Skip to content

Commit e89f9bc

Browse files
aboutcode-automationaboutcode-automation
committed
Sync EUVD catalog: Fri Sep 4 00:32:01 UTC 2026
Signed-off-by: AboutCode Automation <automation@aboutcode.org>
1 parent bda1f0e commit e89f9bc

1,110 files changed

Lines changed: 20341 additions & 1049 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎advisories/2025/03/EUVD-2025-6761.json‎

Lines changed: 4 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -3,21 +3,14 @@
33
"enisaUuid": "4ed3d0ce-1043-3fea-a94b-a41c5020afa8",
44
"description": "A flaw was found in the OpenShift Console, an endpoint for plugins to serve resources in multiple languages: /locales/resources.json. This endpoint's lng and ns parameters are used to construct a filepath in pkg/plugins/handlers unsafely.go#L112 Because of this unsafe filepath construction, an authenticated user can manipulate the path to retrieve any JSON files on the console's pod by using sequences of ../ and valid directory paths.",
55
"datePublished": "Mar 19, 2025, 6:47:27 PM",
6-
"dateUpdated": "Nov 20, 2025, 8:56:53 PM",
6+
"dateUpdated": "Sep 3, 2026, 3:22:07 PM",
77
"baseScore": 4.3,
88
"baseScoreVersion": "3.1",
99
"baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
10-
"references": "https://nvd.nist.gov/vuln/detail/CVE-2024-7631\nhttps://access.redhat.com/security/cve/CVE-2024-7631\nhttps://bugzilla.redhat.com/show_bug.cgi?id=2296053\nhttps://github.com/openshift/console\n",
10+
"references": "https://access.redhat.com/security/cve/CVE-2024-7631\nhttps://bugzilla.redhat.com/show_bug.cgi?id=2296053\nhttps://github.com/advisories/GHSA-69x5-hjg4-m267\n",
1111
"aliases": "CVE-2024-7631\nGHSA-69x5-hjg4-m267\n",
1212
"assigner": "redhat",
13-
"epss": 0.18,
13+
"epss": 0.5,
1414
"enisaIdProduct": [],
15-
"enisaIdVendor": [
16-
{
17-
"id": "f373e9c6-aecd-3821-bac3-32918e1fc5a2",
18-
"vendor": {
19-
"name": "Red Hat"
20-
}
21-
}
22-
]
15+
"enisaIdVendor": []
2316
}

‎advisories/2025/05/EUVD-2025-16306.json‎

Lines changed: 12 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,11 +3,11 @@
33
"enisaUuid": "602e3d8d-c064-3a99-8e4c-b42816f2528c",
44
"description": "A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution.",
55
"datePublished": "May 27, 2025, 8:51:50 PM",
6-
"dateUpdated": "Aug 31, 2026, 2:07:59 AM",
6+
"dateUpdated": "Sep 3, 2026, 2:24:56 PM",
77
"baseScore": 7.0,
88
"baseScoreVersion": "3.1",
99
"baseScoreVector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
10-
"references": "https://access.redhat.com/errata/RHSA-2025:11888\nhttps://access.redhat.com/errata/RHSA-2025:12083\nhttps://access.redhat.com/errata/RHSA-2025:12331\nhttps://access.redhat.com/errata/RHSA-2025:12332\nhttps://access.redhat.com/errata/RHSA-2025:12333\nhttps://access.redhat.com/errata/RHSA-2026:54544\nhttps://access.redhat.com/errata/RHSA-2026:54553\nhttps://access.redhat.com/errata/RHSA-2026:54581\nhttps://access.redhat.com/errata/RHSA-2026:56786\nhttps://access.redhat.com/errata/RHSA-2026:56853\nhttps://access.redhat.com/errata/RHSA-2026:56911\nhttps://access.redhat.com/security/cve/CVE-2025-5222\nhttps://bugzilla.redhat.com/show_bug.cgi?id=2368600\nhttps://unicode-org.atlassian.net/jira/software/c/projects/ICU/issues/ICU-22957\n",
10+
"references": "https://access.redhat.com/errata/RHSA-2025:11888\nhttps://access.redhat.com/errata/RHSA-2025:12083\nhttps://access.redhat.com/errata/RHSA-2025:12331\nhttps://access.redhat.com/errata/RHSA-2025:12332\nhttps://access.redhat.com/errata/RHSA-2025:12333\nhttps://access.redhat.com/errata/RHSA-2026:54544\nhttps://access.redhat.com/errata/RHSA-2026:54553\nhttps://access.redhat.com/errata/RHSA-2026:54581\nhttps://access.redhat.com/errata/RHSA-2026:56786\nhttps://access.redhat.com/errata/RHSA-2026:56853\nhttps://access.redhat.com/errata/RHSA-2026:56911\nhttps://access.redhat.com/errata/RHSA-2026:60019\nhttps://access.redhat.com/security/cve/CVE-2025-5222\nhttps://bugzilla.redhat.com/show_bug.cgi?id=2368600\nhttps://unicode-org.atlassian.net/jira/software/c/projects/ICU/issues/ICU-22957\n",
1111
"aliases": "GHSA-wv79-2fc4-v4hj\nCVE-2025-5222\n",
1212
"assigner": "redhat",
1313
"epss": 0.41,
@@ -82,6 +82,16 @@
8282
},
8383
"product_version": "patch: 0:67.1-10.el9_4"
8484
},
85+
{
86+
"id": "9ed671cf-b6b6-37ac-97a6-9cfa2d3df10c",
87+
"product": {
88+
"name": "Red Hat OpenShift Container Platform 4.17",
89+
"vendor": {
90+
"name": "Red Hat"
91+
}
92+
},
93+
"product_version": "patch: 417.94.202608250221-0"
94+
},
8595
{
8696
"id": "a90bb7cc-beb6-36fd-b785-2b193d958e98",
8797
"product": {

‎advisories/2025/09/EUVD-2025-26447.json‎

Lines changed: 11 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -2,20 +2,23 @@
22
"id": "EUVD-2025-26447",
33
"enisaUuid": "6165776d-ea4d-3b70-bd77-eeb2b2e4fff8",
44
"description": "There is an out of bounds write vulnerability due to improper bounds checking resulting in a large destination address when parsing a DSB file with Digilent DASYLab. This vulnerability may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted DSB file. The vulnerability affects all versions of DASYLab.",
5-
"datePublished": "Sep 2, 2025, 9:30:58 PM",
6-
"dateUpdated": "Sep 2, 2025, 9:30:58 PM",
7-
"baseScore": 7.8,
8-
"baseScoreVersion": "3.1",
9-
"baseScoreVector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
10-
"references": "https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/memory-corruption-vulnerabilities-in-digilent-dasylab.html\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-9189\n",
5+
"datePublished": "Sep 2, 2025, 6:12:43 PM",
6+
"dateUpdated": "Sep 3, 2026, 4:14:10 PM",
7+
"baseScore": 8.5,
8+
"baseScoreVersion": "4.0",
9+
"baseScoreVector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
10+
"references": "https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/memory-corruption-vulnerabilities-in-digilent-dasylab.html\nhttps://www.measx.com/en/service/productsecurity/security-updates-for-measx-software/159-securityupdates/1077-deserialization-of-untrusted-data-vulnerability-in-dasylab.html\n",
1111
"aliases": "GHSA-575v-6pw9-4q2m\nCVE-2025-9189\n",
1212
"assigner": "NI",
13-
"epss": 0.03,
13+
"epss": 0.27,
1414
"enisaIdProduct": [
1515
{
1616
"id": "f36f3748-072e-3e5c-b4d9-c6214407a546",
1717
"product": {
18-
"name": "DASYLab"
18+
"name": "DASYLab",
19+
"vendor": {
20+
"name": "Digilent"
21+
}
1922
},
2023
"product_version": "0 \u2264*"
2124
}

‎advisories/2025/10/EUVD-2025-32560.json‎

Lines changed: 12 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,11 +3,11 @@
33
"enisaUuid": "d7b7cd5b-900f-3c8b-aba8-153285783687",
44
"description": "A flaw was found in QEMU. If the QIOChannelWebsock object is freed while it is waiting to complete a handshake, a GSource is leaked. This can lead to the callback firing later on and triggering a use-after-free in the use of the channel. This can be abused by a malicious client with network access to the VNC WebSocket port to cause a denial of service during the WebSocket handshake prior to the VNC client authentication.",
55
"datePublished": "Oct 3, 2025, 10:30:34 AM",
6-
"dateUpdated": "Aug 31, 2026, 5:02:04 PM",
6+
"dateUpdated": "Sep 3, 2026, 12:02:43 PM",
77
"baseScore": 7.5,
88
"baseScoreVersion": "3.1",
99
"baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
10-
"references": "https://access.redhat.com/errata/RHSA-2025:23228\nhttps://access.redhat.com/errata/RHSA-2026:0326\nhttps://access.redhat.com/errata/RHSA-2026:0332\nhttps://access.redhat.com/errata/RHSA-2026:0702\nhttps://access.redhat.com/errata/RHSA-2026:1831\nhttps://access.redhat.com/errata/RHSA-2026:18772\nhttps://access.redhat.com/errata/RHSA-2026:22147\nhttps://access.redhat.com/errata/RHSA-2026:3077\nhttps://access.redhat.com/errata/RHSA-2026:3165\nhttps://access.redhat.com/errata/RHSA-2026:5578\nhttps://access.redhat.com/security/cve/CVE-2025-11234\nhttps://bugzilla.redhat.com/show_bug.cgi?id=2401209\n",
10+
"references": "https://access.redhat.com/errata/RHSA-2025:23228\nhttps://access.redhat.com/errata/RHSA-2026:0326\nhttps://access.redhat.com/errata/RHSA-2026:0332\nhttps://access.redhat.com/errata/RHSA-2026:0702\nhttps://access.redhat.com/errata/RHSA-2026:1831\nhttps://access.redhat.com/errata/RHSA-2026:18772\nhttps://access.redhat.com/errata/RHSA-2026:22147\nhttps://access.redhat.com/errata/RHSA-2026:3077\nhttps://access.redhat.com/errata/RHSA-2026:3165\nhttps://access.redhat.com/errata/RHSA-2026:5578\nhttps://access.redhat.com/errata/RHSA-2026:59831\nhttps://access.redhat.com/security/cve/CVE-2025-11234\nhttps://bugzilla.redhat.com/show_bug.cgi?id=2401209\n",
1111
"aliases": "CVE-2025-11234\nGHSA-hm8v-8c3v-cxfq\n",
1212
"assigner": "redhat",
1313
"epss": 0.78,
@@ -52,6 +52,16 @@
5252
},
5353
"product_version": "patch: 18:10.0.0-14.el10_1.5"
5454
},
55+
{
56+
"id": "8cfa6260-3522-35ae-ae79-973fb1ad173a",
57+
"product": {
58+
"name": "Red Hat OpenShift Container Platform 4.12",
59+
"vendor": {
60+
"name": "Red Hat"
61+
}
62+
},
63+
"product_version": "patch: 412.86.202608241157-0"
64+
},
5565
{
5666
"id": "8eb4f2d5-a9a0-3045-a01a-efd9a6e84b43",
5767
"product": {

‎advisories/2026/01/EUVD-2025-206229.json‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,14 +3,14 @@
33
"enisaUuid": "5c80e1c9-34b1-35a3-a513-6e385992e61a",
44
"description": "AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow a zip bomb to be used to execute a DoS against the AIOHTTP server. An attacker may be able to send a compressed request that when decompressed by AIOHTTP could exhaust the host's memory. This issue is fixed in version 3.13.3.",
55
"datePublished": "Jan 5, 2026, 10:00:17 PM",
6-
"dateUpdated": "Sep 2, 2026, 12:04:28 PM",
6+
"dateUpdated": "Sep 3, 2026, 12:04:41 PM",
77
"baseScore": 7.5,
88
"baseScoreVersion": "3.1",
99
"baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
1010
"references": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-6mq8-rvhq-8wgg\nhttps://github.com/aio-libs/aiohttp/commit/2b920c39002cee0ec5b402581779bbaaf7c9138a\n",
1111
"aliases": "CVE-2025-69223\nPYSEC-2026-1101\nGHSA-6mq8-rvhq-8wgg\n",
1212
"assigner": "GitHub_M",
13-
"epss": 0.52,
13+
"epss": 0.57,
1414
"enisaIdProduct": [
1515
{
1616
"id": "bb8f4288-a436-3925-a4c8-e1a7c4393b5b",

‎advisories/2026/01/EUVD-2025-206319.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33
"enisaUuid": "182c81c9-b777-3d6d-9fd3-3f82aeca6da7",
44
"description": "Lodash versions 4.0.0 through 4.17.22 are vulnerable to prototype pollution in the _.unset\u00a0and _.omit\u00a0functions. An attacker can pass crafted paths which cause Lodash to delete methods from global prototypes.\n\nThe issue permits deletion of properties but does not allow overwriting their original behavior.\n\nThis issue is patched on 4.17.23",
55
"datePublished": "Jan 21, 2026, 7:05:28 PM",
6-
"dateUpdated": "Sep 1, 2026, 12:04:54 PM",
6+
"dateUpdated": "Sep 3, 2026, 12:04:41 PM",
77
"baseScore": 6.9,
88
"baseScoreVersion": "4.0",
99
"baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:H/SI:H/SA:H/E:P",

‎advisories/2026/01/EUVD-2025-206445.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33
"enisaUuid": "d3f329e2-783a-3c98-95d8-59b4e2a6947d",
44
"description": "The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameters in URLs is generally limited by the maximum request header size, the net/http.Request.ParseForm method can parse large URL-encoded forms. Parsing a large form containing many unique query parameters can cause excessive memory consumption.",
55
"datePublished": "Jan 28, 2026, 7:30:31 PM",
6-
"dateUpdated": "Sep 2, 2026, 12:04:23 PM",
6+
"dateUpdated": "Sep 3, 2026, 12:04:36 PM",
77
"baseScore": 7.5,
88
"baseScoreVersion": "3.1",
99
"baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",

‎advisories/2026/01/EUVD-2026-1188.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33
"enisaUuid": "8ffe6b86-04ea-3855-b0d3-25633b2bccbc",
44
"description": "urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.",
55
"datePublished": "Jan 7, 2026, 10:09:01 PM",
6-
"dateUpdated": "Sep 2, 2026, 12:04:23 PM",
6+
"dateUpdated": "Sep 3, 2026, 12:04:38 PM",
77
"baseScore": 8.9,
88
"baseScoreVersion": "4.0",
99
"baseScoreVector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H",

‎advisories/2026/02/EUVD-2025-207675.json‎

Lines changed: 33 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -1,23 +1,46 @@
11
{
22
"id": "EUVD-2025-207675",
33
"enisaUuid": "447f8173-9e9c-3c69-99b9-5d8fc8294366",
4-
"description": "Due to the use of a vulnerable third-party Velocity template engine, a malicious actor with admin privilege may inject and execute arbitrary template syntax within server-side templates. \n\n Successful exploitation of this vulnerability could allow a malicious actor with admin privilege to inject and execute arbitrary template code on the server, potentially leading to remote code execution, data manipulation, or unauthorized access to sensitive information.",
5-
"datePublished": "Feb 19, 2026, 6:31:54 PM",
6-
"dateUpdated": "Feb 19, 2026, 6:31:54 PM",
7-
"baseScore": 10.0,
4+
"description": "The Velocity template engine, utilized by the affected product, accepts and processes template syntax without sufficient sanitization or validation of user-controlled input. This allows an authenticated administrator to inject arbitrary template syntax.\n\nSuccessful exploitation enables an attacker with administrative privileges to execute arbitrary template code on the server. This can lead to significant security consequences, including remote code execution, manipulation of data, and unauthorized access to sensitive information.",
5+
"datePublished": "Feb 19, 2026, 10:04:47 AM",
6+
"dateUpdated": "Sep 3, 2026, 1:25:20 PM",
7+
"baseScore": 8.4,
88
"baseScoreVersion": "3.1",
9-
"baseScoreVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
10-
"references": "https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2025-4517/\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-12107\n",
9+
"baseScoreVector": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
10+
"references": "https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2025-4517/\n",
1111
"aliases": "CVE-2025-12107\nGHSA-8v9w-wqxw-hp8g\n",
1212
"assigner": "WSO2",
13-
"epss": 0.56,
13+
"epss": 0.62,
1414
"enisaIdProduct": [
1515
{
16-
"id": "364aa709-8a65-37ac-a925-4ff89559fafa",
16+
"id": "52e63d57-4cda-3931-bec7-3a2366b48937",
1717
"product": {
18-
"name": "WSO2 Identity Server"
18+
"name": "Identity Server",
19+
"vendor": {
20+
"name": "n/a"
21+
}
1922
},
20-
"product_version": "5.11.0.130 <5.11.0.299"
23+
"product_version": "5.11.0 <5.11.0.299"
24+
},
25+
{
26+
"id": "561161e3-6c28-348f-81b4-ef42bd203c2d",
27+
"product": {
28+
"name": "Identity Server",
29+
"vendor": {
30+
"name": "n/a"
31+
}
32+
},
33+
"product_version": "6.1.0 <6.1.0.122"
34+
},
35+
{
36+
"id": "90ec455d-2322-3f93-94bf-b10c0ac92975",
37+
"product": {
38+
"name": "Identity Server",
39+
"vendor": {
40+
"name": "n/a"
41+
}
42+
},
43+
"product_version": "6.0.0 <6.0.0.140"
2144
}
2245
],
2346
"enisaIdVendor": [

‎advisories/2026/02/EUVD-2026-6170.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33
"enisaUuid": "b381cbfb-4c79-300b-9d28-58e2b9ff9efd",
44
"description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()\n\nnft_map_catchall_activate() has an inverted element activity check\ncompared to its non-catchall counterpart nft_mapelem_activate() and\ncompared to what is logically required.\n\nnft_map_catchall_activate() is called from the abort path to re-activate\ncatchall map elements that were deactivated during a failed transaction.\nIt should skip elements that are already active (they don't need\nre-activation) and process elements that are inactive (they need to be\nrestored). Instead, the current code does the opposite: it skips inactive\nelements and processes active ones.\n\nCompare the non-catchall activate callback, which is correct:\n\n nft_mapelem_activate():\n if (nft_set_elem_active(ext, iter->genmask))\n return 0; /* skip active, process inactive */\n\nWith the buggy catchall version:\n\n nft_map_catchall_activate():\n if (!nft_set_elem_active(ext, genmask))\n continue; /* skip inactive, process active */\n\nThe consequence is that when a DELSET operation is aborted,\nnft_setelem_data_activate() is never called for the catchall element.\nFor NFT_GOTO verdict elements, this means nft_data_hold() is never\ncalled to restore the chain->use reference count. Each abort cycle\npermanently decrements chain->use. Once chain->use reaches zero,\nDELCHAIN succeeds and frees the chain while catchall verdict elements\nstill reference it, resulting in a use-after-free.\n\nThis is exploitable for local privilege escalation from an unprivileged\nuser via user namespaces + nftables on distributions that enable\nCONFIG_USER_NS and CONFIG_NF_TABLES.\n\nFix by removing the negation so the check matches nft_mapelem_activate():\nskip active elements, process inactive ones.",
55
"datePublished": "Feb 13, 2026, 1:29:55 PM",
6-
"dateUpdated": "Sep 1, 2026, 12:04:57 PM",
6+
"dateUpdated": "Sep 3, 2026, 12:04:32 PM",
77
"baseScore": 7.8,
88
"baseScoreVersion": "3.1",
99
"baseScoreVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",

0 commit comments

Comments
 (0)