VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
283045 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-64036 | redhat_vex | kernel: cgroup/rstat: validate cpu before css_rstat_cpu() access | known affected: 198 known not affected: 76 | 2026-07-21T06:22:52+00:00 | Vulnerability · Source |
| CVE-2026-64185 | redhat_vex | kernel: sysfs: don't remove existing directory on update failure | known affected: 246 known not affected: 28 | 2026-07-21T06:12:54+00:00 | Vulnerability · Source |
| CVE-2026-15927 | redhat_vex | quay: mirror-registry: SSRF: repo-level mirror accepts external_reference without URL validation | known affected: 3 | 2026-07-21T06:08:30+00:00 | Vulnerability · Source |
| CVE-2026-64130 | redhat_vex | kernel: mm/page_alloc: fix initialization of tags of the huge zero folio with init_on_free | known affected: 14 known not affected: 260 | 2026-07-21T06:02:26+00:00 | Vulnerability · Source |
| CVE-2026-64114 | redhat_vex | kernel: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 | known affected: 274 known not affected: 1 | 2026-07-21T06:02:20+00:00 | Vulnerability · Source |
| CVE-2026-64177 | redhat_vex | kernel: phonet/pep: disable BH around forwarded sk_receive_skb() | known affected: 14 known not affected: 260 | 2026-07-21T05:52:04+00:00 | Vulnerability · Source |
| CVE-2026-43216 | redhat_vex | kernel: net: Drop the lock in skb_may_tx_timestamp() | known affected: 246 known not affected: 28 | 2026-07-21T05:49:57+00:00 | Vulnerability · Source |
| CVE-2026-45988 | redhat_vex | kernel: rxrpc: Fix re-decryption of RESPONSE packets | known affected: 184 known not affected: 90 | 2026-07-21T05:44:16+00:00 | Vulnerability · Source |
| CVE-2026-64081 | redhat_vex | kernel: firmware: arm_ffa: Validate framework notification message layout | known not affected: 274 | 2026-07-21T05:43:54+00:00 | Vulnerability · Source |
| CVE-2026-13325 | redhat_vex | virt-handler-rhel9: kubevirt: kubevirt: DisableTLS migration setting removes authentication, exposing unauthenticated virtqemud proxy on all interfaces | known affected: 2 | 2026-07-21T05:38:20+00:00 | Vulnerability · Source |
| CVE-2024-47068 | redhat_vex | rollup: DOM Clobbering Gadget found in rollup bundled scripts that leads to XSS | fixed: 9 known affected: 6 known not affected: 118 | 2026-07-21T05:27:35+00:00 | Vulnerability · Source |
| CVE-2024-55565 | redhat_vex | nanoid: nanoid mishandles non-integer values | fixed: 1010 known affected: 45 known not affected: 1011 | 2026-07-21T05:27:08+00:00 | Vulnerability · Source |
| CVE-2025-32996 | redhat_vex | http-proxy-middleware: Always-Incorrect Control Flow Implementation in http-proxy-middleware | fixed: 2 known affected: 42 known not affected: 4 | 2026-07-21T05:26:47+00:00 | Vulnerability · Source |
| CVE-2024-45590 | redhat_vex | body-parser: Denial of Service Vulnerability in body-parser | fixed: 234 known affected: 36 known not affected: 912 | 2026-07-21T05:24:42+00:00 | Vulnerability · Source |
| CVE-2024-45296 | redhat_vex | path-to-regexp: Backtracking regular expressions cause ReDoS | fixed: 869 known affected: 39 known not affected: 2095 | 2026-07-21T05:23:58+00:00 | Vulnerability · Source |
| CVE-2025-32997 | redhat_vex | http-proxy-middleware: Improper Check for Unusual or Exceptional Conditions in http-proxy-middleware | fixed: 2 known affected: 42 known not affected: 4 | 2026-07-21T05:22:06+00:00 | Vulnerability · Source |
| CVE-2025-27516 | redhat_vex | jinja2: Jinja sandbox breakout through attr filter selecting format method | fixed: 895 known affected: 20 known not affected: 2406 | 2026-07-21T05:22:05+00:00 | Vulnerability · Source |
| CVE-2024-56201 | redhat_vex | jinja2: Jinja has a sandbox breakout through malicious filenames | fixed: 900 known affected: 24 known not affected: 851 | 2026-07-21T05:21:50+00:00 | Vulnerability · Source |
| CVE-2024-56326 | redhat_vex | jinja2: Jinja has a sandbox breakout through indirect reference to format method | fixed: 941 known affected: 33 known not affected: 3068 | 2026-07-21T05:21:50+00:00 | Vulnerability · Source |
| CVE-2024-52798 | redhat_vex | path-to-regexp: path-to-regexp Unpatched `path-to-regexp` ReDoS in 0.1.x | fixed: 33 known affected: 60 known not affected: 1161 | 2026-07-21T05:21:47+00:00 | Vulnerability · Source |
| CVE-2026-64111 | redhat_vex | kernel: lsm: hold cred_guard_mutex for lsm_set_self_attr() | known affected: 184 known not affected: 91 | 2026-07-21T05:20:43+00:00 | Vulnerability · Source |
| CVE-2026-64190 | redhat_vex | kernel: net: team: fix NULL pointer dereference in team_xmit during mode change | known affected: 108 known not affected: 167 | 2026-07-21T05:20:33+00:00 | Vulnerability · Source |
| CVE-2026-64135 | redhat_vex | kernel: hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX | known not affected: 275 | 2026-07-21T05:15:42+00:00 | Vulnerability · Source |
| CVE-2026-64149 | redhat_vex | kernel: dma-mapping: move dma_map_resource() sanity check into debug code | known affected: 76 known not affected: 198 | 2026-07-21T05:15:38+00:00 | Vulnerability · Source |
| CVE-2026-39373 | redhat_vex | JWCrypto: python-cryptography: python: JWCrypto: Memory exhaustion via crafted compressed JWE tokens | fixed: 14 known affected: 10 known not affected: 944 | 2026-07-21T05:15:34+00:00 | Vulnerability · Source |
| CVE-2026-64184 | redhat_vex | kernel: mm/damon/sysfs-schemes: call missing mem_cgroup_iter_break() | known affected: 184 known not affected: 90 | 2026-07-21T05:15:29+00:00 | Vulnerability · Source |
| CVE-2025-58754 | redhat_vex | axios: Axios DoS via lack of data size check | fixed: 361 known affected: 42 known not affected: 1162 | 2026-07-21T04:54:14+00:00 | Vulnerability · Source |
| CVE-2025-7783 | redhat_vex | form-data: Unsafe random function in form-data | fixed: 196 known affected: 71 known not affected: 1005 | 2026-07-21T04:53:55+00:00 | Vulnerability · Source |
| CVE-2026-48779 | redhat_vex | ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments | fixed: 336 known affected: 50 known not affected: 348 under investigation: 30 | 2026-07-21T04:53:34+00:00 | Vulnerability · Source |
| CVE-2026-42338 | redhat_vex | ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input | fixed: 328 known affected: 20 known not affected: 230 | 2026-07-21T04:52:14+00:00 | Vulnerability · Source |
| CVE-2026-42264 | redhat_vex | axios: Axios: Prototype pollution allows information disclosure and request manipulation | fixed: 48 known affected: 43 known not affected: 246 | 2026-07-21T04:52:06+00:00 | Vulnerability · Source |
| CVE-2026-23745 | redhat_vex | node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives | fixed: 53 known affected: 24 known not affected: 664 | 2026-07-21T04:50:30+00:00 | Vulnerability · Source |
| CVE-2025-62718 | redhat_vex | axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization | fixed: 158 known affected: 61 known not affected: 1688 | 2026-07-21T04:49:05+00:00 | Vulnerability · Source |
| CVE-2026-55603 | redhat_vex | http-proxy-middleware: http-proxy-middleware: Data integrity compromise via CR/LF injection | fixed: 1 known affected: 2 known not affected: 73 | 2026-07-21T04:44:06+00:00 | Vulnerability · Source |
| CVE-2026-64189 | redhat_vex | kernel: netfilter: ipset: fix race between dump and ip_set_list resize | known affected: 246 known not affected: 29 | 2026-07-21T04:43:52+00:00 | Vulnerability · Source |
| CVE-2025-57847 | redhat_vex | ansible-automation-platform: privilege escalation via excessive group writable /etc/passwd permissions | fixed: 8 known affected: 9 known not affected: 123 | 2026-07-21T04:41:52+00:00 | Vulnerability · Source |
| CVE-2026-33036 | redhat_vex | fast-xml-parser: fast-xml-parser: Denial of Service via XML entity expansion bypass | fixed: 609 known affected: 8 known not affected: 189 | 2026-07-21T04:39:56+00:00 | Vulnerability · Source |
| CVE-2026-27942 | redhat_vex | fast-xml-parser: fast-xml-parser: Stack overflow leads to Denial of Service | fixed: 332 known affected: 5 known not affected: 143 | 2026-07-21T04:39:54+00:00 | Vulnerability · Source |
| CVE-2026-27904 | redhat_vex | minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions | fixed: 627 known affected: 74 known not affected: 1146 | 2026-07-21T04:39:41+00:00 | Vulnerability · Source |
| CVE-2026-25128 | redhat_vex | fast-xml-parser: fast-xml-parser has RangeError DoS Numeric Entities Bug | fixed: 242 known affected: 13 known not affected: 124 | 2026-07-21T04:39:37+00:00 | Vulnerability · Source |
| CVE-2026-26278 | redhat_vex | fast-xml-parser: fast-xml-parser: Denial of Service via unlimited XML entity expansion | fixed: 244 known affected: 7 known not affected: 127 | 2026-07-21T04:31:00+00:00 | Vulnerability · Source |
| CVE-2026-25896 | redhat_vex | fast-xml-parser: fast-xml-parser: Cross-Site Scripting (XSS) due to improper DOCTYPE entity handling | fixed: 244 known affected: 7 known not affected: 127 | 2026-07-21T04:30:52+00:00 | Vulnerability · Source |
| CVE-2025-69873 | redhat_vex | ajv: ReDoS via $data reference | fixed: 327 known affected: 38 known not affected: 4716 | 2026-07-21T04:30:38+00:00 | Vulnerability · Source |
| CVE-2026-64102 | redhat_vex | kernel: RDMA/siw: Reject MPA FPDU length underflow before signed receive math | known affected: 156 known not affected: 119 | 2026-07-21T04:29:53+00:00 | Vulnerability · Source |
| CVE-2026-42211 | redhat_vex | react-router: React Router: Remote Code Execution via prototype pollution in Framework Mode | fixed: 5 known affected: 15 known not affected: 83 under investigation: 60 | 2026-07-21T04:23:09+00:00 | Vulnerability · Source |
| CVE-2026-12382 | redhat_vex | aap-gateway: missing requestHeadersToRemove allows mTLS bypass via Subject header spoofing | fixed: 9 known not affected: 653 | 2026-07-21T04:16:22+00:00 | Vulnerability · Source |
| CVE-2025-5278 | redhat_vex | coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification | fixed: 75 known affected: 8 known not affected: 11 | 2026-07-21T04:07:20+00:00 | Vulnerability · Source |
| CVE-2025-8194 | redhat_vex | cpython: Cpython infinite loop when parsing a tarfile | fixed: 1939 known affected: 38 known not affected: 17 | 2026-07-21T04:06:34+00:00 | Vulnerability · Source |
| CVE-2026-42503 | redhat_vex | golang: golang.org/x/tools/gopls: gopls: Arbitrary code execution due to insecure network binding | fixed: 8 known not affected: 1 | 2026-07-21T04:00:42+00:00 | Vulnerability · Source |
| CVE-2026-41642 | redhat_vex | github.com/osrg/gobgp: golang: GoBGP: Denial of Service via malformed BGP UPDATE message | known not affected: 1 | 2026-07-21T03:50:22+00:00 | Vulnerability · Source |