{"metadata": {"count": 286601, "page": 1, "per_page": 100}, "data": [{"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T17:07:08+00:00", "cve": "CVE-2026-27137", "id": "CVE-2026-27137", "initial_release_date": "2026-03-06T21:28:13.748000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27137.json", "version": "3", "product_status": {"fixed": 348, "known_affected": 134, "known_not_affected": 1145}, "imported": 1785863228.0, "vulnerability_id": "CVE-2026-27137", "vulnerability_url": "/vuln/CVE-2026-27137"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T17:06:25+00:00", "cve": "CVE-2025-61729", "id": "CVE-2025-61729", "initial_release_date": "2025-12-02T18:54:10.166000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-61729.json", "version": "3", "product_status": {"fixed": 7763, "known_affected": 435, "known_not_affected": 4683, "under_investigation": 2}, "imported": 1785863185.0, "vulnerability_id": "CVE-2025-61729", "vulnerability_url": "/vuln/CVE-2025-61729"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T17:05:45+00:00", "cve": "CVE-2026-27136", "id": "CVE-2026-27136", "initial_release_date": "2026-05-22T15:01:22.111000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27136.json", "version": "3", "product_status": {"fixed": 456, "known_affected": 289, "known_not_affected": 2577}, "imported": 1785863145.0, "vulnerability_id": "CVE-2026-27136", "vulnerability_url": "/vuln/CVE-2026-27136"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T17:04:27+00:00", "cve": "CVE-2026-25679", "id": "CVE-2026-25679", "initial_release_date": "2026-03-06T21:28:14.211000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "net/url: Incorrect parsing of IPv6 host literals in net/url", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25679.json", "version": "3", "product_status": {"fixed": 9169, "known_affected": 163, "known_not_affected": 4344, "under_investigation": 1}, "imported": 1785863067.0, "vulnerability_id": "CVE-2026-25679", "vulnerability_url": "/vuln/CVE-2026-25679"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T17:02:59+00:00", "cve": "CVE-2026-32280", "id": "CVE-2026-32280", "initial_release_date": "2026-04-08T01:06:58.595000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32280.json", "version": "3", "product_status": {"fixed": 3117, "known_affected": 171, "known_not_affected": 2919}, "imported": 1785862979.0, "vulnerability_id": "CVE-2026-32280", "vulnerability_url": "/vuln/CVE-2026-32280"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T17:01:53+00:00", "cve": "CVE-2025-61726", "id": "CVE-2025-61726", "initial_release_date": "2025-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-61726.json", "version": "3", "product_status": {"fixed": 10415, "known_affected": 450, "known_not_affected": 16980}, "imported": 1785862913.0, "vulnerability_id": "CVE-2025-61726", "vulnerability_url": "/vuln/CVE-2025-61726"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T17:08:34+00:00", "cve": "CVE-2026-32283", "id": "CVE-2026-32283", "initial_release_date": "2026-04-08T01:06:57.670000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32283.json", "version": "3", "product_status": {"fixed": 2508, "known_affected": 214, "known_not_affected": 1184, "under_investigation": 1}, "imported": 1785862768.0, "vulnerability_id": "CVE-2026-32283", "vulnerability_url": "/vuln/CVE-2026-32283"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T17:05:38+00:00", "cve": "CVE-2026-34986", "id": "CVE-2026-34986", "initial_release_date": "2026-04-06T16:22:45.353000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34986.json", "version": "3", "product_status": {"fixed": 2397, "known_affected": 161, "known_not_affected": 11721, "under_investigation": 1}, "imported": 1785862558.0, "vulnerability_id": "CVE-2026-34986", "vulnerability_url": "/vuln/CVE-2026-34986"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T16:55:38+00:00", "cve": "CVE-2026-33810", "id": "CVE-2026-33810", "initial_release_date": "2026-04-08T01:06:56.546000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33810.json", "version": "3", "product_status": {"fixed": 131, "known_affected": 148, "known_not_affected": 1021}, "imported": 1785862538.0, "vulnerability_id": "CVE-2026-33810", "vulnerability_url": "/vuln/CVE-2026-33810"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T16:55:20+00:00", "cve": "CVE-2026-33186", "id": "CVE-2026-33186", "initial_release_date": "2026-03-20T22:23:32.147000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33186.json", "version": "3", "product_status": {"fixed": 2886, "known_affected": 396, "known_not_affected": 34270}, "imported": 1785862520.0, "vulnerability_id": "CVE-2026-33186", "vulnerability_url": "/vuln/CVE-2026-33186"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T16:38:47+00:00", "cve": "CVE-2023-39325", "id": "CVE-2023-39325", "initial_release_date": "2023-10-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-39325.json", "version": "3", "product_status": {"fixed": 4761, "known_affected": 244, "known_not_affected": 30354}, "imported": 1785861527.0, "vulnerability_id": "CVE-2023-39325", "vulnerability_url": "/vuln/CVE-2023-39325"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T15:51:42+00:00", "cve": "CVE-2025-69223", "id": "CVE-2025-69223", "initial_release_date": "2025-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "aiohttp: AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-69223.json", "version": "3", "product_status": {"fixed": 220, "known_affected": 32, "known_not_affected": 6340}, "imported": 1785858702.0, "vulnerability_id": "CVE-2025-69223", "vulnerability_url": "/vuln/CVE-2025-69223"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T15:47:18+00:00", "cve": "CVE-2024-45338", "id": "CVE-2024-45338", "initial_release_date": "2024-12-18T20:38:22.660000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-45338.json", "version": "3", "product_status": {"fixed": 2392, "known_affected": 156, "known_not_affected": 16030}, "imported": 1785858438.0, "vulnerability_id": "CVE-2024-45338", "vulnerability_url": "/vuln/CVE-2024-45338"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T15:39:34+00:00", "cve": "CVE-2025-30204", "id": "CVE-2025-30204", "initial_release_date": "2025-03-21T21:42:01.382000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-30204.json", "version": "3", "product_status": {"fixed": 3038, "known_affected": 77, "known_not_affected": 11728}, "imported": 1785857974.0, "vulnerability_id": "CVE-2025-30204", "vulnerability_url": "/vuln/CVE-2025-30204"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T15:37:46+00:00", "cve": "CVE-2025-22868", "id": "CVE-2025-22868", "initial_release_date": "2025-02-26T03:07:49.012000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-22868.json", "version": "3", "product_status": {"fixed": 1876, "known_affected": 94, "known_not_affected": 8426}, "imported": 1785857866.0, "vulnerability_id": "CVE-2025-22868", "vulnerability_url": "/vuln/CVE-2025-22868"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T15:37:20+00:00", "cve": "CVE-2024-6345", "id": "CVE-2024-6345", "initial_release_date": "2024-07-15T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-6345.json", "version": "3", "product_status": {"fixed": 2497, "known_affected": 22, "known_not_affected": 709}, "imported": 1785857840.0, "vulnerability_id": "CVE-2024-6345", "vulnerability_url": "/vuln/CVE-2024-6345"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T15:27:05+00:00", "cve": "CVE-2024-1394", "id": "CVE-2024-1394", "initial_release_date": "2024-03-20T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-1394.json", "version": "3", "product_status": {"fixed": 2344, "known_affected": 44, "known_not_affected": 978}, "imported": 1785857225.0, "vulnerability_id": "CVE-2024-1394", "vulnerability_url": "/vuln/CVE-2024-1394"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T15:26:38+00:00", "cve": "CVE-2023-45288", "id": "CVE-2023-45288", "initial_release_date": "2023-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-45288.json", "version": "3", "product_status": {"fixed": 1376, "known_affected": 169, "known_not_affected": 15865}, "imported": 1785857198.0, "vulnerability_id": "CVE-2023-45288", "vulnerability_url": "/vuln/CVE-2023-45288"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T15:25:48+00:00", "cve": "CVE-2022-3064", "id": "CVE-2022-3064", "initial_release_date": "2022-08-29T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "go-yaml: Improve heuristics preventing CPU/memory abuse by parsing malicious or large YAML documents", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-3064.json", "version": "3", "product_status": {"fixed": 658, "known_affected": 77, "known_not_affected": 3379, "under_investigation": 2}, "imported": 1785857148.0, "vulnerability_id": "CVE-2022-3064", "vulnerability_url": "/vuln/CVE-2022-3064"}, {"meta_source": "redhat_vex", "aggregate_severity": "Critical", "current_release_date": "2026-08-04T15:24:49+00:00", "cve": "CVE-2023-49569", "id": "CVE-2023-49569", "initial_release_date": "2023-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "go-git: Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-49569.json", "version": "3", "product_status": {"fixed": 1287, "known_affected": 27, "known_not_affected": 7555}, "imported": 1785857089.0, "vulnerability_id": "CVE-2023-49569", "vulnerability_url": "/vuln/CVE-2023-49569"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T15:23:04+00:00", "cve": "CVE-2023-49568", "id": "CVE-2023-49568", "initial_release_date": "2023-12-24T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "go-git: Maliciously crafted Git server replies can cause DoS on go-git clients", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-49568.json", "version": "3", "product_status": {"fixed": 612, "known_affected": 31, "known_not_affected": 7136, "under_investigation": 1}, "imported": 1785856984.0, "vulnerability_id": "CVE-2023-49568", "vulnerability_url": "/vuln/CVE-2023-49568"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T15:08:38+00:00", "cve": "CVE-2021-28235", "id": "CVE-2021-28235", "initial_release_date": "2021-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "etcd: Information discosure via debug function", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-28235.json", "version": "3", "product_status": {"fixed": 18, "known_affected": 10, "known_not_affected": 1}, "imported": 1785856118.0, "vulnerability_id": "CVE-2021-28235", "vulnerability_url": "/vuln/CVE-2021-28235"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T15:05:43+00:00", "cve": "CVE-2025-66506", "id": "CVE-2025-66506", "initial_release_date": "2025-12-04T22:04:41.637000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "github.com/sigstore/fulcio: Fulcio: Denial of Service via crafted OpenID Connect (OIDC) token", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-66506.json", "version": "3", "product_status": {"fixed": 321, "known_affected": 65, "known_not_affected": 1257}, "imported": 1785855943.0, "vulnerability_id": "CVE-2025-66506", "vulnerability_url": "/vuln/CVE-2025-66506"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T15:05:09+00:00", "cve": "CVE-2025-64756", "id": "CVE-2025-64756", "initial_release_date": "2025-11-17T17:29:08.029000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "glob: glob: Command Injection Vulnerability via Malicious Filenames", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-64756.json", "version": "3", "product_status": {"fixed": 171, "known_affected": 115, "known_not_affected": 1097}, "imported": 1785855909.0, "vulnerability_id": "CVE-2025-64756", "vulnerability_url": "/vuln/CVE-2025-64756"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T15:04:45+00:00", "cve": "CVE-2025-56005", "id": "CVE-2025-56005", "initial_release_date": "2025-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "ply: python-ply: Unsafe pickle file handling in Ply", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-56005.json", "version": "3", "product_status": {"known_affected": 434, "known_not_affected": 32}, "imported": 1785855885.0, "vulnerability_id": "CVE-2025-56005", "vulnerability_url": "/vuln/CVE-2025-56005"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T15:04:25+00:00", "cve": "CVE-2025-52881", "id": "CVE-2025-52881", "initial_release_date": "2025-11-05T09:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-52881.json", "version": "3", "product_status": {"fixed": 2380, "known_affected": 44, "known_not_affected": 4070}, "imported": 1785855865.0, "vulnerability_id": "CVE-2025-52881", "vulnerability_url": "/vuln/CVE-2025-52881"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T15:02:55+00:00", "cve": "CVE-2025-15284", "id": "CVE-2025-15284", "initial_release_date": "2025-12-29T22:56:45.240000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "qs: qs: Denial of Service via improper input validation in array parsing", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15284.json", "version": "3", "product_status": {"fixed": 482, "known_affected": 80, "known_not_affected": 5335}, "imported": 1785855775.0, "vulnerability_id": "CVE-2025-15284", "vulnerability_url": "/vuln/CVE-2025-15284"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T15:02:53+00:00", "cve": "CVE-2025-13465", "id": "CVE-2025-13465", "initial_release_date": "2025-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "lodash: prototype pollution in _.unset and _.omit functions", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-13465.json", "version": "3", "product_status": {"fixed": 673, "known_affected": 303, "known_not_affected": 12232}, "imported": 1785855773.0, "vulnerability_id": "CVE-2025-13465", "vulnerability_url": "/vuln/CVE-2025-13465"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T15:02:48+00:00", "cve": "CVE-2024-55949", "id": "CVE-2024-55949", "initial_release_date": "2024-12-16T20:02:00.856000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "minio: Privilege escalation in IAM import API in MinIO", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-55949.json", "version": "3", "product_status": {"known_not_affected": 46}, "imported": 1785855768.0, "vulnerability_id": "CVE-2024-55949", "vulnerability_url": "/vuln/CVE-2024-55949"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T15:02:22+00:00", "cve": "CVE-2024-45337", "id": "CVE-2024-45337", "initial_release_date": "2024-12-11T18:55:58.506000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-45337.json", "version": "3", "product_status": {"fixed": 1728, "known_affected": 74, "known_not_affected": 8476}, "imported": 1785855742.0, "vulnerability_id": "CVE-2024-45337", "vulnerability_url": "/vuln/CVE-2024-45337"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T14:49:23+00:00", "cve": "CVE-2020-25644", "id": "CVE-2020-25644", "initial_release_date": "2020-09-22T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "wildfly-openssl: memory leak per HTTP session creation in WildFly OpenSSL", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2020/cve-2020-25644.json", "version": "3", "product_status": {"fixed": 321, "known_affected": 1, "known_not_affected": 2}, "imported": 1785854963.0, "vulnerability_id": "CVE-2020-25644", "vulnerability_url": "/vuln/CVE-2020-25644"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T14:41:32+00:00", "cve": "CVE-2017-12174", "id": "CVE-2017-12174", "initial_release_date": "2017-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "artemis/hornetq: memory exhaustion via UDP and JGroups discovery", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2017/cve-2017-12174.json", "version": "3", "product_status": {"fixed": 793, "known_not_affected": 1}, "imported": 1785854492.0, "vulnerability_id": "CVE-2017-12174", "vulnerability_url": "/vuln/CVE-2017-12174"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T14:35:52+00:00", "cve": "CVE-2023-30551", "id": "CVE-2023-30551", "initial_release_date": "2023-05-09T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "rekor: compressed archives can result in OOM conditions", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-30551.json", "version": "3", "product_status": {"fixed": 8, "known_affected": 1, "known_not_affected": 893}, "imported": 1785854152.0, "vulnerability_id": "CVE-2023-30551", "vulnerability_url": "/vuln/CVE-2023-30551"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T14:35:40+00:00", "cve": "CVE-2023-25151", "id": "CVE-2023-25151", "initial_release_date": "2023-02-08T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "opentelemetry-go: DoS vulnerability for high cardinality metrics in otelhttp and otelbeego", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-25151.json", "version": "3", "product_status": {"known_not_affected": 282}, "imported": 1785854140.0, "vulnerability_id": "CVE-2023-25151", "vulnerability_url": "/vuln/CVE-2023-25151"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T14:35:35+00:00", "cve": "CVE-2023-5332", "id": "CVE-2023-5332", "initial_release_date": "2023-12-04T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "consul: Command injection through script checks option", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-5332.json", "version": "3", "product_status": {"known_affected": 20, "known_not_affected": 55}, "imported": 1785854135.0, "vulnerability_id": "CVE-2023-5332", "vulnerability_url": "/vuln/CVE-2023-5332"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T14:35:10+00:00", "cve": "CVE-2021-3918", "id": "CVE-2021-3918", "initial_release_date": "2021-10-03T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "nodejs-json-schema: Prototype pollution vulnerability", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-3918.json", "version": "3", "product_status": {"fixed": 242, "known_affected": 29, "known_not_affected": 9}, "imported": 1785854110.0, "vulnerability_id": "CVE-2021-3918", "vulnerability_url": "/vuln/CVE-2021-3918"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T14:32:30+00:00", "cve": "CVE-2014-0107", "id": "CVE-2014-0107", "initial_release_date": "2014-03-24T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Xalan-Java: insufficient constraints in secure processing feature", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2014/cve-2014-0107.json", "version": "3", "product_status": {"fixed": 100, "known_affected": 3, "known_not_affected": 9}, "imported": 1785853950.0, "vulnerability_id": "CVE-2014-0107", "vulnerability_url": "/vuln/CVE-2014-0107"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T14:31:13+00:00", "cve": "CVE-2026-9595", "id": "CVE-2026-9595", "initial_release_date": "2026-06-15T15:00:21.488000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "webpack-dev-server: webpack-dev-server: Information disclosure and denial of service via improper proxy configuration", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9595.json", "version": "3", "product_status": {"fixed": 14, "known_affected": 65, "known_not_affected": 1983}, "imported": 1785853873.0, "vulnerability_id": "CVE-2026-9595", "vulnerability_url": "/vuln/CVE-2026-9595"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T14:28:12+00:00", "cve": "CVE-2012-3546", "id": "CVE-2012-3546", "initial_release_date": "2012-12-04T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Web: Bypass of security constraints", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2012/cve-2012-3546.json", "version": "3", "product_status": {"fixed": 1082, "known_affected": 5, "known_not_affected": 3}, "imported": 1785853692.0, "vulnerability_id": "CVE-2012-3546", "vulnerability_url": "/vuln/CVE-2012-3546"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T14:28:09+00:00", "cve": "CVE-2011-2487", "id": "CVE-2011-2487", "initial_release_date": "2011-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "jbossws: Prone to Bleichenbacher attack against to be distributed symmetric key", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2011/cve-2011-2487.json", "version": "3", "product_status": {"fixed": 884, "known_affected": 5}, "imported": 1785853689.0, "vulnerability_id": "CVE-2011-2487", "vulnerability_url": "/vuln/CVE-2011-2487"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T14:26:02+00:00", "cve": "CVE-2020-9283", "id": "CVE-2020-9283", "initial_release_date": "2020-02-21T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2020/cve-2020-9283.json", "version": "3", "product_status": {"fixed": 75, "known_affected": 85, "known_not_affected": 637}, "imported": 1785853562.0, "vulnerability_id": "CVE-2020-9283", "vulnerability_url": "/vuln/CVE-2020-9283"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T14:25:45+00:00", "cve": "CVE-2019-20933", "id": "CVE-2019-20933", "initial_release_date": "2019-03-27T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "influxdb: authentication bypass because a JWT token may have an empty SharedSecret", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2019/cve-2019-20933.json", "version": "3", "product_status": {"known_not_affected": 15}, "imported": 1785853545.0, "vulnerability_id": "CVE-2019-20933", "vulnerability_url": "/vuln/CVE-2019-20933"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T14:25:34+00:00", "cve": "CVE-2011-2729", "id": "CVE-2011-2729", "initial_release_date": "2011-08-12T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "jakarta-commons-daemon: jsvc does not drop capabilities allowing access to files and directories owned by the superuser", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2011/cve-2011-2729.json", "version": "3", "product_status": {"fixed": 1, "known_affected": 1, "known_not_affected": 4}, "imported": 1785853534.0, "vulnerability_id": "CVE-2011-2729", "vulnerability_url": "/vuln/CVE-2011-2729"}, {"meta_source": "redhat_vex", "current_release_date": "2026-08-04T14:21:07+00:00", "cve": "CVE-2026-41252", "id": "CVE-2026-41252", "initial_release_date": "2026-07-20T16:29:53.496000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "xrdp: heap-based buffer overflow in vnc-any mode", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41252.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1785853267.0, "vulnerability_id": "CVE-2026-41252", "vulnerability_url": "/vuln/CVE-2026-41252"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:18:41+00:00", "cve": "CVE-2024-49981", "id": "CVE-2024-49981", "initial_release_date": "2024-10-21T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: media: venus: fix use after free bug in venus_remove due to race condition", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-49981.json", "version": "3", "product_status": {"known_not_affected": 198}, "imported": 1785853121.0, "vulnerability_id": "CVE-2024-49981", "vulnerability_url": "/vuln/CVE-2024-49981"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:18:37+00:00", "cve": "CVE-2024-50152", "id": "CVE-2024-50152", "initial_release_date": "2024-11-07T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: smb: client: fix possible double free in smb2_set_ea()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-50152.json", "version": "3", "product_status": {"fixed": 305, "known_affected": 22, "known_not_affected": 90}, "imported": 1785853117.0, "vulnerability_id": "CVE-2024-50152", "vulnerability_url": "/vuln/CVE-2024-50152"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:18:32+00:00", "cve": "CVE-2024-50119", "id": "CVE-2024-50119", "initial_release_date": "2024-11-05T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: cifs: fix warning when destroy 'cifs_io_request_pool'", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-50119.json", "version": "3", "product_status": {"known_not_affected": 198}, "imported": 1785853112.0, "vulnerability_id": "CVE-2024-50119", "vulnerability_url": "/vuln/CVE-2024-50119"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:18:27+00:00", "cve": "CVE-2024-50027", "id": "CVE-2024-50027", "initial_release_date": "2024-10-21T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: thermal: core: Free tzp copy along with the thermal zone", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-50027.json", "version": "3", "product_status": {"fixed": 305, "known_affected": 50, "known_not_affected": 62}, "imported": 1785853107.0, "vulnerability_id": "CVE-2024-50027", "vulnerability_url": "/vuln/CVE-2024-50027"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:18:25+00:00", "cve": "CVE-2024-50029", "id": "CVE-2024-50029", "initial_release_date": "2024-10-21T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-50029.json", "version": "3", "product_status": {"fixed": 305, "known_affected": 64, "known_not_affected": 48}, "imported": 1785853105.0, "vulnerability_id": "CVE-2024-50029", "vulnerability_url": "/vuln/CVE-2024-50029"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:18:21+00:00", "cve": "CVE-2024-49984", "id": "CVE-2024-49984", "initial_release_date": "2024-10-21T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/v3d: Prevent out of bounds access in performance query extensions", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-49984.json", "version": "3", "product_status": {"known_not_affected": 198}, "imported": 1785853101.0, "vulnerability_id": "CVE-2024-49984", "vulnerability_url": "/vuln/CVE-2024-49984"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:18:15+00:00", "cve": "CVE-2024-50055", "id": "CVE-2024-50055", "initial_release_date": "2024-10-21T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: driver core: bus: Fix double free in driver API bus_register()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-50055.json", "version": "3", "product_status": {"fixed": 305, "known_affected": 112}, "imported": 1785853095.0, "vulnerability_id": "CVE-2024-50055", "vulnerability_url": "/vuln/CVE-2024-50055"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:18:14+00:00", "cve": "CVE-2024-50031", "id": "CVE-2024-50031", "initial_release_date": "2024-10-21T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/v3d: Stop the active perfmon before being destroyed", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-50031.json", "version": "3", "product_status": {"known_not_affected": 198}, "imported": 1785853094.0, "vulnerability_id": "CVE-2024-50031", "vulnerability_url": "/vuln/CVE-2024-50031"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:18:08+00:00", "cve": "CVE-2024-49986", "id": "CVE-2024-49986", "initial_release_date": "2024-10-21T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-49986.json", "version": "3", "product_status": {"known_not_affected": 198}, "imported": 1785853088.0, "vulnerability_id": "CVE-2024-49986", "vulnerability_url": "/vuln/CVE-2024-49986"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:18:04+00:00", "cve": "CVE-2024-50257", "id": "CVE-2024-50257", "initial_release_date": "2024-11-09T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: netfilter: Fix use-after-free in get_info()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-50257.json", "version": "3", "product_status": {"known_affected": 42, "known_not_affected": 156}, "imported": 1785853084.0, "vulnerability_id": "CVE-2024-50257", "vulnerability_url": "/vuln/CVE-2024-50257"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:18:04+00:00", "cve": "CVE-2024-50268", "id": "CVE-2024-50268", "initial_release_date": "2024-11-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-50268.json", "version": "3", "product_status": {"known_affected": 108, "known_not_affected": 90}, "imported": 1785853084.0, "vulnerability_id": "CVE-2024-50268", "vulnerability_url": "/vuln/CVE-2024-50268"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:17:58+00:00", "cve": "CVE-2024-50195", "id": "CVE-2024-50195", "initial_release_date": "2024-11-08T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: posix-clock: Fix missing timespec64 check in pc_clock_settime()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-50195.json", "version": "3", "product_status": {"fixed": 303, "known_affected": 112}, "imported": 1785853078.0, "vulnerability_id": "CVE-2024-50195", "vulnerability_url": "/vuln/CVE-2024-50195"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:17:57+00:00", "cve": "CVE-2024-50175", "id": "CVE-2024-50175", "initial_release_date": "2024-11-08T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: media: qcom: camss: Remove use_count guard in stop_streaming", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-50175.json", "version": "3", "product_status": {"known_not_affected": 198}, "imported": 1785853077.0, "vulnerability_id": "CVE-2024-50175", "vulnerability_url": "/vuln/CVE-2024-50175"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:17:51+00:00", "cve": "CVE-2024-53080", "id": "CVE-2024-53080", "initial_release_date": "2024-11-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/panthor: Lock XArray when getting entries for the VM", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-53080.json", "version": "3", "product_status": {"known_not_affected": 198}, "imported": 1785853071.0, "vulnerability_id": "CVE-2024-53080", "vulnerability_url": "/vuln/CVE-2024-53080"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:17:32+00:00", "cve": "CVE-2024-53110", "id": "CVE-2024-53110", "initial_release_date": "2024-12-02T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: vp_vdpa: fix id_table array not null terminated error", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-53110.json", "version": "3", "product_status": {"fixed": 305, "known_affected": 22, "known_not_affected": 90}, "imported": 1785853052.0, "vulnerability_id": "CVE-2024-53110", "vulnerability_url": "/vuln/CVE-2024-53110"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:17:32+00:00", "cve": "CVE-2024-53107", "id": "CVE-2024-53107", "initial_release_date": "2024-12-02T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: fs/proc/task_mmu: prevent integer overflow in pagemap_scan_get_args()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-53107.json", "version": "3", "product_status": {"known_affected": 42, "known_not_affected": 156}, "imported": 1785853052.0, "vulnerability_id": "CVE-2024-53107", "vulnerability_url": "/vuln/CVE-2024-53107"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:17:29+00:00", "cve": "CVE-2024-50164", "id": "CVE-2024-50164", "initial_release_date": "2024-11-07T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: bpf: Fix overloading of MEM_UNINIT's meaning", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-50164.json", "version": "3", "product_status": {"known_affected": 136, "known_not_affected": 62}, "imported": 1785853049.0, "vulnerability_id": "CVE-2024-50164", "vulnerability_url": "/vuln/CVE-2024-50164"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:17:22+00:00", "cve": "CVE-2024-50256", "id": "CVE-2024-50256", "initial_release_date": "2024-11-09T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-50256.json", "version": "3", "product_status": {"fixed": 734, "known_affected": 50, "known_not_affected": 14}, "imported": 1785853042.0, "vulnerability_id": "CVE-2024-50256", "vulnerability_url": "/vuln/CVE-2024-50256"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:17:20+00:00", "cve": "CVE-2024-53073", "id": "CVE-2024-53073", "initial_release_date": "2024-11-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: NFSD: Never decrement pending_async_copies on error", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-53073.json", "version": "3", "product_status": {"known_affected": 198}, "imported": 1785853040.0, "vulnerability_id": "CVE-2024-53073", "vulnerability_url": "/vuln/CVE-2024-53073"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:17:17+00:00", "cve": "CVE-2024-50294", "id": "CVE-2024-50294", "initial_release_date": "2024-11-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: rxrpc: Fix missing locking causing hanging calls", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-50294.json", "version": "3", "product_status": {"fixed": 303, "known_affected": 22, "known_not_affected": 90}, "imported": 1785853037.0, "vulnerability_id": "CVE-2024-50294", "vulnerability_url": "/vuln/CVE-2024-50294"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:17:13+00:00", "cve": "CVE-2024-53092", "id": "CVE-2024-53092", "initial_release_date": "2024-11-21T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: virtio_pci: Fix admin vq cleanup by using correct info pointer", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-53092.json", "version": "3", "product_status": {"known_affected": 28, "known_not_affected": 170}, "imported": 1785853033.0, "vulnerability_id": "CVE-2024-53092", "vulnerability_url": "/vuln/CVE-2024-53092"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:17:10+00:00", "cve": "CVE-2024-53044", "id": "CVE-2024-53044", "initial_release_date": "2024-11-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: net/sched: sch_api: fix xa_insert() error path in tcf_block_get_ext()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-53044.json", "version": "3", "product_status": {"fixed": 305, "known_affected": 64, "known_not_affected": 48}, "imported": 1785853030.0, "vulnerability_id": "CVE-2024-53044", "vulnerability_url": "/vuln/CVE-2024-53044"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:17:08+00:00", "cve": "CVE-2024-50162", "id": "CVE-2024-50162", "initial_release_date": "2024-11-07T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: bpf: devmap: provide rxq after redirect", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-50162.json", "version": "3", "product_status": {"fixed": 305, "known_affected": 98, "known_not_affected": 14}, "imported": 1785853028.0, "vulnerability_id": "CVE-2024-50162", "vulnerability_url": "/vuln/CVE-2024-50162"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:17:04+00:00", "cve": "CVE-2024-53066", "id": "CVE-2024-53066", "initial_release_date": "2024-11-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: nfs: Fix KMSAN warning in decode_getfattr_attrs()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-53066.json", "version": "3", "product_status": {"known_affected": 198}, "imported": 1785853024.0, "vulnerability_id": "CVE-2024-53066", "vulnerability_url": "/vuln/CVE-2024-53066"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:17:03+00:00", "cve": "CVE-2024-50288", "id": "CVE-2024-50288", "initial_release_date": "2024-11-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: media: vivid: fix buffer overwrite when using > 32 buffers", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-50288.json", "version": "3", "product_status": {"known_not_affected": 198}, "imported": 1785853023.0, "vulnerability_id": "CVE-2024-50288", "vulnerability_url": "/vuln/CVE-2024-50288"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:17:01+00:00", "cve": "CVE-2024-53058", "id": "CVE-2024-53058", "initial_release_date": "2024-11-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-53058.json", "version": "3", "product_status": {"known_not_affected": 198}, "imported": 1785853021.0, "vulnerability_id": "CVE-2024-53058", "vulnerability_url": "/vuln/CVE-2024-53058"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:16:56+00:00", "cve": "CVE-2024-50299", "id": "CVE-2024-50299", "initial_release_date": "2024-11-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: sctp: properly validate chunk size in sctp_sf_ootb()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-50299.json", "version": "3", "product_status": {"fixed": 305, "known_affected": 112}, "imported": 1785853016.0, "vulnerability_id": "CVE-2024-50299", "vulnerability_url": "/vuln/CVE-2024-50299"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:16:53+00:00", "cve": "CVE-2024-50187", "id": "CVE-2024-50187", "initial_release_date": "2024-11-08T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: drm/vc4: Stop the active perfmon before being destroyed", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-50187.json", "version": "3", "product_status": {"known_not_affected": 198}, "imported": 1785853013.0, "vulnerability_id": "CVE-2024-50187", "vulnerability_url": "/vuln/CVE-2024-50187"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:16:49+00:00", "cve": "CVE-2024-50208", "id": "CVE-2024-50208", "initial_release_date": "2024-11-08T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-50208.json", "version": "3", "product_status": {"fixed": 280, "known_affected": 98, "known_not_affected": 14}, "imported": 1785853009.0, "vulnerability_id": "CVE-2024-50208", "vulnerability_url": "/vuln/CVE-2024-50208"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:16:48+00:00", "cve": "CVE-2024-50247", "id": "CVE-2024-50247", "initial_release_date": "2024-11-09T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: fs/ntfs3: Check if more than chunk-size bytes are written", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-50247.json", "version": "3", "product_status": {"known_not_affected": 198}, "imported": 1785853008.0, "vulnerability_id": "CVE-2024-50247", "vulnerability_url": "/vuln/CVE-2024-50247"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:16:42+00:00", "cve": "CVE-2024-50250", "id": "CVE-2024-50250", "initial_release_date": "2024-11-09T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: fsdax: dax_unshare_iter needs to copy entire blocks", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-50250.json", "version": "3", "product_status": {"known_affected": 136, "known_not_affected": 62}, "imported": 1785853002.0, "vulnerability_id": "CVE-2024-50250", "vulnerability_url": "/vuln/CVE-2024-50250"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:16:38+00:00", "cve": "CVE-2024-53063", "id": "CVE-2024-53063", "initial_release_date": "2024-11-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: media: dvbdev: prevent the risk of out of memory access", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-53063.json", "version": "3", "product_status": {"known_affected": 76, "known_not_affected": 122}, "imported": 1785852998.0, "vulnerability_id": "CVE-2024-53063", "vulnerability_url": "/vuln/CVE-2024-53063"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:16:37+00:00", "cve": "CVE-2024-50189", "id": "CVE-2024-50189", "initial_release_date": "2024-11-08T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-50189.json", "version": "3", "product_status": {"fixed": 305, "known_affected": 70, "known_not_affected": 42}, "imported": 1785852997.0, "vulnerability_id": "CVE-2024-50189", "vulnerability_url": "/vuln/CVE-2024-50189"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T14:16:35+00:00", "cve": "CVE-2024-38355", "id": "CVE-2024-38355", "initial_release_date": "2024-06-20T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "socket.io: Unhandled 'error' event", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-38355.json", "version": "3", "product_status": {"known_affected": 3, "known_not_affected": 1}, "imported": 1785852995.0, "vulnerability_id": "CVE-2024-38355", "vulnerability_url": "/vuln/CVE-2024-38355"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T14:16:34+00:00", "cve": "CVE-2024-28752", "id": "CVE-2024-28752", "initial_release_date": "2024-03-14T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "cxf-core: Apache CXF SSRF Vulnerability using the Aegis databinding", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-28752.json", "version": "3", "product_status": {"fixed": 252, "known_affected": 2, "known_not_affected": 2719}, "imported": 1785852994.0, "vulnerability_id": "CVE-2024-28752", "vulnerability_url": "/vuln/CVE-2024-28752"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T14:16:32+00:00", "cve": "CVE-2024-47072", "id": "CVE-2024-47072", "initial_release_date": "2024-11-07T23:38:52.978000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "com.thoughtworks.xstream: XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input stream", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-47072.json", "version": "3", "product_status": {"fixed": 36, "known_affected": 9, "known_not_affected": 12}, "imported": 1785852992.0, "vulnerability_id": "CVE-2024-47072", "vulnerability_url": "/vuln/CVE-2024-47072"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T14:16:15+00:00", "cve": "CVE-2023-52428", "id": "CVE-2023-52428", "initial_release_date": "2023-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "nimbus-jose-jwt: large JWE p2c header value causes Denial of Service", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-52428.json", "version": "3", "product_status": {"fixed": 238, "known_affected": 8, "known_not_affected": 7}, "imported": 1785852975.0, "vulnerability_id": "CVE-2023-52428", "vulnerability_url": "/vuln/CVE-2023-52428"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T14:15:19+00:00", "cve": "CVE-2024-29736", "id": "CVE-2024-29736", "initial_release_date": "2024-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "apache: cxf: org.apache.cxf:cxf-rt-rs-service-description: SSRF via WADL stylesheet parameter", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-29736.json", "version": "3", "product_status": {"fixed": 2, "known_affected": 3, "known_not_affected": 3}, "imported": 1785852919.0, "vulnerability_id": "CVE-2024-29736", "vulnerability_url": "/vuln/CVE-2024-29736"}, {"meta_source": "redhat_vex", "aggregate_severity": "Important", "current_release_date": "2026-08-04T14:15:04+00:00", "cve": "CVE-2024-25638", "id": "CVE-2024-25638", "initial_release_date": "2024-07-22T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "dnsjava: Improper response validation allowing DNSSEC bypass", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-25638.json", "version": "3", "product_status": {"known_affected": 4, "known_not_affected": 5}, "imported": 1785852904.0, "vulnerability_id": "CVE-2024-25638", "vulnerability_url": "/vuln/CVE-2024-25638"}, {"meta_source": "redhat_vex", "aggregate_severity": "Critical", "current_release_date": "2026-08-04T14:15:01+00:00", "cve": "CVE-2024-53677", "id": "CVE-2024-53677", "initial_release_date": "2024-12-11T15:35:43.389000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "struts: org.apache.struts: mixing setters for uploaded files and normal fields can allow bypass file upload checks", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-53677.json", "version": "3", "product_status": {"known_not_affected": 64}, "imported": 1785852901.0, "vulnerability_id": "CVE-2024-53677", "vulnerability_url": "/vuln/CVE-2024-53677"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:13:44+00:00", "cve": "CVE-2024-53106", "id": "CVE-2024-53106", "initial_release_date": "2024-12-02T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: ima: fix buffer overrun in ima_eventdigest_init_common", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-53106.json", "version": "3", "product_status": {"known_not_affected": 198}, "imported": 1785852824.0, "vulnerability_id": "CVE-2024-53106", "vulnerability_url": "/vuln/CVE-2024-53106"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:13:40+00:00", "cve": "CVE-2024-53095", "id": "CVE-2024-53095", "initial_release_date": "2024-11-21T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: smb: client: Fix use-after-free of network namespace.", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-53095.json", "version": "3", "product_status": {"fixed": 305, "known_affected": 70, "known_not_affected": 42}, "imported": 1785852820.0, "vulnerability_id": "CVE-2024-53095", "vulnerability_url": "/vuln/CVE-2024-53095"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:13:38+00:00", "cve": "CVE-2024-53109", "id": "CVE-2024-53109", "initial_release_date": "2024-12-02T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: nommu: pass NULL argument to vma_iter_prealloc()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-53109.json", "version": "3", "product_status": {"known_affected": 150, "known_not_affected": 48}, "imported": 1785852818.0, "vulnerability_id": "CVE-2024-53109", "vulnerability_url": "/vuln/CVE-2024-53109"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:13:37+00:00", "cve": "CVE-2024-50206", "id": "CVE-2024-50206", "initial_release_date": "2024-11-08T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: net: ethernet: mtk_eth_soc: fix memory corruption during fq dma init", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-50206.json", "version": "3", "product_status": {"known_not_affected": 198}, "imported": 1785852817.0, "vulnerability_id": "CVE-2024-50206", "vulnerability_url": "/vuln/CVE-2024-50206"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:13:36+00:00", "cve": "CVE-2024-50237", "id": "CVE-2024-50237", "initial_release_date": "2024-11-09T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-50237.json", "version": "3", "product_status": {"fixed": 305, "known_affected": 112}, "imported": 1785852816.0, "vulnerability_id": "CVE-2024-50237", "vulnerability_url": "/vuln/CVE-2024-50237"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:13:33+00:00", "cve": "CVE-2024-53088", "id": "CVE-2024-53088", "initial_release_date": "2024-11-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: i40e: fix race condition by adding filter's intermediate sync state", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-53088.json", "version": "3", "product_status": {"fixed": 709, "known_affected": 50, "known_not_affected": 14}, "imported": 1785852813.0, "vulnerability_id": "CVE-2024-53088", "vulnerability_url": "/vuln/CVE-2024-53088"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:13:32+00:00", "cve": "CVE-2024-50253", "id": "CVE-2024-50253", "initial_release_date": "2024-11-09T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: bpf: Check the validity of nr_words in bpf_iter_bits_new()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-50253.json", "version": "3", "product_status": {"known_affected": 28, "known_not_affected": 170}, "imported": 1785852812.0, "vulnerability_id": "CVE-2024-50253", "vulnerability_url": "/vuln/CVE-2024-50253"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:13:28+00:00", "cve": "CVE-2024-50185", "id": "CVE-2024-50185", "initial_release_date": "2024-11-08T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: mptcp: handle consistently DSS corruption", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-50185.json", "version": "3", "product_status": {"known_affected": 156, "known_not_affected": 42}, "imported": 1785852808.0, "vulnerability_id": "CVE-2024-50185", "vulnerability_url": "/vuln/CVE-2024-50185"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:13:28+00:00", "cve": "CVE-2024-50165", "id": "CVE-2024-50165", "initial_release_date": "2024-11-07T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: bpf: Preserve param->string when parsing mount options", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-50165.json", "version": "3", "product_status": {"known_affected": 136, "known_not_affected": 62}, "imported": 1785852808.0, "vulnerability_id": "CVE-2024-50165", "vulnerability_url": "/vuln/CVE-2024-50165"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:13:26+00:00", "cve": "CVE-2024-50248", "id": "CVE-2024-50248", "initial_release_date": "2024-11-09T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: ntfs3: Add bounds checking to mi_enum_attr()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-50248.json", "version": "3", "product_status": {"known_not_affected": 198}, "imported": 1785852806.0, "vulnerability_id": "CVE-2024-50248", "vulnerability_url": "/vuln/CVE-2024-50248"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:13:24+00:00", "cve": "CVE-2024-50217", "id": "CVE-2024-50217", "initial_release_date": "2024-11-09T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: btrfs: fix use-after-free of block device file in __btrfs_free_extra_devids()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-50217.json", "version": "3", "product_status": {"known_affected": 42, "known_not_affected": 156}, "imported": 1785852804.0, "vulnerability_id": "CVE-2024-50217", "vulnerability_url": "/vuln/CVE-2024-50217"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:13:22+00:00", "cve": "CVE-2024-50225", "id": "CVE-2024-50225", "initial_release_date": "2024-11-09T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: btrfs: fix error propagation of split bios", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-50225.json", "version": "3", "product_status": {"known_not_affected": 198}, "imported": 1785852802.0, "vulnerability_id": "CVE-2024-50225", "vulnerability_url": "/vuln/CVE-2024-50225"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:13:18+00:00", "cve": "CVE-2024-51729", "id": "CVE-2024-51729", "initial_release_date": "2024-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: mm: use aligned address in copy_user_gigantic_page()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-51729.json", "version": "3", "product_status": {"known_not_affected": 198}, "imported": 1785852798.0, "vulnerability_id": "CVE-2024-51729", "vulnerability_url": "/vuln/CVE-2024-51729"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:13:14+00:00", "cve": "CVE-2024-50215", "id": "CVE-2024-50215", "initial_release_date": "2024-11-09T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: nvmet-auth: assign dh_key to NULL after kfree_sensitive", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-50215.json", "version": "3", "product_status": {"fixed": 305, "known_affected": 22, "known_not_affected": 90}, "imported": 1785852794.0, "vulnerability_id": "CVE-2024-50215", "vulnerability_url": "/vuln/CVE-2024-50215"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:13:14+00:00", "cve": "CVE-2024-50203", "id": "CVE-2024-50203", "initial_release_date": "2024-11-08T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: bpf, arm64: Fix address emission with tag-based KASAN enabled", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-50203.json", "version": "3", "product_status": {"known_affected": 48, "known_not_affected": 150}, "imported": 1785852794.0, "vulnerability_id": "CVE-2024-50203", "vulnerability_url": "/vuln/CVE-2024-50203"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T14:13:10+00:00", "cve": "CVE-2024-50200", "id": "CVE-2024-50200", "initial_release_date": "2024-11-08T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "kernel: maple_tree: correct tree corruption on spanning store", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-50200.json", "version": "3", "product_status": {"fixed": 305, "known_affected": 22, "known_not_affected": 90}, "imported": 1785852790.0, "vulnerability_id": "CVE-2024-50200", "vulnerability_url": "/vuln/CVE-2024-50200"}]}