VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
283120 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-44660 | redhat_vex | python-ujson: UltraJSON: Memory leak leading to Denial of Service | fixed: 4 known affected: 16 known not affected: 205 | 2026-07-21T09:59:27+00:00 | Vulnerability · Source |
| CVE-2026-33747 | redhat_vex | BuildKit: github.com/moby/buildkit: BuildKit: Arbitrary file write and code execution via untrusted frontend | fixed: 171 known affected: 29 known not affected: 506 | 2026-07-21T09:59:10+00:00 | Vulnerability · Source |
| CVE-2026-33699 | redhat_vex | pypdf: pypdf: Denial of Service via crafted PDF in non-strict mode | fixed: 4 known affected: 7 known not affected: 437 | 2026-07-21T09:59:05+00:00 | Vulnerability · Source |
| CVE-2026-22773 | redhat_vex | vllm: vLLM: Denial of Service via specially crafted image in multimodal model serving | fixed: 11 known affected: 10 known not affected: 408 | 2026-07-21T09:58:52+00:00 | Vulnerability · Source |
| CVE-2025-69228 | redhat_vex | aiohttp: aiohttp: Denial of Service via memory exhaustion from crafted POST request | fixed: 31 known affected: 77 known not affected: 938 | 2026-07-21T09:58:49+00:00 | Vulnerability · Source |
| CVE-2025-69227 | redhat_vex | aiohttp: aiohttp: Denial of Service via specially crafted POST request | fixed: 35 known affected: 72 known not affected: 1049 | 2026-07-21T09:58:46+00:00 | Vulnerability · Source |
| CVE-2026-54293 | redhat_vex | nltk: NLTK: Information Disclosure via Path Traversal in `nltk.data.load()` | fixed: 2 known affected: 7 known not affected: 206 | 2026-07-21T09:58:24+00:00 | Vulnerability · Source |
| CVE-2026-42584 | redhat_vex | netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion | fixed: 27 known affected: 33 known not affected: 343 | 2026-07-21T09:58:10+00:00 | Vulnerability · Source |
| CVE-2026-42581 | redhat_vex | netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers | fixed: 27 known not affected: 328 under investigation: 48 | 2026-07-21T09:58:06+00:00 | Vulnerability · Source |
| CVE-2026-42578 | redhat_vex | netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation | fixed: 27 known affected: 32 known not affected: 344 | 2026-07-21T09:58:02+00:00 | Vulnerability · Source |
| CVE-2026-33236 | redhat_vex | nltk: NLTK: Arbitrary file overwrite and creation via path traversal in XML index files | fixed: 10 known affected: 9 known not affected: 899 | 2026-07-21T09:57:32+00:00 | Vulnerability · Source |
| CVE-2026-28356 | redhat_vex | multipart: denial of service via maliciously crafted HTTP or multipart segment headers | fixed: 17 known affected: 19 known not affected: 668 | 2026-07-21T09:57:15+00:00 | Vulnerability · Source |
| CVE-2026-25990 | redhat_vex | pillow: Pillow: Out-of-bounds Write via Specially Crafted PSD Image | fixed: 128 known affected: 18 known not affected: 1559 | 2026-07-21T09:56:55+00:00 | Vulnerability · Source |
| CVE-2026-25960 | redhat_vex | vLLM: vLLM: Server-Side Request Forgery bypass via inconsistent URL parsing | fixed: 4 known affected: 13 known not affected: 410 | 2026-07-21T09:56:54+00:00 | Vulnerability · Source |
| CVE-2026-25048 | redhat_vex | xgrammar: xgrammar: Denial of Service via multi-level nested syntax | fixed: 9 known affected: 5 known not affected: 413 | 2026-07-21T09:56:46+00:00 | Vulnerability · Source |
| CVE-2026-24779 | redhat_vex | vLLM: vLLM: Server-Side Request Forgery allows internal network access | fixed: 17 known affected: 5 known not affected: 850 | 2026-07-21T09:56:40+00:00 | Vulnerability · Source |
| CVE-2026-23490 | redhat_vex | pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID | fixed: 1855 known affected: 25 known not affected: 6295 | 2026-07-21T09:56:33+00:00 | Vulnerability · Source |
| CVE-2026-22807 | redhat_vex | vLLM: vLLM: Arbitrary code execution via untrusted model loading | fixed: 17 known affected: 5 known not affected: 1083 | 2026-07-21T09:56:32+00:00 | Vulnerability · Source |
| CVE-2026-11816 | redhat_vex | keras: Keras: Arbitrary file write via path traversal in archive extraction utilities | fixed: 6 known affected: 4 known not affected: 202 | 2026-07-21T09:56:28+00:00 | Vulnerability · Source |
| CVE-2025-14929 | redhat_vex | transformers: code execution when processing a malicious X-CLIP model file | fixed: 38 known affected: 29 known not affected: 637 | 2026-07-21T09:56:17+00:00 | Vulnerability · Source |
| CVE-2025-14928 | redhat_vex | transformers: code execution when converting a malicious HuBERT model checkpoint | fixed: 40 known affected: 28 known not affected: 637 | 2026-07-21T09:56:15+00:00 | Vulnerability · Source |
| CVE-2025-14926 | redhat_vex | transformers: code execution when converting a malicious SEW model checkpoint | fixed: 42 known affected: 28 known not affected: 634 | 2026-07-21T09:56:08+00:00 | Vulnerability · Source |
| CVE-2025-14921 | redhat_vex | transformers: code execution when processing a malicious Transformer-XL model file | fixed: 39 known affected: 28 known not affected: 637 | 2026-07-21T09:56:05+00:00 | Vulnerability · Source |
| CVE-2025-14920 | redhat_vex | transformers: code execution when processing a malicious Perceiver model file | fixed: 40 known affected: 30 known not affected: 633 | 2026-07-21T09:56:01+00:00 | Vulnerability · Source |
| CVE-2026-59876 | redhat_vex | protobufjs: protobufjs: Prototype pollution vulnerability in Text Format extension | known not affected: 9 under investigation: 28 | 2026-07-21T09:46:20+00:00 | Vulnerability · Source |
| CVE-2026-59198 | redhat_vex | Pillow: Pillow: Information disclosure via TGA RLE encoder out-of-bounds read | known affected: 69 under investigation: 22 | 2026-07-21T09:42:17+00:00 | Vulnerability · Source |
| CVE-2025-65637 | redhat_vex | github.com/sirupsen/logrus: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload | fixed: 2037 known affected: 270 known not affected: 22245 | 2026-07-21T09:23:43+00:00 | Vulnerability · Source |
| CVE-2026-24049 | redhat_vex | wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking | fixed: 176 known affected: 58 known not affected: 7114 | 2026-07-21T09:17:10+00:00 | Vulnerability · Source |
| CVE-2026-64089 | redhat_vex | kernel: batman-adv: tt: fix negative last_changeset_len | known not affected: 274 | 2026-07-21T09:08:14+00:00 | Vulnerability · Source |
| CVE-2024-48948 | redhat_vex | elliptic: ECDSA signature verification error may reject legitimate transactions | known affected: 7 known not affected: 43 | 2026-07-21T09:08:13+00:00 | Vulnerability · Source |
| CVE-2024-21538 | redhat_vex | cross-spawn: regular expression denial of service | fixed: 139 known affected: 74 known not affected: 2799 | 2026-07-21T09:08:13+00:00 | Vulnerability · Source |
| CVE-2023-53426 | redhat_vex | kernel: Linux kernel: Denial of Service in xsk_diag due to use-after-free during socket cleanup | fixed: 303 known affected: 22 known not affected: 166 | 2026-07-21T09:08:11+00:00 | Vulnerability · Source |
| CVE-2026-63812 | redhat_vex | kernel: f2fs: fix incorrect FI_NO_EXTENT handling in __destroy_extent_node() | known affected: 274 | 2026-07-21T09:08:08+00:00 | Vulnerability · Source |
| CVE-2026-63813 | redhat_vex | kernel: Revert "f2fs: remove non-uptodate folio from the page cache in move_data_block" | known not affected: 1 | 2026-07-21T09:08:08+00:00 | Vulnerability · Source |
| CVE-2026-64163 | redhat_vex | kernel: test_kprobes: clear kprobes between test runs | known not affected: 274 | 2026-07-21T09:08:08+00:00 | Vulnerability · Source |
| CVE-2026-63810 | redhat_vex | kernel: block: Avoid mounting the bdev pseudo-filesystem in userspace | known affected: 184 known not affected: 90 | 2026-07-21T09:08:07+00:00 | Vulnerability · Source |
| CVE-2026-63811 | redhat_vex | kernel: f2fs: read COW data with the original inode during atomic write | known not affected: 274 | 2026-07-21T09:08:05+00:00 | Vulnerability · Source |
| CVE-2026-63855 | redhat_vex | kernel: drm/amdgpu/vcn: set no_user_fence for VCN v2.5 enc/dec rings | known not affected: 1 | 2026-07-21T09:08:04+00:00 | Vulnerability · Source |
| CVE-2026-63854 | redhat_vex | kernel: drm/amdgpu/vcn: set no_user_fence for VCN v3.0 enc/dec rings | known not affected: 274 | 2026-07-21T09:08:04+00:00 | Vulnerability · Source |
| CVE-2026-63853 | redhat_vex | kernel: drm/amdgpu/vcn: set no_user_fence for VCN v4.0 enc ring | known not affected: 274 | 2026-07-21T09:08:03+00:00 | Vulnerability · Source |
| CVE-2026-64097 | redhat_vex | kernel: drm/amd/display: Validate GPIO pin LUT table size before iterating | known not affected: 274 | 2026-07-21T09:08:02+00:00 | Vulnerability · Source |
| CVE-2024-21534 | redhat_vex | jsonpath-plus: Remote Code Execution in jsonpath-plus via Improper Input Sanitization | fixed: 7 known affected: 2 known not affected: 34 | 2026-07-21T09:08:02+00:00 | Vulnerability · Source |
| CVE-2026-64144 | redhat_vex | kernel: Bluetooth: btmtk: fix urb->setup_packet leak in error paths | known affected: 232 known not affected: 42 | 2026-07-21T09:08:00+00:00 | Vulnerability · Source |
| CVE-2026-53368 | redhat_vex | kernel: f2fs: fix fsck inconsistency caused by incorrect nat_entry flag usage | known not affected: 274 | 2026-07-21T09:07:58+00:00 | Vulnerability · Source |
| CVE-2026-64101 | redhat_vex | kernel: fwctl: pds: Validate RPC input size before parsing | known affected: 1 known not affected: 274 | 2026-07-21T09:07:57+00:00 | Vulnerability · Source |
| CVE-2026-63851 | redhat_vex | kernel: drm/amdgpu/vcn: set no_user_fence for VCN v4.0.5 enc ring | known not affected: 274 | 2026-07-21T09:07:55+00:00 | Vulnerability · Source |
| CVE-2026-53375 | redhat_vex | kernel: drm/amdgpu/vce: Prevent partial address patches | known not affected: 275 | 2026-07-21T09:07:54+00:00 | Vulnerability · Source |
| CVE-2026-64090 | redhat_vex | kernel: batman-adv: tt: avoid empty VLAN responses | known affected: 1 known not affected: 274 | 2026-07-21T09:07:53+00:00 | Vulnerability · Source |
| CVE-2025-68157 | redhat_vex | webpack: webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects | fixed: 234 known affected: 127 known not affected: 40 | 2026-07-21T09:07:53+00:00 | Vulnerability · Source |
| CVE-2026-64158 | redhat_vex | kernel: netfs: Fix write streaming disablement if fd open O_RDWR | known affected: 76 known not affected: 199 | 2026-07-21T09:07:51+00:00 | Vulnerability · Source |