[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2022-23990":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T08:55:32.481Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":24,"aliases":25,"duplicate_of":9,"upstream":26,"downstream":27,"duplicates":66,"related":67,"reserved_at":9,"published_at":74,"modified_at":75,"state":76,"summary":77,"references_raw":86,"kevs":130,"epss":131,"epss_history":134,"metrics":397,"affected":409},"CVE-2022-23990","Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-190","Integer Overflow or Wraparound","The product performs a calculation that can\n         produce an integer overflow or wraparound when the logic\n         assumes that the resulting value will always be larger than\n         the original value. This occurs when an integer value is\n         incremented to a value that is too large to store in the\n         associated representation. When this occurs, the value may\n         become a very small or negative number.","weakness","Stable","Base","Medium",[20],{"id":21,"name":22,"techniques":23},"CAPEC-92","Forced Integer Overflow",[],[],[],[],[28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64],{"_key":29},"ALPINE-CVE-2022-23990",{"_key":31},"SUSE-SU-2022:0495-1",{"_key":33},"SUSE-SU-2022:0498-1",{"_key":35},"SUSE-SU-2022:14884-1",{"_key":37},"OPENSUSE-SU-2022:0498-1",{"_key":39},"OPENSUSE-SU-2024:11793-1",{"_key":41},"DLA-2904-1",{"_key":43},"DSA-5073-1",{"_key":45},"RHSA-2022:7811",{"_key":47},"MGASA-2022-0048",{"_key":49},"DEBIAN-CVE-2022-23990",{"_key":51},"RHBA-2022:4046",{"_key":53},"USN-5288-1",{"_key":55},"UBUNTU-CVE-2022-23990",{"_key":57},"RHSA-2025:21776",{"_key":59},"RHSA-2025:22607",{"_key":61},"RHSA-2025:22785",{"_key":63},"RHSA-2025:22842",{"_key":65},"RHSA-2025:22871",[],[68,69,70,71,72,73],{"_key":47},{"_key":31},{"_key":33},{"_key":35},{"_key":37},{"_key":39},"2022-01-26T18:02:02.000Z","2025-05-05T16:24:50.854Z","Modified",{"cisa_kev":78,"cisa_ransomware":78,"cisa_vendor":9,"epss_severity":79,"epss_score":80,"severity":81,"severity_score":82,"severity_version":83,"severity_source":84,"severity_vector":85,"severity_status":76},false,"low",0.037,"high",7.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",[87,96,102,106,112,116,121,125],{"url":88,"sources":89,"tags":91},"https://github.com/libexpat/libexpat/pull/551",[84,90],"nvd",[92,93,94,95],"X Refsource MISC","Issue Tracking","Patch","Third Party Advisory",{"url":97,"sources":98,"tags":99},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R7FF2UH7MPXKTADYSJUAHI2Y5UHBSHUH/",[84,90],[100,101],"Vendor Advisory","X Refsource FEDORA",{"url":103,"sources":104,"tags":105},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/34NXVL2RZC2YZRV74ZQ3RNFB7WCEUP7D/",[84,90],[100,101],{"url":107,"sources":108,"tags":109},"https://www.debian.org/security/2022/dsa-5073",[84,90],[100,110,111,95],"X Refsource DEBIAN","Mailing List",{"url":113,"sources":114,"tags":115},"https://www.oracle.com/security-alerts/cpuapr2022.html",[84,90],[92,95],{"url":117,"sources":118,"tags":119},"https://www.tenable.com/security/tns-2022-05",[84,90],[120,95],"X Refsource CONFIRM",{"url":122,"sources":123,"tags":124},"https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf",[84,90],[120,94,95],{"url":126,"sources":127,"tags":128},"https://security.gentoo.org/glsa/202209-24",[84,90],[100,129,95],"X Refsource GENTOO",[],{"date":132,"score":80,"percentile":133},"2026-06-04",0.88158,[135,139,141,144,146,149,151,154,157,160,163,166,168,171,174,178,181,184,187,189,192,195,198,200,202,205,208,211,214,216,219,222,226,229,232,235,238,242,246,249,251,254,257,260,263,266,269,272,275,278,281,284,287,290,294,297,300,304,307,310,313,316,319,322,325,327,330,332,335,337,340,343,346,348,351,354,357,359,361,364,367,370,373,376,380,383,386,389,392,394],{"date":136,"score":137,"percentile":138},"2025-11-04",0.04361,0.88424,{"date":140,"score":137,"percentile":138},"2025-11-05",{"date":142,"score":137,"percentile":143},"2025-11-06",0.88417,{"date":145,"score":137,"percentile":138},"2025-11-07",{"date":147,"score":137,"percentile":148},"2025-11-08",0.88427,{"date":150,"score":137,"percentile":138},"2025-11-09",{"date":152,"score":137,"percentile":153},"2025-11-10",0.88423,{"date":155,"score":137,"percentile":156},"2025-11-11",0.88428,{"date":158,"score":137,"percentile":159},"2025-11-12",0.88435,{"date":161,"score":137,"percentile":162},"2025-11-13",0.88439,{"date":164,"score":137,"percentile":165},"2025-11-14",0.88444,{"date":167,"score":137,"percentile":162},"2025-11-15",{"date":169,"score":137,"percentile":170},"2025-11-16",0.88442,{"date":172,"score":137,"percentile":173},"2025-11-17",0.88438,{"date":175,"score":176,"percentile":177},"2025-11-18",0.02596,0.8429,{"date":179,"score":176,"percentile":180},"2025-11-19",0.84293,{"date":182,"score":176,"percentile":183},"2025-11-20",0.843,{"date":185,"score":137,"percentile":186},"2025-11-21",0.88451,{"date":188,"score":137,"percentile":186},"2025-11-22",{"date":190,"score":137,"percentile":191},"2025-11-23",0.88446,{"date":193,"score":137,"percentile":194},"2025-11-24",0.88447,{"date":196,"score":137,"percentile":197},"2025-11-25",0.88448,{"date":199,"score":137,"percentile":194},"2025-11-26",{"date":201,"score":137,"percentile":197},"2025-11-27",{"date":203,"score":137,"percentile":204},"2025-11-28",0.88441,{"date":206,"score":137,"percentile":207},"2025-11-29",0.88514,{"date":209,"score":137,"percentile":210},"2025-11-30",0.8851,{"date":212,"score":137,"percentile":213},"2025-12-01",0.88574,{"date":215,"score":137,"percentile":213},"2025-12-02",{"date":217,"score":137,"percentile":218},"2025-12-03",0.88571,{"date":220,"score":137,"percentile":221},"2025-12-04",0.88508,{"date":223,"score":224,"percentile":225},"2025-12-05",0.03296,0.86787,{"date":227,"score":224,"percentile":228},"2025-12-06",0.86784,{"date":230,"score":224,"percentile":231},"2025-12-07",0.86778,{"date":233,"score":224,"percentile":234},"2025-12-08",0.86779,{"date":236,"score":224,"percentile":237},"2025-12-09",0.86788,{"date":239,"score":240,"percentile":241},"2025-12-10",0.02875,0.85843,{"date":243,"score":244,"percentile":245},"2025-12-11",0.03812,0.87718,{"date":247,"score":244,"percentile":248},"2025-12-12",0.87723,{"date":250,"score":244,"percentile":248},"2025-12-13",{"date":252,"score":244,"percentile":253},"2025-12-14",0.87719,{"date":255,"score":244,"percentile":256},"2025-12-15",0.87716,{"date":258,"score":244,"percentile":259},"2025-12-16",0.87722,{"date":261,"score":244,"percentile":262},"2025-12-17",0.87725,{"date":264,"score":244,"percentile":265},"2025-12-18",0.87733,{"date":267,"score":244,"percentile":268},"2025-12-19",0.87736,{"date":270,"score":244,"percentile":271},"2025-12-20",0.87734,{"date":273,"score":244,"percentile":274},"2025-12-21",0.87739,{"date":276,"score":244,"percentile":277},"2025-12-22",0.8774,{"date":279,"score":244,"percentile":280},"2025-12-23",0.87745,{"date":282,"score":244,"percentile":283},"2025-12-24",0.87749,{"date":285,"score":244,"percentile":286},"2025-12-25",0.87762,{"date":288,"score":244,"percentile":289},"2025-12-26",0.8776,{"date":291,"score":292,"percentile":293},"2025-12-27",0.0323,0.86729,{"date":295,"score":244,"percentile":296},"2025-12-28",0.87748,{"date":298,"score":244,"percentile":299},"2025-12-29",0.87743,{"date":301,"score":302,"percentile":303},"2025-12-30",0.04476,0.88726,{"date":305,"score":80,"percentile":306},"2025-12-31",0.87594,{"date":308,"score":80,"percentile":309},"2026-01-01",0.87654,{"date":311,"score":80,"percentile":312},"2026-01-02",0.8765,{"date":314,"score":80,"percentile":315},"2026-01-03",0.87649,{"date":317,"score":80,"percentile":318},"2026-01-04",0.87583,{"date":320,"score":80,"percentile":321},"2026-01-05",0.8758,{"date":323,"score":80,"percentile":324},"2026-01-06",0.87582,{"date":326,"score":80,"percentile":318},"2026-01-07",{"date":328,"score":80,"percentile":329},"2026-01-08",0.87589,{"date":331,"score":80,"percentile":329},"2026-01-09",{"date":333,"score":80,"percentile":334},"2026-01-10",0.8759,{"date":336,"score":80,"percentile":318},"2026-01-11",{"date":338,"score":80,"percentile":339},"2026-01-12",0.87581,{"date":341,"score":80,"percentile":342},"2026-01-13",0.87579,{"date":344,"score":80,"percentile":345},"2026-01-14",0.87592,{"date":347,"score":80,"percentile":345},"2026-01-15",{"date":349,"score":80,"percentile":350},"2026-01-16",0.87597,{"date":352,"score":80,"percentile":353},"2026-01-17",0.87598,{"date":355,"score":80,"percentile":356},"2026-01-18",0.87599,{"date":358,"score":80,"percentile":353},"2026-01-19",{"date":360,"score":80,"percentile":350},"2026-01-20",{"date":362,"score":80,"percentile":363},"2026-01-21",0.876,{"date":365,"score":80,"percentile":366},"2026-01-22",0.87605,{"date":368,"score":80,"percentile":369},"2026-01-23",0.87618,{"date":371,"score":80,"percentile":372},"2026-01-24",0.87624,{"date":374,"score":80,"percentile":375},"2026-01-25",0.8762,{"date":377,"score":378,"percentile":379},"2026-01-26",0.03519,0.87309,{"date":381,"score":378,"percentile":382},"2026-01-27",0.87311,{"date":384,"score":378,"percentile":385},"2026-01-28",0.87313,{"date":387,"score":378,"percentile":388},"2026-01-29",0.87317,{"date":390,"score":378,"percentile":391},"2026-01-30",0.87319,{"date":393,"score":378,"percentile":391},"2026-01-31",{"date":395,"score":378,"percentile":396},"2026-02-01",0.87386,[398,403],{"source":84,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":399,"cvss_v4_0":9},{"baseScore":82,"baseSeverity":400,"vectorString":85,"impactScore":401,"exploitabilityScore":402},"HIGH",6,10,{"source":90,"cvss_v2_0":404,"cvss_v3_0":9,"cvss_v3_1":408,"cvss_v4_0":9},{"baseScore":405,"baseSeverity":9,"vectorString":406,"impactScore":407,"exploitabilityScore":402},5,"AV:N/AC:L/Au:N/C:N/I:N/A:P",2.9,{"baseScore":82,"baseSeverity":400,"vectorString":85,"impactScore":401,"exploitabilityScore":402},[410,421,429,439,446,454],{"ecosystem":9,"name":411,"vendor":412,"product":413,"cpe_part":414,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":415},"debian linux","debian","debian_linux","o",[416,419],{"version":417,"is_range":78,"range_type":418,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10.0","cpe",{"version":420,"is_range":78,"range_type":418,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"11.0",{"ecosystem":9,"name":422,"vendor":423,"product":422,"cpe_part":414,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":424},"fedora","fedoraproject",[425,427],{"version":426,"is_range":78,"range_type":418,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"34",{"version":428,"is_range":78,"range_type":418,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"35",{"ecosystem":9,"name":430,"vendor":431,"product":430,"cpe_part":432,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":433},"libexpat","libexpat_project","a",[434],{"version":435,"is_range":436,"range_type":418,"version_start":9,"version_start_type":9,"version_end":437,"version_end_type":438,"fixed_in":9},"lt2.4.4",true,"2.4.4","excluding",{"ecosystem":9,"name":440,"vendor":441,"product":442,"cpe_part":432,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":443},"communications metasolv solution","oracle","communications_metasolv_solution",[444],{"version":445,"is_range":78,"range_type":418,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.3.1",{"ecosystem":9,"name":447,"vendor":448,"product":449,"cpe_part":432,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":450},"sinema remote connect server","siemens","sinema_remote_connect_server",[451],{"version":452,"is_range":436,"range_type":418,"version_start":9,"version_start_type":9,"version_end":453,"version_end_type":438,"fixed_in":9},"lt3.1","3.1",{"ecosystem":9,"name":455,"vendor":456,"product":455,"cpe_part":432,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":457},"nessus","tenable",[458,461],{"version":459,"is_range":436,"range_type":418,"version_start":9,"version_start_type":9,"version_end":460,"version_end_type":438,"fixed_in":9},"lt8.15.3","8.15.3",{"version":462,"is_range":436,"range_type":418,"version_start":463,"version_start_type":464,"version_end":465,"version_end_type":438,"fixed_in":9},"gte10.0.0_lt10.1.1","10.0.0","including","10.1.1"]