[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2019-19012":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T14:55:33.319Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":34,"aliases":49,"duplicate_of":9,"upstream":50,"downstream":51,"duplicates":76,"related":77,"reserved_at":9,"published_at":80,"modified_at":81,"state":82,"summary":83,"references_raw":91,"kevs":129,"epss":130,"epss_history":133,"metrics":389,"affected":398},"CVE-2019-19012","An integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9.4_rc2 leads to an out-of-bounds read, in which the offset of this read is under the control of an attacker. (This only affects the 32-bit compiled version). Remote attackers can cause a denial-of-service or information disclosure, or possibly have unspecified other impact, via a crafted regular expression.",null,[11,23],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","weakness","Draft","Base",[19],{"id":20,"name":21,"techniques":22},"CAPEC-540","Overread Buffers",[],{"_key":24,"id":24,"name":25,"description":26,"type":15,"status":27,"abstraction":17,"likelihood_of_exploit":28,"capec":29},"CWE-190","Integer Overflow or Wraparound","The product performs a calculation that can\n         produce an integer overflow or wraparound when the logic\n         assumes that the resulting value will always be larger than\n         the original value. This occurs when an integer value is\n         incremented to a value that is too large to store in the\n         associated representation. When this occurs, the value may\n         become a very small or negative number.","Stable","Medium",[30],{"id":31,"name":32,"techniques":33},"CAPEC-92","Forced Integer Overflow",[],[35,44],{"_key":36,"name":37,"source":38,"url":39,"maturity":40,"reliability_score":41,"verified":42,"type":9,"platforms":43,"requires_auth":9,"exploitdb":9,"metasploit":9},"GITHUB_KKOS_ONIGURUMA","Oniguruma","github","https://github.com/kkos/oniguruma/issues/57","poc",0.3,false,[],{"_key":45,"name":46,"source":38,"url":47,"maturity":40,"reliability_score":41,"verified":42,"type":9,"platforms":48,"requires_auth":9,"exploitdb":9,"metasploit":9},"GITHUB_TARANTULA-TEAM_CVE-2019-19012","Cve 2019 19012","https://github.com/tarantula-team/CVE-2019-19012",[],[],[],[52,54,56,58,60,62,64,66,68,70,72,74],{"_key":53},"OPENSUSE-SU-2024:11111-1",{"_key":55},"DLA-2020-1",{"_key":57},"DLA-2431-1",{"_key":59},"MGASA-2020-0029",{"_key":61},"UBUNTU-CVE-2019-19012",{"_key":63},"USN-4460-1",{"_key":65},"RHSA-2024:0409",{"_key":67},"RHSA-2024:0572",{"_key":69},"RHSA-2024:0889",{"_key":71},"RHSA-2025:7539",{"_key":73},"DEBIAN-CVE-2019-19012",{"_key":75},"USN-5662-1",[],[78,79],{"_key":53},{"_key":59},"2019-11-16T15:30:47.000Z","2024-08-05T02:02:39.918Z","Modified",{"cisa_kev":42,"cisa_ransomware":42,"cisa_vendor":9,"epss_severity":84,"epss_score":85,"severity":86,"severity_score":87,"severity_version":88,"severity_source":89,"severity_vector":90,"severity_status":82},"medium",0.14783,"critical",9.8,"v3.1","nvd","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",[92,101,105,108,114,120,124],{"url":93,"sources":94,"tags":96},"https://github.com/kkos/oniguruma/issues/164",[95,89],"cve.org",[97,98,99,100],"X Refsource MISC","Exploit","Patch","Third Party Advisory",{"url":102,"sources":103,"tags":104},"https://github.com/kkos/oniguruma/releases/tag/v6.9.4_rc2",[95,89],[97,100],{"url":47,"sources":106,"tags":107},[95,89],[97,98,100],{"url":109,"sources":110,"tags":111},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NO267PLHGYZSWX3XTRPKYBKD4J3YOU5V/",[95,89],[112,113],"Vendor Advisory","X Refsource FEDORA",{"url":115,"sources":116,"tags":117},"https://lists.debian.org/debian-lts-announce/2019/12/msg00002.html",[95,89],[118,119,100],"Mailing List","X Refsource MLIST",{"url":121,"sources":122,"tags":123},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V3MBNW6Z4DOXSCNWGBLQ7OA3OGUJ44WL/",[95,89],[112,113],{"url":125,"sources":126,"tags":127},"https://usn.ubuntu.com/4460-1/",[95,89],[112,128],"X Refsource UBUNTU",[],{"date":131,"score":85,"percentile":132},"2026-06-04",0.94626,[134,137,140,143,146,149,152,155,158,161,164,167,170,173,175,179,182,185,188,191,194,197,200,203,206,209,213,215,219,222,224,227,230,233,236,239,242,245,248,251,254,257,260,263,266,269,272,275,278,280,282,285,288,291,293,296,299,301,304,308,311,314,316,319,322,324,326,329,331,334,337,339,342,345,348,351,353,356,358,361,364,367,370,373,376,378,380,382,384,387],{"date":135,"score":85,"percentile":136},"2025-11-04",0.94211,{"date":138,"score":85,"percentile":139},"2025-11-05",0.9421,{"date":141,"score":85,"percentile":142},"2025-11-06",0.94212,{"date":144,"score":85,"percentile":145},"2025-11-07",0.94215,{"date":147,"score":85,"percentile":148},"2025-11-08",0.94216,{"date":150,"score":85,"percentile":151},"2025-11-09",0.94214,{"date":153,"score":85,"percentile":154},"2025-11-10",0.94217,{"date":156,"score":85,"percentile":157},"2025-11-11",0.94219,{"date":159,"score":85,"percentile":160},"2025-11-12",0.94224,{"date":162,"score":85,"percentile":163},"2025-11-13",0.94225,{"date":165,"score":85,"percentile":166},"2025-11-14",0.94228,{"date":168,"score":85,"percentile":169},"2025-11-15",0.94223,{"date":171,"score":85,"percentile":172},"2025-11-16",0.94226,{"date":174,"score":85,"percentile":160},"2025-11-17",{"date":176,"score":177,"percentile":178},"2025-11-18",0.16728,0.94407,{"date":180,"score":177,"percentile":181},"2025-11-19",0.94411,{"date":183,"score":177,"percentile":184},"2025-11-20",0.94414,{"date":186,"score":85,"percentile":187},"2025-11-21",0.94231,{"date":189,"score":85,"percentile":190},"2025-11-22",0.94229,{"date":192,"score":85,"percentile":193},"2025-11-23",0.94232,{"date":195,"score":85,"percentile":196},"2025-11-24",0.94233,{"date":198,"score":85,"percentile":199},"2025-11-25",0.94237,{"date":201,"score":85,"percentile":202},"2025-11-26",0.94238,{"date":204,"score":85,"percentile":205},"2025-11-27",0.9424,{"date":207,"score":85,"percentile":208},"2025-11-28",0.94236,{"date":210,"score":211,"percentile":212},"2025-11-29",0.15119,0.94317,{"date":214,"score":211,"percentile":212},"2025-11-30",{"date":216,"score":217,"percentile":218},"2025-12-01",0.1965,0.95229,{"date":220,"score":217,"percentile":221},"2025-12-02",0.95228,{"date":223,"score":217,"percentile":218},"2025-12-03",{"date":225,"score":211,"percentile":226},"2025-12-04",0.94314,{"date":228,"score":211,"percentile":229},"2025-12-05",0.94316,{"date":231,"score":211,"percentile":232},"2025-12-06",0.94315,{"date":234,"score":211,"percentile":235},"2025-12-07",0.94321,{"date":237,"score":211,"percentile":238},"2025-12-08",0.94322,{"date":240,"score":211,"percentile":241},"2025-12-09",0.94328,{"date":243,"score":211,"percentile":244},"2025-12-10",0.94335,{"date":246,"score":211,"percentile":247},"2025-12-11",0.94339,{"date":249,"score":85,"percentile":250},"2025-12-12",0.94254,{"date":252,"score":85,"percentile":253},"2025-12-13",0.94253,{"date":255,"score":85,"percentile":256},"2025-12-14",0.94251,{"date":258,"score":85,"percentile":259},"2025-12-15",0.94255,{"date":261,"score":85,"percentile":262},"2025-12-16",0.94258,{"date":264,"score":85,"percentile":265},"2025-12-17",0.94262,{"date":267,"score":85,"percentile":268},"2025-12-18",0.94266,{"date":270,"score":85,"percentile":271},"2025-12-19",0.94267,{"date":273,"score":85,"percentile":274},"2025-12-20",0.94268,{"date":276,"score":85,"percentile":277},"2025-12-21",0.94272,{"date":279,"score":85,"percentile":277},"2025-12-22",{"date":281,"score":85,"percentile":277},"2025-12-23",{"date":283,"score":85,"percentile":284},"2025-12-24",0.94276,{"date":286,"score":85,"percentile":287},"2025-12-25",0.94283,{"date":289,"score":85,"percentile":290},"2025-12-26",0.94281,{"date":292,"score":85,"percentile":226},"2025-12-27",{"date":294,"score":85,"percentile":295},"2025-12-28",0.9428,{"date":297,"score":85,"percentile":298},"2025-12-29",0.94279,{"date":300,"score":85,"percentile":290},"2025-12-30",{"date":302,"score":85,"percentile":303},"2025-12-31",0.94286,{"date":305,"score":306,"percentile":307},"2026-01-01",0.19242,0.95206,{"date":309,"score":306,"percentile":310},"2026-01-02",0.952,{"date":312,"score":306,"percentile":313},"2026-01-03",0.95197,{"date":315,"score":85,"percentile":290},"2026-01-04",{"date":317,"score":85,"percentile":318},"2026-01-05",0.94277,{"date":320,"score":85,"percentile":321},"2026-01-06",0.94278,{"date":323,"score":85,"percentile":298},"2026-01-07",{"date":325,"score":85,"percentile":287},"2026-01-08",{"date":327,"score":85,"percentile":328},"2026-01-09",0.94285,{"date":330,"score":85,"percentile":303},"2026-01-10",{"date":332,"score":85,"percentile":333},"2026-01-11",0.94284,{"date":335,"score":85,"percentile":336},"2026-01-12",0.94282,{"date":338,"score":85,"percentile":287},"2026-01-13",{"date":340,"score":85,"percentile":341},"2026-01-14",0.94289,{"date":343,"score":85,"percentile":344},"2026-01-15",0.9429,{"date":346,"score":85,"percentile":347},"2026-01-16",0.94293,{"date":349,"score":85,"percentile":350},"2026-01-17",0.94297,{"date":352,"score":85,"percentile":347},"2026-01-18",{"date":354,"score":85,"percentile":355},"2026-01-19",0.94291,{"date":357,"score":85,"percentile":355},"2026-01-20",{"date":359,"score":85,"percentile":360},"2026-01-21",0.94294,{"date":362,"score":85,"percentile":363},"2026-01-22",0.94298,{"date":365,"score":85,"percentile":366},"2026-01-23",0.94305,{"date":368,"score":85,"percentile":369},"2026-01-24",0.94308,{"date":371,"score":85,"percentile":372},"2026-01-25",0.94309,{"date":374,"score":85,"percentile":375},"2026-01-26",0.94311,{"date":377,"score":85,"percentile":375},"2026-01-27",{"date":379,"score":85,"percentile":232},"2026-01-28",{"date":381,"score":85,"percentile":212},"2026-01-29",{"date":383,"score":85,"percentile":212},"2026-01-30",{"date":385,"score":85,"percentile":386},"2026-01-31",0.94319,{"date":388,"score":306,"percentile":221},"2026-02-01",[390],{"source":89,"cvss_v2_0":391,"cvss_v3_0":9,"cvss_v3_1":396,"cvss_v4_0":9},{"baseScore":392,"baseSeverity":9,"vectorString":393,"impactScore":394,"exploitabilityScore":395},7.5,"AV:N/AC:L/Au:N/C:P/I:P/A:P",6.4,10,{"baseScore":87,"baseSeverity":397,"vectorString":90,"impactScore":87,"exploitabilityScore":395},"CRITICAL",[399,408,416,429],{"ecosystem":9,"name":400,"vendor":401,"product":402,"cpe_part":403,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":404},"debian linux","debian","debian_linux","o",[405],{"version":406,"is_range":42,"range_type":407,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"8.0","cpe",{"ecosystem":9,"name":409,"vendor":410,"product":409,"cpe_part":403,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":411},"fedora","fedoraproject",[412,414],{"version":413,"is_range":42,"range_type":407,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"30",{"version":415,"is_range":42,"range_type":407,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"31",{"ecosystem":9,"name":417,"vendor":418,"product":417,"cpe_part":419,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":420},"oniguruma","oniguruma_project","a",[421,427],{"version":422,"is_range":423,"range_type":407,"version_start":424,"version_start_type":425,"version_end":426,"version_end_type":425,"fixed_in":9},"gte6.0.0_lte6.9.3",true,"6.0.0","including","6.9.3",{"version":428,"is_range":42,"range_type":407,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.9.4:rc1",{"ecosystem":9,"name":430,"vendor":431,"product":432,"cpe_part":403,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":433},"enterprise linux","redhat","enterprise_linux",[434],{"version":406,"is_range":42,"range_type":407,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9}]