VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
282993 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-15588 | redhat_vex | GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering | fixed: 3 known affected: 47 | 2026-07-21T11:06:10+00:00 | Vulnerability · Source |
| CVE-2025-71319 | redhat_vex | image-size: image-size: Denial of Service due to infinite loop when processing specially crafted images. | fixed: 3 known affected: 14 known not affected: 48 | 2026-07-21T11:06:03+00:00 | Vulnerability · Source |
| CVE-2026-44902 | redhat_vex | opentelemetry-js: opentelemetry/exporter-prometheus: opentelemetry-js: Denial of Service via malformed HTTP request | fixed: 1 known affected: 1 known not affected: 7 | 2026-07-21T10:59:08+00:00 | Vulnerability · Source |
| CVE-2026-12151 | redhat_vex | undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames | fixed: 347 known affected: 23 known not affected: 760 | 2026-07-21T10:58:56+00:00 | Vulnerability · Source |
| CVE-2026-9697 | redhat_vex | undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy | fixed: 181 known affected: 20 known not affected: 800 | 2026-07-21T10:58:51+00:00 | Vulnerability · Source |
| CVE-2026-6734 | redhat_vex | undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing | fixed: 177 known affected: 20 known not affected: 153 | 2026-07-21T10:58:50+00:00 | Vulnerability · Source |
| CVE-2026-63928 | redhat_vex | kernel: USB: serial: omninet: fix memory corruption with small endpoint | known affected: 274 | 2026-07-21T10:58:02+00:00 | Vulnerability · Source |
| CVE-2026-41240 | redhat_vex | DOMPurify: DOMPurify: Cross-Site Scripting (XSS) via inconsistent tag sanitization | fixed: 49 known affected: 19 known not affected: 386 | 2026-07-21T10:39:38+00:00 | Vulnerability · Source |
| CVE-2026-64620 | redhat_vex | FreeRDP: FreeRDP: Remote code execution or denial of service via heap-based buffer overflow | known affected: 31 | 2026-07-21T10:31:29+00:00 | Vulnerability · Source |
| CVE-2026-64187 | redhat_vex | kernel: xfs: fail recovery on a committed log item with no regions | known affected: 274 | 2026-07-21T10:21:18+00:00 | Vulnerability · Source |
| CVE-2026-64205 | redhat_vex | kernel: i2c: i801: fix hardware state machine corruption in error path | known affected: 198 known not affected: 76 | 2026-07-21T10:21:11+00:00 | Vulnerability · Source |
| CVE-2026-64206 | redhat_vex | kernel: Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock | known affected: 232 known not affected: 42 | 2026-07-21T10:21:05+00:00 | Vulnerability · Source |
| CVE-2026-64192 | redhat_vex | kernel: bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized | known affected: 232 known not affected: 42 | 2026-07-21T10:21:01+00:00 | Vulnerability · Source |
| CVE-2026-64191 | redhat_vex | kernel: i2c: stub: Reject I2C block transfers with invalid length | known affected: 260 known not affected: 14 | 2026-07-21T10:17:08+00:00 | Vulnerability · Source |
| CVE-2026-4800 | redhat_vex | lodash: lodash: Arbitrary code execution via untrusted input in template imports | fixed: 942 known affected: 123 known not affected: 7097 | 2026-07-21T10:14:25+00:00 | Vulnerability · Source |
| CVE-2026-40895 | redhat_vex | follow-redirects: follow-redirects: Information disclosure via cross-domain redirects | fixed: 192 known affected: 41 known not affected: 3599 | 2026-07-21T10:12:09+00:00 | Vulnerability · Source |
| CVE-2026-44660 | redhat_vex | python-ujson: UltraJSON: Memory leak leading to Denial of Service | fixed: 4 known affected: 16 known not affected: 205 | 2026-07-21T09:59:27+00:00 | Vulnerability · Source |
| CVE-2026-34478 | redhat_vex | org.apache.logging.log4j/log4j-core: Apache Log4j Core: Log injection via CRLF sequences due to configuration attribute renames | fixed: 6 known affected: 33 known not affected: 224 | 2026-07-21T09:59:17+00:00 | Vulnerability · Source |
| CVE-2026-33747 | redhat_vex | BuildKit: github.com/moby/buildkit: BuildKit: Arbitrary file write and code execution via untrusted frontend | fixed: 171 known affected: 29 known not affected: 506 | 2026-07-21T09:59:10+00:00 | Vulnerability · Source |
| CVE-2026-33699 | redhat_vex | pypdf: pypdf: Denial of Service via crafted PDF in non-strict mode | fixed: 4 known affected: 7 known not affected: 437 | 2026-07-21T09:59:05+00:00 | Vulnerability · Source |
| CVE-2026-22773 | redhat_vex | vllm: vLLM: Denial of Service via specially crafted image in multimodal model serving | fixed: 11 known affected: 10 known not affected: 408 | 2026-07-21T09:58:52+00:00 | Vulnerability · Source |
| CVE-2025-69228 | redhat_vex | aiohttp: aiohttp: Denial of Service via memory exhaustion from crafted POST request | fixed: 31 known affected: 77 known not affected: 938 | 2026-07-21T09:58:49+00:00 | Vulnerability · Source |
| CVE-2025-69227 | redhat_vex | aiohttp: aiohttp: Denial of Service via specially crafted POST request | fixed: 35 known affected: 72 known not affected: 1049 | 2026-07-21T09:58:46+00:00 | Vulnerability · Source |
| CVE-2026-54293 | redhat_vex | nltk: NLTK: Information Disclosure via Path Traversal in `nltk.data.load()` | fixed: 2 known affected: 7 known not affected: 206 | 2026-07-21T09:58:24+00:00 | Vulnerability · Source |
| CVE-2026-42584 | redhat_vex | netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion | fixed: 27 known affected: 33 known not affected: 343 | 2026-07-21T09:58:10+00:00 | Vulnerability · Source |
| CVE-2026-42581 | redhat_vex | netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers | fixed: 27 known not affected: 328 under investigation: 48 | 2026-07-21T09:58:06+00:00 | Vulnerability · Source |
| CVE-2026-42578 | redhat_vex | netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation | fixed: 27 known affected: 32 known not affected: 344 | 2026-07-21T09:58:02+00:00 | Vulnerability · Source |
| CVE-2026-33236 | redhat_vex | nltk: NLTK: Arbitrary file overwrite and creation via path traversal in XML index files | fixed: 10 known affected: 9 known not affected: 899 | 2026-07-21T09:57:32+00:00 | Vulnerability · Source |
| CVE-2026-28356 | redhat_vex | multipart: denial of service via maliciously crafted HTTP or multipart segment headers | fixed: 17 known affected: 19 known not affected: 668 | 2026-07-21T09:57:15+00:00 | Vulnerability · Source |
| CVE-2026-27893 | redhat_vex | vllm: vLLM: Remote code execution due to hardcoded trust_remote_code setting | fixed: 25 known affected: 6 known not affected: 881 | 2026-07-21T09:57:08+00:00 | Vulnerability · Source |
| CVE-2026-25990 | redhat_vex | pillow: Pillow: Out-of-bounds Write via Specially Crafted PSD Image | fixed: 128 known affected: 18 known not affected: 1559 | 2026-07-21T09:56:55+00:00 | Vulnerability · Source |
| CVE-2026-25960 | redhat_vex | vLLM: vLLM: Server-Side Request Forgery bypass via inconsistent URL parsing | fixed: 4 known affected: 13 known not affected: 410 | 2026-07-21T09:56:54+00:00 | Vulnerability · Source |
| CVE-2026-25048 | redhat_vex | xgrammar: xgrammar: Denial of Service via multi-level nested syntax | fixed: 9 known affected: 5 known not affected: 413 | 2026-07-21T09:56:46+00:00 | Vulnerability · Source |
| CVE-2026-24779 | redhat_vex | vLLM: vLLM: Server-Side Request Forgery allows internal network access | fixed: 17 known affected: 5 known not affected: 850 | 2026-07-21T09:56:40+00:00 | Vulnerability · Source |
| CVE-2026-24486 | redhat_vex | python-multipart: Python-Multipart: Arbitrary file write via path traversal vulnerability | fixed: 24 known affected: 17 known not affected: 1209 | 2026-07-21T09:56:36+00:00 | Vulnerability · Source |
| CVE-2026-23490 | redhat_vex | pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID | fixed: 1855 known affected: 25 known not affected: 6295 | 2026-07-21T09:56:33+00:00 | Vulnerability · Source |
| CVE-2026-22807 | redhat_vex | vLLM: vLLM: Arbitrary code execution via untrusted model loading | fixed: 17 known affected: 5 known not affected: 1083 | 2026-07-21T09:56:32+00:00 | Vulnerability · Source |
| CVE-2026-11816 | redhat_vex | keras: Keras: Arbitrary file write via path traversal in archive extraction utilities | fixed: 6 known affected: 4 known not affected: 202 | 2026-07-21T09:56:28+00:00 | Vulnerability · Source |
| CVE-2025-14929 | redhat_vex | transformers: code execution when processing a malicious X-CLIP model file | fixed: 38 known affected: 29 known not affected: 637 | 2026-07-21T09:56:17+00:00 | Vulnerability · Source |
| CVE-2025-14928 | redhat_vex | transformers: code execution when converting a malicious HuBERT model checkpoint | fixed: 40 known affected: 28 known not affected: 637 | 2026-07-21T09:56:15+00:00 | Vulnerability · Source |
| CVE-2025-14927 | redhat_vex | transformers: code execution when converting a malicious SEW-D model checkpoint | fixed: 42 known affected: 27 known not affected: 635 | 2026-07-21T09:56:11+00:00 | Vulnerability · Source |
| CVE-2025-14926 | redhat_vex | transformers: code execution when converting a malicious SEW model checkpoint | fixed: 42 known affected: 28 known not affected: 634 | 2026-07-21T09:56:08+00:00 | Vulnerability · Source |
| CVE-2025-14921 | redhat_vex | transformers: code execution when processing a malicious Transformer-XL model file | fixed: 39 known affected: 28 known not affected: 637 | 2026-07-21T09:56:05+00:00 | Vulnerability · Source |
| CVE-2025-14920 | redhat_vex | transformers: code execution when processing a malicious Perceiver model file | fixed: 40 known affected: 30 known not affected: 633 | 2026-07-21T09:56:01+00:00 | Vulnerability · Source |
| CVE-2026-59876 | redhat_vex | protobufjs: protobufjs: Prototype pollution vulnerability in Text Format extension | known not affected: 9 under investigation: 28 | 2026-07-21T09:46:20+00:00 | Vulnerability · Source |
| CVE-2026-59198 | redhat_vex | Pillow: Pillow: Information disclosure via TGA RLE encoder out-of-bounds read | known affected: 69 under investigation: 22 | 2026-07-21T09:42:17+00:00 | Vulnerability · Source |
| CVE-2025-65637 | redhat_vex | github.com/sirupsen/logrus: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload | fixed: 2037 known affected: 270 known not affected: 22245 | 2026-07-21T09:23:43+00:00 | Vulnerability · Source |
| CVE-2026-29063 | redhat_vex | immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution | fixed: 497 known affected: 34 known not affected: 12547 | 2026-07-21T09:18:12+00:00 | Vulnerability · Source |
| CVE-2026-25639 | redhat_vex | axios: Axios affected by Denial of Service via __proto__ Key in mergeConfig | fixed: 170 known affected: 34 known not affected: 3907 | 2026-07-21T09:17:14+00:00 | Vulnerability · Source |
| CVE-2026-24049 | redhat_vex | wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking | fixed: 176 known affected: 58 known not affected: 7114 | 2026-07-21T09:17:10+00:00 | Vulnerability · Source |