VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
282826 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-14476 | redhat_vex | sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass | fixed: 995 known affected: 101 | 2026-07-21T00:29:06+00:00 | Vulnerability · Source |
| CVE-2024-21536 | redhat_vex | http-proxy-middleware: Denial of Service | fixed: 253 known affected: 62 known not affected: 956 | 2026-07-21T00:27:17+00:00 | Vulnerability · Source |
| CVE-2025-55199 | redhat_vex | helm.sh/helm/v3: Helm Chart JSON Schema Denial of Service | fixed: 8 known affected: 97 known not affected: 1318 | 2026-07-21T00:16:26+00:00 | Vulnerability · Source |
| CVE-2025-55198 | redhat_vex | helm.sh/helm/v3: Helm YAML Parsing Panic Vulnerability | fixed: 8 known affected: 97 known not affected: 1318 | 2026-07-21T00:16:11+00:00 | Vulnerability · Source |
| CVE-2025-68156 | redhat_vex | github.com/expr-lang/expr: Expr: Denial of Service via uncontrolled recursion in expression evaluation | fixed: 180 known affected: 2 known not affected: 730 | 2026-07-21T00:08:13+00:00 | Vulnerability · Source |
| CVE-2025-59343 | redhat_vex | tar-fs: tar-fs symlink validation bypass | fixed: 60 known affected: 12 known not affected: 475 | 2026-07-21T00:06:35+00:00 | Vulnerability · Source |
| CVE-2025-5914 | redhat_vex | libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c | fixed: 679 known affected: 3 known not affected: 14 | 2026-07-21T00:05:28+00:00 | Vulnerability · Source |
| CVE-2026-32285 | redhat_vex | github.com/buger/jsonparser: github.com/buger/jsonparser: Denial of Service via malformed JSON input | fixed: 54 known affected: 7 known not affected: 510 | 2026-07-21T00:04:51+00:00 | Vulnerability · Source |
| CVE-2026-4926 | redhat_vex | path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions | fixed: 44 known affected: 30 known not affected: 955 | 2026-07-21T00:04:07+00:00 | Vulnerability · Source |
| CVE-2025-7425 | redhat_vex | libxslt: libxml2: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr | fixed: 633 known affected: 4 known not affected: 12 | 2026-07-21T00:03:42+00:00 | Vulnerability · Source |
| CVE-2025-24928 | redhat_vex | libxml2: Stack-based buffer overflow in xmlSnprintfElements of libxml2 | fixed: 617 known affected: 5 known not affected: 3715 | 2026-07-21T00:03:12+00:00 | Vulnerability · Source |
| CVE-2025-29786 | redhat_vex | github.com/expr-lang/expr: Memory Exhaustion in Expr Parser with Unrestricted Input | fixed: 71 known affected: 13 known not affected: 49 | 2026-07-21T00:02:18+00:00 | Vulnerability · Source |
| CVE-2025-58068 | redhat_vex | python-eventlet: Eventlet HTTP request smuggling | fixed: 38 known affected: 5 known not affected: 5642 | 2026-07-20T23:57:01+00:00 | Vulnerability · Source |
| CVE-2026-42044 | redhat_vex | axios: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget | fixed: 141 known affected: 48 known not affected: 1634 | 2026-07-20T23:27:37+00:00 | Vulnerability · Source |
| CVE-2025-53547 | redhat_vex | helm.sh/helm/v3: Helm Chart Code Execution | fixed: 95 known affected: 37 known not affected: 2005 | 2026-07-20T23:24:20+00:00 | Vulnerability · Source |
| CVE-2025-9287 | redhat_vex | cipher-base: Cipher-base hash manipulation | fixed: 62 known affected: 25 known not affected: 1128 | 2026-07-20T23:23:01+00:00 | Vulnerability · Source |
| CVE-2025-9288 | redhat_vex | sha.js: Missing type checks leading to hash rewind and passing on crafted data | fixed: 71 known affected: 15 known not affected: 1305 | 2026-07-20T23:21:07+00:00 | Vulnerability · Source |
| CVE-2024-12905 | redhat_vex | tar-fs: link following and path traversal via maliciously crafted tar file | fixed: 48 known affected: 56 known not affected: 56 | 2026-07-20T22:59:46+00:00 | Vulnerability · Source |
| CVE-2025-48387 | redhat_vex | tar-fs: tar-fs has issue where extract can write outside the specified dir with a specific tarball | fixed: 7 known affected: 6 known not affected: 64 | 2026-07-20T22:59:41+00:00 | Vulnerability · Source |
| CVE-2025-29775 | redhat_vex | xml-crypto: xml-crypto Vulnerable to XML Signature Verification Bypass via DigestValue Comment | fixed: 3 known affected: 1 known not affected: 6 | 2026-07-20T22:59:22+00:00 | Vulnerability · Source |
| CVE-2026-14474 | redhat_vex | sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation | fixed: 995 known affected: 101 | 2026-07-20T22:58:48+00:00 | Vulnerability · Source |
| CVE-2024-45339 | redhat_vex | github.com/golang/glog: Vulnerability when creating log files in github.com/golang/glog | fixed: 386 known affected: 30 known not affected: 14340 | 2026-07-20T22:52:03+00:00 | Vulnerability · Source |
| CVE-2024-28180 | redhat_vex | jose-go: improper handling of highly compressed data | fixed: 1835 known affected: 95 known not affected: 14547 | 2026-07-20T22:02:19+00:00 | Vulnerability · Source |
| CVE-2026-10649 | redhat_vex | pacemaker: Pacemaker: Denial of Service via integer overflow in remote message decompression | fixed: 1008 known affected: 11 known not affected: 9 | 2026-07-20T21:24:44+00:00 | Vulnerability · Source |
| CVE-2026-15308 | redhat_vex | python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations | fixed: 466 known affected: 33 known not affected: 34 | 2026-07-20T21:24:37+00:00 | Vulnerability · Source |
| CVE-2026-6321 | redhat_vex | fast-uri: fast-uri: Path traversal vulnerability allows bypass of security policies | fixed: 290 known affected: 30 known not affected: 963 | 2026-07-20T21:23:46+00:00 | Vulnerability · Source |
| CVE-2026-37460 | redhat_vex | frr: FRRouting: Denial of Service via crafted BGP UPDATE message | fixed: 14 known affected: 10 | 2026-07-20T21:05:25+00:00 | Vulnerability · Source |
| CVE-2020-11023 | redhat_vex | jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods | fixed: 5510 known affected: 169 known not affected: 1018 | 2026-07-20T20:37:24+00:00 | Vulnerability · Source |
| CVE-2026-58055 | redhat_vex | nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests | fixed: 6 known affected: 67 | 2026-07-20T20:03:39+00:00 | Vulnerability · Source |
| CVE-2026-43745 | redhat_vex | webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash | fixed: 92 known affected: 17 | 2026-07-20T19:47:34+00:00 | Vulnerability · Source |
| CVE-2026-43742 | redhat_vex | webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash | fixed: 92 known affected: 17 | 2026-07-20T19:47:32+00:00 | Vulnerability · Source |
| CVE-2026-43740 | redhat_vex | webkitgtk: webkitgtk: Maliciously crafted web content may disclose process memory | fixed: 92 known affected: 17 | 2026-07-20T19:47:25+00:00 | Vulnerability · Source |
| CVE-2026-43734 | redhat_vex | webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash | fixed: 92 known affected: 17 | 2026-07-20T19:47:22+00:00 | Vulnerability · Source |
| CVE-2026-43732 | redhat_vex | webkitgtk: webkitgtk: Maliciously crafted web content may disclose sensitive user information | fixed: 92 known affected: 17 | 2026-07-20T19:47:11+00:00 | Vulnerability · Source |
| CVE-2026-43727 | redhat_vex | webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash | fixed: 92 known affected: 17 | 2026-07-20T19:47:01+00:00 | Vulnerability · Source |
| CVE-2026-43726 | redhat_vex | webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash | fixed: 92 known affected: 17 | 2026-07-20T19:46:57+00:00 | Vulnerability · Source |
| CVE-2026-43721 | redhat_vex | webkitgtk: webkitgtk: A malicious website may silently hijack clipboard data | fixed: 92 known affected: 17 | 2026-07-20T19:46:53+00:00 | Vulnerability · Source |
| CVE-2026-43720 | redhat_vex | webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash | fixed: 92 known affected: 17 | 2026-07-20T19:46:51+00:00 | Vulnerability · Source |
| CVE-2026-43716 | redhat_vex | webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash | fixed: 92 known affected: 17 | 2026-07-20T19:46:44+00:00 | Vulnerability · Source |
| CVE-2026-43713 | redhat_vex | webkitgtk: webkitgtk: Visiting a website may leak sensitive data | fixed: 92 known affected: 17 | 2026-07-20T19:46:41+00:00 | Vulnerability · Source |
| CVE-2026-43712 | redhat_vex | webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash | fixed: 92 known affected: 17 | 2026-07-20T19:46:32+00:00 | Vulnerability · Source |
| CVE-2026-43707 | redhat_vex | webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash | fixed: 92 known affected: 17 | 2026-07-20T19:46:28+00:00 | Vulnerability · Source |
| CVE-2026-43699 | redhat_vex | webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash | fixed: 92 known affected: 17 | 2026-07-20T19:46:26+00:00 | Vulnerability · Source |
| CVE-2026-43676 | redhat_vex | webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash | fixed: 92 known affected: 17 | 2026-07-20T19:46:19+00:00 | Vulnerability · Source |
| CVE-2026-43663 | redhat_vex | webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash | fixed: 92 known affected: 17 | 2026-07-20T19:46:16+00:00 | Vulnerability · Source |
| CVE-2026-39872 | redhat_vex | webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash | fixed: 92 known affected: 17 | 2026-07-20T19:46:12+00:00 | Vulnerability · Source |
| CVE-2026-43731 | redhat_vex | webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption | fixed: 92 known affected: 17 | 2026-07-20T19:12:54+00:00 | Vulnerability · Source |
| CVE-2026-43725 | redhat_vex | webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox | fixed: 92 known affected: 17 | 2026-07-20T19:12:51+00:00 | Vulnerability · Source |
| CVE-2026-43715 | redhat_vex | webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption | fixed: 92 known affected: 17 | 2026-07-20T19:12:47+00:00 | Vulnerability · Source |
| CVE-2026-43705 | redhat_vex | webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption | fixed: 92 known affected: 17 | 2026-07-20T19:12:45+00:00 | Vulnerability · Source |