[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2018-9251":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T08:55:32.481Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":19,"aliases":29,"duplicate_of":9,"upstream":30,"downstream":31,"duplicates":44,"related":45,"reserved_at":9,"published_at":50,"modified_at":51,"state":52,"summary":53,"references_raw":61,"kevs":76,"epss":77,"epss_history":80,"metrics":340,"affected":351},"CVE-2018-9251","The xz_decomp function in xzlib.c in libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR, as demonstrated by xmllint, a different vulnerability than CVE-2015-8035.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-835","Loop with Unreachable Exit Condition ('Infinite Loop')","The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.","weakness","Incomplete","Base",[],[20],{"_key":21,"name":22,"source":23,"url":24,"maturity":25,"reliability_score":26,"verified":27,"type":9,"platforms":28,"requires_auth":9,"exploitdb":9,"metasploit":9},"REF_3EB0ED53AA19D341","Exploit Reference (bugzilla.gnome.org)","reference","https://bugzilla.gnome.org/show_bug.cgi?id=794914","unknown",0.2,false,[],[],[],[32,34,36,38,40,42],{"_key":33},"ALPINE-CVE-2018-9251",{"_key":35},"SUSE-SU-2018:3080-1",{"_key":37},"SUSE-SU-2018:3081-1",{"_key":39},"OPENSUSE-SU-2024:11016-1",{"_key":41},"MGASA-2019-0047",{"_key":43},"RHSA-2020:1827",[],[46,47,48,49],{"_key":35},{"_key":37},{"_key":39},{"_key":41},"2018-04-04T02:00:00.000Z","2024-08-05T07:17:51.941Z","Modified",{"cisa_kev":27,"cisa_ransomware":27,"cisa_vendor":9,"epss_severity":54,"epss_score":55,"severity":56,"severity_score":57,"severity_version":58,"severity_source":59,"severity_vector":60,"severity_status":52},"low",0.00772,"medium",5.3,"v3.0","nvd","CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",[62,70],{"url":24,"sources":63,"tags":65},[64,59],"cve.org",[66,67,68,69],"X Refsource MISC","Exploit","Issue Tracking","Third Party Advisory",{"url":71,"sources":72,"tags":73},"https://lists.debian.org/debian-lts-announce/2018/09/msg00035.html",[64,59],[74,75,69],"Mailing List","X Refsource MLIST",[],{"date":78,"score":55,"percentile":79},"2026-06-04",0.73919,[81,85,88,91,94,97,99,101,104,107,110,113,116,118,121,125,128,131,134,136,139,142,145,148,151,154,157,160,163,166,169,171,173,176,178,180,183,186,189,192,195,198,201,204,207,210,213,216,219,221,223,226,229,232,235,238,241,244,247,250,253,256,259,262,265,268,271,274,277,280,283,286,288,291,294,297,300,302,305,308,310,313,316,319,322,324,327,330,333,337],{"date":82,"score":83,"percentile":84},"2025-11-04",0.00969,0.75859,{"date":86,"score":83,"percentile":87},"2025-11-05",0.75855,{"date":89,"score":83,"percentile":90},"2025-11-06",0.75852,{"date":92,"score":83,"percentile":93},"2025-11-07",0.75869,{"date":95,"score":83,"percentile":96},"2025-11-08",0.75872,{"date":98,"score":83,"percentile":93},"2025-11-09",{"date":100,"score":83,"percentile":87},"2025-11-10",{"date":102,"score":83,"percentile":103},"2025-11-11",0.75856,{"date":105,"score":83,"percentile":106},"2025-11-12",0.75876,{"date":108,"score":83,"percentile":109},"2025-11-13",0.75882,{"date":111,"score":83,"percentile":112},"2025-11-14",0.75888,{"date":114,"score":83,"percentile":115},"2025-11-15",0.75885,{"date":117,"score":83,"percentile":115},"2025-11-16",{"date":119,"score":83,"percentile":120},"2025-11-17",0.75877,{"date":122,"score":123,"percentile":124},"2025-11-18",0.00758,0.71116,{"date":126,"score":123,"percentile":127},"2025-11-19",0.71123,{"date":129,"score":123,"percentile":130},"2025-11-20",0.71133,{"date":132,"score":83,"percentile":133},"2025-11-21",0.75906,{"date":135,"score":83,"percentile":133},"2025-11-22",{"date":137,"score":83,"percentile":138},"2025-11-23",0.7589,{"date":140,"score":83,"percentile":141},"2025-11-24",0.75891,{"date":143,"score":83,"percentile":144},"2025-11-25",0.75899,{"date":146,"score":83,"percentile":147},"2025-11-26",0.75904,{"date":149,"score":83,"percentile":150},"2025-11-27",0.75907,{"date":152,"score":83,"percentile":153},"2025-11-28",0.75895,{"date":155,"score":83,"percentile":156},"2025-11-29",0.75898,{"date":158,"score":83,"percentile":159},"2025-11-30",0.75896,{"date":161,"score":83,"percentile":162},"2025-12-01",0.76023,{"date":164,"score":83,"percentile":165},"2025-12-02",0.7603,{"date":167,"score":83,"percentile":168},"2025-12-03",0.76021,{"date":170,"score":83,"percentile":138},"2025-12-04",{"date":172,"score":83,"percentile":144},"2025-12-05",{"date":174,"score":83,"percentile":175},"2025-12-06",0.75903,{"date":177,"score":83,"percentile":144},"2025-12-07",{"date":179,"score":83,"percentile":147},"2025-12-08",{"date":181,"score":83,"percentile":182},"2025-12-09",0.7593,{"date":184,"score":83,"percentile":185},"2025-12-10",0.75955,{"date":187,"score":83,"percentile":188},"2025-12-11",0.75975,{"date":190,"score":83,"percentile":191},"2025-12-12",0.75998,{"date":193,"score":83,"percentile":194},"2025-12-13",0.76,{"date":196,"score":83,"percentile":197},"2025-12-14",0.75996,{"date":199,"score":83,"percentile":200},"2025-12-15",0.75993,{"date":202,"score":83,"percentile":203},"2025-12-16",0.76004,{"date":205,"score":83,"percentile":206},"2025-12-17",0.76016,{"date":208,"score":83,"percentile":209},"2025-12-18",0.76032,{"date":211,"score":83,"percentile":212},"2025-12-19",0.76048,{"date":214,"score":83,"percentile":215},"2025-12-20",0.7604,{"date":217,"score":83,"percentile":218},"2025-12-21",0.76035,{"date":220,"score":83,"percentile":209},"2025-12-22",{"date":222,"score":83,"percentile":165},"2025-12-23",{"date":224,"score":83,"percentile":225},"2025-12-24",0.76037,{"date":227,"score":83,"percentile":228},"2025-12-25",0.76058,{"date":230,"score":83,"percentile":231},"2025-12-26",0.76056,{"date":233,"score":83,"percentile":234},"2025-12-27",0.76111,{"date":236,"score":83,"percentile":237},"2025-12-28",0.76039,{"date":239,"score":83,"percentile":240},"2025-12-29",0.76034,{"date":242,"score":83,"percentile":243},"2025-12-30",0.76046,{"date":245,"score":83,"percentile":246},"2025-12-31",0.76066,{"date":248,"score":83,"percentile":249},"2026-01-01",0.76204,{"date":251,"score":83,"percentile":252},"2026-01-02",0.76207,{"date":254,"score":83,"percentile":255},"2026-01-03",0.76206,{"date":257,"score":83,"percentile":258},"2026-01-04",0.76074,{"date":260,"score":83,"percentile":261},"2026-01-05",0.76065,{"date":263,"score":83,"percentile":264},"2026-01-06",0.76077,{"date":266,"score":83,"percentile":267},"2026-01-07",0.76086,{"date":269,"score":83,"percentile":270},"2026-01-08",0.76097,{"date":272,"score":83,"percentile":273},"2026-01-09",0.76106,{"date":275,"score":83,"percentile":276},"2026-01-10",0.76107,{"date":278,"score":83,"percentile":279},"2026-01-11",0.76092,{"date":281,"score":83,"percentile":282},"2026-01-12",0.76079,{"date":284,"score":83,"percentile":285},"2026-01-13",0.76078,{"date":287,"score":83,"percentile":276},"2026-01-14",{"date":289,"score":83,"percentile":290},"2026-01-15",0.76113,{"date":292,"score":83,"percentile":293},"2026-01-16",0.76125,{"date":295,"score":83,"percentile":296},"2026-01-17",0.76124,{"date":298,"score":83,"percentile":299},"2026-01-18",0.76117,{"date":301,"score":83,"percentile":290},"2026-01-19",{"date":303,"score":83,"percentile":304},"2026-01-20",0.76112,{"date":306,"score":83,"percentile":307},"2026-01-21",0.76119,{"date":309,"score":83,"percentile":296},"2026-01-22",{"date":311,"score":83,"percentile":312},"2026-01-23",0.76153,{"date":314,"score":83,"percentile":315},"2026-01-24",0.76163,{"date":317,"score":83,"percentile":318},"2026-01-25",0.7615,{"date":320,"score":83,"percentile":321},"2026-01-26",0.76148,{"date":323,"score":83,"percentile":321},"2026-01-27",{"date":325,"score":83,"percentile":326},"2026-01-28",0.76156,{"date":328,"score":83,"percentile":329},"2026-01-29",0.76151,{"date":331,"score":83,"percentile":332},"2026-01-30",0.76157,{"date":334,"score":335,"percentile":336},"2026-01-31",0.01046,0.77071,{"date":338,"score":335,"percentile":339},"2026-02-01",0.77187,[341],{"source":59,"cvss_v2_0":342,"cvss_v3_0":347,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":343,"baseSeverity":9,"vectorString":344,"impactScore":345,"exploitabilityScore":346},2.6,"AV:N/AC:H/Au:N/C:N/I:N/A:P",2.9,4.9,{"baseScore":57,"baseSeverity":348,"vectorString":60,"impactScore":349,"exploitabilityScore":350},"MEDIUM",6,4.1,[352,361],{"ecosystem":9,"name":353,"vendor":354,"product":355,"cpe_part":356,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":357},"debian linux","debian","debian_linux","o",[358],{"version":359,"is_range":27,"range_type":360,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"8.0","cpe",{"ecosystem":9,"name":362,"vendor":363,"product":362,"cpe_part":364,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":365},"libxml2","xmlsoft","a",[366],{"version":367,"is_range":27,"range_type":360,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"2.9.8"]