GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

OPENSUSE-SU-2026:21448-1

Vulnerability from csaf_opensuse - Published: 2026-07-27 15:55 - Updated: 2026-09-16 21:45
Summary
Security update for agama-web-ui
Severity
Important
Notes
Title of the patch: Security update for agama-web-ui
Description of the patch: This update for agama-web-ui fixes the following issues: - CVE-2025-7783: form-data: unsafe `Math.random()` function is used to select a boundary value for multipart form-encoded data (bsc#1246822). - CVE-2026-12143: form-data: CRLF injection via unescaped multipart field names and filenames (bsc#1272310). - CVE-2026-13149: brace-expansion: `expand()` function exhibits exponential-time complexity when processing non-expanding `{}` brace groups (bsc#1269927). - CVE-2026-13311: shell-quote: quadratic complexity in `parse()` function when processing specially crafted strings (bsc#1269359). - CVE-2026-13676: fast-uri: host-based policy bypass due to failure to canonicalize Unicode/IDN hostnames for HTTP-family URLs (bsc#1269595). - CVE-2026-27601: underscore: DoS via stack overflow due to missing depth limits in `_.flatten` and `_.isEqual` functions (bsc#1259169). - CVE-2026-40181: react-router: open redirect to an external domain due to path values starting with `//` being reinterpreted as protocol-relative URLs (bsc#1272311). - CVE-2026-49356: @babel/core: arbitrary file read via `sourceMappingURL` comment (bsc#1272317). - CVE-2026-53550: js-yaml: quadratic complexity in merge-key processing when processing a crafted YAML document (bsc#1268851). - CVE-2026-53632: launch-editor: NTLMv2 hash disclosure via UNC path handling on Windows (bsc#1272319). - CVE-2026-54466: websocket-driver: message corruption via abuse of protocol length headers (bsc#1272312). - CVE-2026-54490: websocket-driver: resource limit bypass via message compression (bsc#1272313). - CVE-2026-55602: http-proxy-middleware: Host-header-driven backend routing bypass via `router` host+path substring matching (bsc#1272318).
Patchnames: openSUSE-Leap-16.0-1354
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2025-7783
6.5 (Medium)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N
Affected products
Product Identifier Version Remediation
Unresolved product id: openSUSE Leap 16.0:agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch —
Vendor Fix
Threats
Impact important
CVE-2026-12143
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected products
Recommended 1 product, the same list as for CVE-2025-7783
Threats
Impact important
CVE-2026-13149
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 1 product, the same list as for CVE-2025-7783
Threats
Impact important
CVE-2026-13311
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 1 product, the same list as for CVE-2025-7783
Threats
Impact important
CVE-2026-13676
7.2 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Affected products
Recommended 1 product, the same list as for CVE-2025-7783
Threats
Impact important
CVE-2026-27601
5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected products
Recommended 1 product, the same list as for CVE-2025-7783
Threats
Impact moderate
CVE-2026-40181
4.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Affected products
Recommended 1 product, the same list as for CVE-2025-7783
Threats
Impact moderate
CVE-2026-49356
3.2 (Low)
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N
Affected products
Recommended 1 product, the same list as for CVE-2025-7783
Threats
Impact low
CVE-2026-53550
5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected products
Recommended 1 product, the same list as for CVE-2025-7783
Threats
Impact moderate
CVE-2026-53632
5.3 (Medium)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected products
Recommended 1 product, the same list as for CVE-2025-7783
Threats
Impact moderate
CVE-2026-54466
6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Affected products
Recommended 1 product, the same list as for CVE-2025-7783
Threats
Impact moderate
CVE-2026-54490
5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected products
Recommended 1 product, the same list as for CVE-2025-7783
Threats
Impact moderate
CVE-2026-55602
6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Affected products
Recommended 1 product, the same list as for CVE-2025-7783
Threats
Impact moderate
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/o… self
https://bugzilla.suse.com/1246822 self
https://bugzilla.suse.com/1259169 self
https://bugzilla.suse.com/1268851 self
https://bugzilla.suse.com/1269359 self
https://bugzilla.suse.com/1269514 self
https://bugzilla.suse.com/1269595 self
https://bugzilla.suse.com/1269927 self
https://bugzilla.suse.com/1272310 self
https://bugzilla.suse.com/1272311 self
https://bugzilla.suse.com/1272312 self
https://bugzilla.suse.com/1272313 self
https://bugzilla.suse.com/1272317 self
https://bugzilla.suse.com/1272318 self
https://bugzilla.suse.com/1272319 self
https://www.suse.com/security/cve/CVE-2025-7783/ self
https://www.suse.com/security/cve/CVE-2026-12143/ self
https://www.suse.com/security/cve/CVE-2026-13149/ self
https://www.suse.com/security/cve/CVE-2026-13311/ self
https://www.suse.com/security/cve/CVE-2026-13676/ self
https://www.suse.com/security/cve/CVE-2026-27601/ self
https://www.suse.com/security/cve/CVE-2026-40181/ self
https://www.suse.com/security/cve/CVE-2026-49356/ self
https://www.suse.com/security/cve/CVE-2026-53550/ self
https://www.suse.com/security/cve/CVE-2026-53632/ self
https://www.suse.com/security/cve/CVE-2026-54466/ self
https://www.suse.com/security/cve/CVE-2026-54490/ self
https://www.suse.com/security/cve/CVE-2026-55602/ self
https://www.suse.com/security/cve/CVE-2025-7783 external
https://bugzilla.suse.com/1246810 external
https://www.suse.com/security/cve/CVE-2026-12143 external
https://bugzilla.suse.com/1269794 external
https://www.suse.com/security/cve/CVE-2026-13149 external
https://bugzilla.suse.com/1269911 external
https://www.suse.com/security/cve/CVE-2026-13311 external
https://bugzilla.suse.com/1269320 external
https://www.suse.com/security/cve/CVE-2026-13676 external
https://bugzilla.suse.com/1269593 external
https://www.suse.com/security/cve/CVE-2026-27601 external
https://bugzilla.suse.com/1259157 external
https://www.suse.com/security/cve/CVE-2026-40181 external
https://bugzilla.suse.com/1267526 external
https://www.suse.com/security/cve/CVE-2026-49356 external
https://bugzilla.suse.com/1272314 external
https://www.suse.com/security/cve/CVE-2026-53550 external
https://bugzilla.suse.com/1268806 external
https://www.suse.com/security/cve/CVE-2026-53632 external
https://bugzilla.suse.com/1272316 external
https://www.suse.com/security/cve/CVE-2026-54466 external
https://bugzilla.suse.com/1271573 external
https://www.suse.com/security/cve/CVE-2026-54490 external
https://bugzilla.suse.com/1271580 external
https://www.suse.com/security/cve/CVE-2026-55602 external
https://bugzilla.suse.com/1272315 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for agama-web-ui",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for agama-web-ui fixes the following issues:\n\n- CVE-2025-7783: form-data: unsafe `Math.random()` function is used to select a boundary value for multipart\n  form-encoded data (bsc#1246822).\n- CVE-2026-12143: form-data: CRLF injection via unescaped multipart field names and filenames (bsc#1272310).\n- CVE-2026-13149: brace-expansion: `expand()` function exhibits exponential-time complexity when processing\n  non-expanding `{}` brace groups (bsc#1269927).\n- CVE-2026-13311: shell-quote: quadratic complexity in `parse()` function when processing specially crafted strings\n  (bsc#1269359).\n- CVE-2026-13676: fast-uri: host-based policy bypass due to failure to canonicalize Unicode/IDN hostnames for\n  HTTP-family URLs (bsc#1269595).\n- CVE-2026-27601: underscore: DoS via stack overflow due to missing depth limits in `_.flatten` and `_.isEqual`\n  functions (bsc#1259169).\n- CVE-2026-40181: react-router: open redirect to an external domain due to path values starting with `//` being\n  reinterpreted as protocol-relative URLs (bsc#1272311).\n- CVE-2026-49356: @babel/core: arbitrary file read via `sourceMappingURL` comment (bsc#1272317).\n- CVE-2026-53550: js-yaml: quadratic complexity in merge-key processing when processing a crafted YAML document\n  (bsc#1268851).\n- CVE-2026-53632: launch-editor: NTLMv2 hash disclosure via UNC path handling on Windows (bsc#1272319).\n- CVE-2026-54466: websocket-driver: message corruption via abuse of protocol length headers (bsc#1272312).\n- CVE-2026-54490: websocket-driver: resource limit bypass via message compression (bsc#1272313).\n- CVE-2026-55602: http-proxy-middleware: Host-header-driven backend routing bypass via `router` host+path substring\n  matching (bsc#1272318).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Leap-16.0-1354",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21448-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1246822",
        "url": "https://bugzilla.suse.com/1246822"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1259169",
        "url": "https://bugzilla.suse.com/1259169"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1268851",
        "url": "https://bugzilla.suse.com/1268851"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269359",
        "url": "https://bugzilla.suse.com/1269359"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269514",
        "url": "https://bugzilla.suse.com/1269514"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269595",
        "url": "https://bugzilla.suse.com/1269595"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269927",
        "url": "https://bugzilla.suse.com/1269927"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1272310",
        "url": "https://bugzilla.suse.com/1272310"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1272311",
        "url": "https://bugzilla.suse.com/1272311"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1272312",
        "url": "https://bugzilla.suse.com/1272312"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1272313",
        "url": "https://bugzilla.suse.com/1272313"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1272317",
        "url": "https://bugzilla.suse.com/1272317"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1272318",
        "url": "https://bugzilla.suse.com/1272318"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1272319",
        "url": "https://bugzilla.suse.com/1272319"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-7783 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-7783/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-12143 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-12143/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-13149 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-13149/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-13311 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-13311/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-13676 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-13676/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-27601 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-27601/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-40181 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-40181/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-49356 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-49356/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53550 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53550/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-53632 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-53632/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-54466 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-54466/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-54490 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-54490/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-55602 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-55602/"
      }
    ],
    "title": "Security update for agama-web-ui",
    "tracking": {
      "current_release_date": "2026-09-16T21:45:08Z",
      "generator": {
        "date": "2026-07-27T15:55:38Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:21448-1",
      "initial_release_date": "2026-07-27T15:55:38Z",
      "revision_history": [
        {
          "date": "2026-07-27T15:55:38Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-16T20:43:25Z",
          "number": "2",
          "summary": "unknown changes"
        },
        {
          "date": "2026-09-16T21:45:08Z",
          "number": "3",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch",
                "product": {
                  "name": "agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch",
                  "product_id": "agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/agama-web-ui@17+673.b97ba64d6-160000.12.1?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 16.0",
                "product": {
                  "name": "openSUSE Leap 16.0",
                  "product_id": "openSUSE Leap 16.0"
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch"
        },
        "product_reference": "agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-7783",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-7783"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP). This vulnerability is associated with program files lib/form_data.Js.\n\nThis issue affects form-data: \u003c 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-7783",
          "url": "https://www.suse.com/security/cve/CVE-2025-7783"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1246810 for CVE-2025-7783",
          "url": "https://bugzilla.suse.com/1246810"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-27T15:55:38Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-7783"
    },
    {
      "cve": "CVE-2026-12143",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-12143"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "form-data is a library for creating readable multipart/form-data streams. In versions through 4.0.5, the `field` argument to `FormData#append` and the `filename` option are concatenated verbatim into the `Content-Disposition` header without escaping carriage return (CR), line feed (LF), or double-quote (\") characters. An application that passes attacker-controlled data as a field name or filename (for example, an API gateway that turns JSON object keys into multipart field names) allows the attacker to terminate the header line and inject additional headers, or to smuggle entire additional multipart parts, into the request the application forwards to a backend. This can let the attacker add or override form fields (e.g. set `is_admin=true`) seen by the downstream parser. This is an instance of CWE-93 (CRLF injection). The fix escapes CR, LF, and `\"` as `%0D`, `%0A`, and `%22` in field names and filenames, matching the serialization browsers use per the WHATWG HTML multipart/form-data encoding algorithm. Exploitation requires the consuming application to use untrusted input as a field name or filename; applications that use only fixed/trusted field names are not affected. Fixed in 2.5.6, 3.0.5, and 4.0.6.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-12143",
          "url": "https://www.suse.com/security/cve/CVE-2026-12143"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269794 for CVE-2026-12143",
          "url": "https://bugzilla.suse.com/1269794"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-27T15:55:38Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-12143"
    },
    {
      "cve": "CVE-2026-13149",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-13149"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "brace-expansion through 5.0.6 is vulnerable to denial of service. The expand() function exhibits exponential-time complexity in the number of consecutive non-expanding \u0027{}\u0027 brace groups. An attacker who passes a crafted string to expand(), directly or transitively, can cause significant CPU consumption and event-loop blocking. The max option does not mitigate this, as it bounds the output size rather than the recursion work.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-13149",
          "url": "https://www.suse.com/security/cve/CVE-2026-13149"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269911 for CVE-2026-13149",
          "url": "https://bugzilla.suse.com/1269911"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-27T15:55:38Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-13149"
    },
    {
      "cve": "CVE-2026-13311",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-13311"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "shell-quote prior to 1.8.5 finalizes parsed tokens in parse() using Array.prototype.concat as a reduce accumulator, which reallocates and copies the entire growing array on every iteration. As a result parse() runs in O(n^2) time relative to the number of input tokens. An attacker who can supply an attacker-controlled string to any code path that calls parse() (no shell metacharacters are required; plain space-separated words suffice) can block the single-threaded Node.js event loop for an extended period with a small input, resulting in a denial of service. There is no code execution or data disclosure; impact is to availability only. Fixed in 1.8.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-13311",
          "url": "https://www.suse.com/security/cve/CVE-2026-13311"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269320 for CVE-2026-13311",
          "url": "https://bugzilla.suse.com/1269320"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-27T15:55:38Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-13311"
    },
    {
      "cve": "CVE-2026-13676",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-13676"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode (IDN) hostnames for HTTP-family URLs. The IDN conversion path calls a helper that does not exist on the global URL constructor, silently leaving the host in its original Unicode form while normalize() and equal() still return values that differ from a WHATWG-compatible URL parser. Applications that use fast-uri to enforce host-based policy (denylists, loopback filtering, redirect validation, outbound proxy routing) before passing the same URL to Node\u0027s URL or fetch can be bypassed when the two implementations resolve the same input to different hosts. Patches: upgrade to fast-uri 3.1.3 for the 3.x line or 4.0.1 for the 4.x line. Workarounds: enforce host policy using the same URL parser used for the actual request, or reject non-ASCII hosts before policy checks.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-13676",
          "url": "https://www.suse.com/security/cve/CVE-2026-13676"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269593 for CVE-2026-13676",
          "url": "https://bugzilla.suse.com/1269593"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-27T15:55:38Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-13676"
    },
    {
      "cve": "CVE-2026-27601",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-27601"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Underscore.js is a utility-belt library for JavaScript. Prior to 1.13.8, the _.flatten and _.isEqual functions use recursion without a depth limit. Under very specific conditions, detailed below, an attacker could exploit this in a Denial of Service (DoS) attack by triggering a stack overflow. Untrusted input must be used to create a recursive datastructure, for example using JSON.parse, with no enforced depth limit. The datastructure thus created must be passed to _.flatten or _.isEqual. In the case of _.flatten, the vulnerability can only be exploited if it is possible for a remote client to prepare a datastructure that consists of arrays at all levels AND if no finite depth limit is passed as the second argument to _.flatten. In the case of _.isEqual, the vulnerability can only be exploited if there exists a code path in which two distinct datastructures that were submitted by the same remote client are compared using _.isEqual. For example, if a client submits data that are stored in a database, and the same client can later submit another datastructure that is then compared to the data that were saved in the database previously, OR if a client submits a single request, but its data are parsed twice, creating two non-identical but equivalent datastructures that are then compared. Exceptions originating from the call to _.flatten or _.isEqual, as a result of a stack overflow, are not being caught. This vulnerability is fixed in 1.13.8.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-27601",
          "url": "https://www.suse.com/security/cve/CVE-2026-27601"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1259157 for CVE-2026-27601",
          "url": "https://bugzilla.suse.com/1259157"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-27T15:55:38Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-27601"
    },
    {
      "cve": "CVE-2026-40181",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-40181"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "React Router is a router for React. In versions 7.0.0 through 7.14.0 and 6.7.0 through 6.30.3, certain URLs passed to the redirect function can trigger an open redirect to an external domain due to path values starting with // being reinterpreted as protocol-relative URLs. The level of impact depends on the validation done by the application prior to returning the redirect. This does not impact applications using Declarative Mode (\u003cBrowserRouter\u003e). This is patched in versions 7.14.1 and 6.30.4.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-40181",
          "url": "https://www.suse.com/security/cve/CVE-2026-40181"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267526 for CVE-2026-40181",
          "url": "https://bugzilla.suse.com/1267526"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-27T15:55:38Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-40181"
    },
    {
      "cve": "CVE-2026-49356",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-49356"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Babel is a compiler for writing next generation JavaScript. Prior to 8.0.0-rc.6 and 7.29.6, @babel/core affected by an arbitrary file read via a sourceMappingURL comment. Using @babel/core to compile maliciously crafted code can allow an attacker to read any source map from the system that is running Babel, if the attacker controls the input source code, can read the output source code, and knows the path of the source map file that they want to read. This vulnerability is fixed in 8.0.0-rc.6 and 7.29.6.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-49356",
          "url": "https://www.suse.com/security/cve/CVE-2026-49356"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272314 for CVE-2026-49356",
          "url": "https://bugzilla.suse.com/1272314"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.2,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-27T15:55:38Z",
          "details": "low"
        }
      ],
      "title": "CVE-2026-49356"
    },
    {
      "cve": "CVE-2026-53550",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53550"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "js-yaml is a JavaScript YAML parser and dumper. Prior to 4.2.0 and 3.15.0, a crafted YAML document can trigger algorithmic CPU exhaustion in js-yaml merge-key processing (\u003c\u003c) by repeating the same alias many times in a merge sequence. This causes quadratic parse-time behavior relative to input size and can block a Node.js worker/event loop for seconds with a relatively small payload (tens of KB), resulting in denial of service. The issue is in merge handling inside lib/loader.js. This vulnerability is fixed in 4.2.0 and 3.15.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53550",
          "url": "https://www.suse.com/security/cve/CVE-2026-53550"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268806 for CVE-2026-53550",
          "url": "https://bugzilla.suse.com/1268806"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-27T15:55:38Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-53550"
    },
    {
      "cve": "CVE-2026-53632",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-53632"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.1, the launch-editor NPM package accesses arbitrary paths including Windows UNC paths. When a UNC path is opened, Windows automatically attempts NTLM authentication to the remote host, causing the user\u0027s NTLMv2 password hash to be leaked to an attacker-controlled SMB server. This can result in credential compromise through offline hash cracking. This vulnerability is fixed in 2.14.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-53632",
          "url": "https://www.suse.com/security/cve/CVE-2026-53632"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272316 for CVE-2026-53632",
          "url": "https://bugzilla.suse.com/1272316"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-27T15:55:38Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-53632"
    },
    {
      "cve": "CVE-2026-54466",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-54466"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.7.5, the frame format in draft versions of the WebSocket protocol includes a length header that allows an arbitrarily large integer to be encoded as a sequence of bytes with the high bit set. By sending an indefinite sequence of bytes with values 0x80 or above, a client can make the server parse these bytes into an ever-growing integer in lib/websocket/driver/draft75.js; because JavaScript numbers are 64-bit floating point values, this number will eventually lose precision and lead to the subsequent payload being parsed incorrectly. This issue is fixed in version 0.7.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-54466",
          "url": "https://www.suse.com/security/cve/CVE-2026-54466"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271573 for CVE-2026-54466",
          "url": "https://bugzilla.suse.com/1271573"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-27T15:55:38Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-54466"
    },
    {
      "cve": "CVE-2026-54490",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-54490"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.7.5, if this library is used with the permessage-deflate extension, a WebSocket server or client can be made to accept messages that are larger than the configured maximum message size because the limit is checked against the message frames\u0027 length headers, which give the size of the compressed data, not the size after decompression in lib/websocket/driver/hybi.js. This can lead to applications accepting larger messages than expected and exceeding their intended resource usage. This issue is fixed in version 0.7.5.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-54490",
          "url": "https://www.suse.com/security/cve/CVE-2026-54490"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271580 for CVE-2026-54490",
          "url": "https://bugzilla.suse.com/1271580"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-27T15:55:38Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-54490"
    },
    {
      "cve": "CVE-2026-55602",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-55602"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "http-proxy-middleware is node.js http-proxy middleware. From 0.16.0 until 2.0.10, 3.0.6, and 4.1.0, http-proxy-middleware documents router proxy-table entries as host, path, or host+path selectors, but the host+path implementation uses unanchored substring matching on attacker-controlled request metadata. As a result, a crafted Host header that is only a superstring match for a configured host+path key can still route a request to an unintended backend. This vulnerability is fixed in 2.0.10, 3.0.6, and 4.1.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-55602",
          "url": "https://www.suse.com/security/cve/CVE-2026-55602"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272315 for CVE-2026-55602",
          "url": "https://bugzilla.suse.com/1272315"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:agama-web-ui-17+673.b97ba64d6-160000.12.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-27T15:55:38Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-55602"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.