source |
| CVE-2026-63855 | redhat_vex | kernel: drm/amdgpu/vcn: set no_user_fence for VCN v2.5 enc/dec rings | known not affected: 1 | 2026-07-21T09:08:04+00:00 | Vulnerability · Source |
| CVE-2026-63854 | redhat_vex | kernel: drm/amdgpu/vcn: set no_user_fence for VCN v3.0 enc/dec rings | known not affected: 274 | 2026-07-21T09:08:04+00:00 | Vulnerability · Source |
| CVE-2026-63853 | redhat_vex | kernel: drm/amdgpu/vcn: set no_user_fence for VCN v4.0 enc ring | known not affected: 274 | 2026-07-21T09:08:03+00:00 | Vulnerability · Source |
| CVE-2026-64097 | redhat_vex | kernel: drm/amd/display: Validate GPIO pin LUT table size before iterating | known not affected: 274 | 2026-07-21T09:08:02+00:00 | Vulnerability · Source |
| CVE-2024-21534 | redhat_vex | jsonpath-plus: Remote Code Execution in jsonpath-plus via Improper Input Sanitization | fixed: 7 known affected: 2 known not affected: 34 | 2026-07-21T09:08:02+00:00 | Vulnerability · Source |
| CVE-2026-64144 | redhat_vex | kernel: Bluetooth: btmtk: fix urb->setup_packet leak in error paths | known affected: 232 known not affected: 42 | 2026-07-21T09:08:00+00:00 | Vulnerability · Source |
| CVE-2026-53368 | redhat_vex | kernel: f2fs: fix fsck inconsistency caused by incorrect nat_entry flag usage | known not affected: 274 | 2026-07-21T09:07:58+00:00 | Vulnerability · Source |
| CVE-2026-64101 | redhat_vex | kernel: fwctl: pds: Validate RPC input size before parsing | known affected: 1 known not affected: 274 | 2026-07-21T09:07:57+00:00 | Vulnerability · Source |
| CVE-2026-63851 | redhat_vex | kernel: drm/amdgpu/vcn: set no_user_fence for VCN v4.0.5 enc ring | known not affected: 274 | 2026-07-21T09:07:55+00:00 | Vulnerability · Source |
| CVE-2026-53375 | redhat_vex | kernel: drm/amdgpu/vce: Prevent partial address patches | known not affected: 275 | 2026-07-21T09:07:54+00:00 | Vulnerability · Source |
| CVE-2026-64090 | redhat_vex | kernel: batman-adv: tt: avoid empty VLAN responses | known affected: 1 known not affected: 274 | 2026-07-21T09:07:53+00:00 | Vulnerability · Source |
| CVE-2025-68157 | redhat_vex | webpack: webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects | fixed: 234 known affected: 127 known not affected: 40 | 2026-07-21T09:07:53+00:00 | Vulnerability · Source |
| CVE-2026-64158 | redhat_vex | kernel: netfs: Fix write streaming disablement if fd open O_RDWR | known affected: 76 known not affected: 199 | 2026-07-21T09:07:51+00:00 | Vulnerability · Source |
| CVE-2024-47764 | redhat_vex | cookie: cookie accepts cookie name, path, and domain with out of bounds characters | known affected: 75 | 2026-07-21T09:07:50+00:00 | Vulnerability · Source |
| CVE-2026-64060 | redhat_vex | kernel: netfs: Fix leak of request in netfs_write_begin() error handling | known affected: 200 known not affected: 74 | 2026-07-21T09:07:49+00:00 | Vulnerability · Source |
| CVE-2026-64078 | redhat_vex | kernel: netfilter: x_tables: add and use xtables_unregister_table_exit | known affected: 90 known not affected: 185 | 2026-07-21T09:07:48+00:00 | Vulnerability · Source |
| CVE-2026-64152 | redhat_vex | kernel: iommu: Handle unmap error when iommu_debug is enabled | known affected: 76 known not affected: 198 | 2026-07-21T09:07:47+00:00 | Vulnerability · Source |
| CVE-2026-64070 | redhat_vex | kernel: powerpc/hv-gpci: fix preempt count leak in sysfs show paths | known affected: 233 known not affected: 42 | 2026-07-21T09:07:46+00:00 | Vulnerability · Source |
| CVE-2026-63793 | redhat_vex | kernel: ntfs: serialize volume label accesses | known not affected: 274 | 2026-07-21T09:07:45+00:00 | Vulnerability · Source |
| CVE-2026-63848 | redhat_vex | kernel: drm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring | known not affected: 274 | 2026-07-21T09:07:44+00:00 | Vulnerability · Source |
| CVE-2026-63805 | redhat_vex | kernel: crypto: nx - fix nx_crypto_ctx_exit argument | known not affected: 274 | 2026-07-21T09:07:44+00:00 | Vulnerability · Source |
| CVE-2026-64045 | redhat_vex | kernel: ovpn: tcp - use cached peer pointer in ovpn_tcp_close() | known not affected: 274 | 2026-07-21T09:07:42+00:00 | Vulnerability · Source |
| CVE-2026-63846 | redhat_vex | kernel: drm/amdgpu/jpeg: set no_user_fence for JPEG v3.0 ring | known not affected: 274 | 2026-07-21T09:07:40+00:00 | Vulnerability · Source |
| CVE-2026-63845 | redhat_vex | kernel: drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring | known not affected: 274 | 2026-07-21T09:07:39+00:00 | Vulnerability · Source |
| CVE-2026-63798 | redhat_vex | kernel: irqchip/imgpdc: Fix resource leak, add missing chained handler cleanup on remove | known not affected: 274 | 2026-07-21T09:07:39+00:00 | Vulnerability · Source |
| CVE-2026-64096 | redhat_vex | kernel: batman-adv: mcast: fix use-after-free in orig_node RCU release | known not affected: 274 | 2026-07-21T09:07:35+00:00 | Vulnerability · Source |
| CVE-2026-64161 | redhat_vex | kernel: net: ti: icssm-prueth: fix eth_ports_node leak in probe | known not affected: 274 | 2026-07-21T09:07:34+00:00 | Vulnerability · Source |
| CVE-2026-53366 | redhat_vex | kernel: ipv4: account for fraggap on the paged allocation path | fixed: 616 known affected: 108 known not affected: 90 | 2026-07-21T09:07:25+00:00 | Vulnerability · Source |
| CVE-2026-42035 | redhat_vex | axios: Axios: Arbitrary HTTP header injection via prototype pollution | fixed: 172 known affected: 42 known not affected: 2576 | 2026-07-21T08:54:30+00:00 | Vulnerability · Source |
| CVE-2026-34043 | redhat_vex | serialize-javascript: serialize-javascript: Denial of Service via specially crafted array-like object serialization | fixed: 574 known affected: 58 known not affected: 2868 | 2026-07-21T08:54:28+00:00 | Vulnerability · Source |
| CVE-2026-49477 | redhat_vex | soupsieve: Soupsieve: Denial of Service via crafted CSS selector strings | fixed: 5 known affected: 31 known not affected: 6 | 2026-07-21T08:48:59+00:00 | Vulnerability · Source |
| CVE-2026-42043 | redhat_vex | axios: Axios: NO_PROXY bypass via crafted URL | fixed: 142 known affected: 34 known not affected: 2451 | 2026-07-21T08:45:05+00:00 | Vulnerability · Source |
| CVE-2026-42041 | redhat_vex | axios: Axios: Authentication bypass due to prototype pollution of HTTP error handling | fixed: 142 known affected: 37 known not affected: 2448 | 2026-07-21T08:44:56+00:00 | Vulnerability · Source |
| CVE-2026-42039 | redhat_vex | axios: Node.js: Axios: Denial of Service via unbounded recursion in toFormData with deeply nested request data | fixed: 141 known affected: 38 known not affected: 2478 | 2026-07-21T08:44:35+00:00 | Vulnerability · Source |