[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2023-26464":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T02:55:30.529Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":24,"aliases":25,"duplicate_of":9,"upstream":27,"downstream":28,"duplicates":43,"related":44,"reserved_at":9,"published_at":47,"modified_at":48,"state":49,"summary":50,"references_raw":59,"kevs":87,"epss":88,"epss_history":91,"metrics":363,"affected":373},"CVE-2023-26464","** UNSUPPORTED WHEN ASSIGNED **\n\nWhen using the Chainsaw or SocketAppender components with Log4j 1.x on JRE less than 1.7, an attacker that manages to cause a logging entry involving a specially-crafted (ie, deeply nested) \nhashmap or hashtable (depending on which logging component is in use) to be processed could exhaust the available memory in the virtual machine and achieve Denial of Service when the object is deserialized.\n\nThis issue affects Apache Log4j before 2. Affected users are recommended to update to Log4j 2.x.\n\nNOTE: This vulnerability only affects products that are no longer supported by the maintainer.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-502","Deserialization of Untrusted Data","The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.","weakness","Draft","Base","Medium",[20],{"id":21,"name":22,"techniques":23},"CAPEC-586","Object Injection",[],[],[26],"GHSA-vp98-w2p3-mv35",[],[29,31,33,35,37,39,41],{"_key":30},"UBUNTU-CVE-2023-26464",{"_key":32},"RHSA-2023:3663",{"_key":34},"RHSA-2024:10208",{"_key":36},"RHSA-2024:10207",{"_key":38},"RHSA-2023:5484",{"_key":40},"RHSA-2023:5485",{"_key":42},"RHSA-2023:5486",[],[45],{"_key":46},"CGA-59R9-M54P-GQG9","2023-03-10T13:38:16.190Z","2025-02-13T16:44:55.555Z","Modified",{"cisa_kev":51,"cisa_ransomware":51,"cisa_vendor":9,"epss_severity":52,"epss_score":53,"severity":54,"severity_score":55,"severity_version":56,"severity_source":57,"severity_vector":58,"severity_status":49},false,"low",0.00125,"high",7.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",[60,69,73,78,83],{"url":61,"sources":62,"tags":65},"https://lists.apache.org/thread/wkx6grrcjkh86crr49p4blc1v1nflj3t",[57,63,64],"nvd","osv_maven",[66,67,68],"Vendor Advisory","Mailing List","WEB",{"url":70,"sources":71,"tags":72},"https://security.netapp.com/advisory/ntap-20230505-0008/",[57,63],[],{"url":74,"sources":75,"tags":76},"https://nvd.nist.gov/vuln/detail/CVE-2023-26464",[64],[77],"Advisory",{"url":79,"sources":80,"tags":81},"https://github.com/apache/logging-log4j2",[64],[82],"PACKAGE",{"url":84,"sources":85,"tags":86},"https://security.netapp.com/advisory/ntap-20230505-0008",[64],[68],[],{"date":89,"score":53,"percentile":90},"2026-06-04",0.31277,[92,96,99,102,105,108,111,114,117,120,123,126,129,132,135,139,142,145,148,151,154,157,160,163,166,170,173,176,179,182,185,188,191,194,197,200,203,206,209,212,215,218,221,224,227,231,234,237,240,243,246,249,252,255,258,261,264,267,270,273,276,279,282,285,288,291,294,297,299,302,305,308,311,314,316,319,322,324,327,330,333,336,338,341,344,347,350,353,356,359],{"date":93,"score":94,"percentile":95},"2025-11-04",0.00075,0.22992,{"date":97,"score":94,"percentile":98},"2025-11-05",0.22984,{"date":100,"score":94,"percentile":101},"2025-11-06",0.22989,{"date":103,"score":94,"percentile":104},"2025-11-07",0.23001,{"date":106,"score":94,"percentile":107},"2025-11-08",0.22994,{"date":109,"score":94,"percentile":110},"2025-11-09",0.2294,{"date":112,"score":94,"percentile":113},"2025-11-10",0.22876,{"date":115,"score":94,"percentile":116},"2025-11-11",0.22903,{"date":118,"score":94,"percentile":119},"2025-11-12",0.22961,{"date":121,"score":94,"percentile":122},"2025-11-13",0.22963,{"date":124,"score":94,"percentile":125},"2025-11-14",0.22956,{"date":127,"score":94,"percentile":128},"2025-11-15",0.22943,{"date":130,"score":94,"percentile":131},"2025-11-16",0.22891,{"date":133,"score":94,"percentile":134},"2025-11-17",0.22845,{"date":136,"score":137,"percentile":138},"2025-11-18",0.03657,0.86699,{"date":140,"score":137,"percentile":141},"2025-11-19",0.867,{"date":143,"score":137,"percentile":144},"2025-11-20",0.86702,{"date":146,"score":94,"percentile":147},"2025-11-21",0.22796,{"date":149,"score":94,"percentile":150},"2025-11-22",0.22792,{"date":152,"score":94,"percentile":153},"2025-11-23",0.22756,{"date":155,"score":94,"percentile":156},"2025-11-24",0.22714,{"date":158,"score":94,"percentile":159},"2025-11-25",0.22699,{"date":161,"score":94,"percentile":162},"2025-11-26",0.22682,{"date":164,"score":94,"percentile":165},"2025-11-27",0.22685,{"date":167,"score":168,"percentile":169},"2025-11-28",0.00114,0.30685,{"date":171,"score":168,"percentile":172},"2025-11-29",0.30675,{"date":174,"score":168,"percentile":175},"2025-11-30",0.30653,{"date":177,"score":94,"percentile":178},"2025-12-01",0.22672,{"date":180,"score":94,"percentile":181},"2025-12-02",0.22689,{"date":183,"score":94,"percentile":184},"2025-12-03",0.22701,{"date":186,"score":168,"percentile":187},"2025-12-04",0.30665,{"date":189,"score":168,"percentile":190},"2025-12-05",0.30705,{"date":192,"score":168,"percentile":193},"2025-12-06",0.30707,{"date":195,"score":168,"percentile":196},"2025-12-07",0.30686,{"date":198,"score":168,"percentile":199},"2025-12-08",0.30696,{"date":201,"score":168,"percentile":202},"2025-12-09",0.3075,{"date":204,"score":168,"percentile":205},"2025-12-10",0.30813,{"date":207,"score":168,"percentile":208},"2025-12-11",0.3084,{"date":210,"score":168,"percentile":211},"2025-12-12",0.30869,{"date":213,"score":168,"percentile":214},"2025-12-13",0.30859,{"date":216,"score":168,"percentile":217},"2025-12-14",0.30834,{"date":219,"score":168,"percentile":220},"2025-12-15",0.308,{"date":222,"score":168,"percentile":223},"2025-12-16",0.30823,{"date":225,"score":168,"percentile":226},"2025-12-17",0.30868,{"date":228,"score":229,"percentile":230},"2025-12-18",0.00117,0.31428,{"date":232,"score":229,"percentile":233},"2025-12-19",0.31458,{"date":235,"score":229,"percentile":236},"2025-12-20",0.31438,{"date":238,"score":229,"percentile":239},"2025-12-21",0.31389,{"date":241,"score":229,"percentile":242},"2025-12-22",0.31352,{"date":244,"score":229,"percentile":245},"2025-12-23",0.31333,{"date":247,"score":229,"percentile":248},"2025-12-24",0.31326,{"date":250,"score":229,"percentile":251},"2025-12-25",0.31402,{"date":253,"score":229,"percentile":254},"2025-12-26",0.3139,{"date":256,"score":229,"percentile":257},"2025-12-27",0.31399,{"date":259,"score":229,"percentile":260},"2025-12-28",0.31315,{"date":262,"score":229,"percentile":263},"2025-12-29",0.3128,{"date":265,"score":229,"percentile":266},"2025-12-30",0.31275,{"date":268,"score":168,"percentile":269},"2025-12-31",0.30799,{"date":271,"score":94,"percentile":272},"2026-01-01",0.2297,{"date":274,"score":94,"percentile":275},"2026-01-02",0.22968,{"date":277,"score":94,"percentile":278},"2026-01-03",0.22952,{"date":280,"score":168,"percentile":281},"2026-01-04",0.30762,{"date":283,"score":168,"percentile":284},"2026-01-05",0.30752,{"date":286,"score":168,"percentile":287},"2026-01-06",0.30764,{"date":289,"score":168,"percentile":290},"2026-01-07",0.30792,{"date":292,"score":168,"percentile":293},"2026-01-08",0.3082,{"date":295,"score":168,"percentile":296},"2026-01-09",0.30815,{"date":298,"score":168,"percentile":205},"2026-01-10",{"date":300,"score":168,"percentile":301},"2026-01-11",0.3078,{"date":303,"score":168,"percentile":304},"2026-01-12",0.30723,{"date":306,"score":168,"percentile":307},"2026-01-13",0.30698,{"date":309,"score":168,"percentile":310},"2026-01-14",0.30743,{"date":312,"score":168,"percentile":313},"2026-01-15",0.30739,{"date":315,"score":168,"percentile":287},"2026-01-16",{"date":317,"score":168,"percentile":318},"2026-01-17",0.30757,{"date":320,"score":168,"percentile":321},"2026-01-18",0.30699,{"date":323,"score":168,"percentile":187},"2026-01-19",{"date":325,"score":168,"percentile":326},"2026-01-20",0.3065,{"date":328,"score":168,"percentile":329},"2026-01-21",0.30597,{"date":331,"score":168,"percentile":332},"2026-01-22",0.30575,{"date":334,"score":168,"percentile":335},"2026-01-23",0.30644,{"date":337,"score":168,"percentile":175},"2026-01-24",{"date":339,"score":168,"percentile":340},"2026-01-25",0.30582,{"date":342,"score":168,"percentile":343},"2026-01-26",0.3051,{"date":345,"score":168,"percentile":346},"2026-01-27",0.30495,{"date":348,"score":168,"percentile":349},"2026-01-28",0.30476,{"date":351,"score":168,"percentile":352},"2026-01-29",0.30434,{"date":354,"score":168,"percentile":355},"2026-01-30",0.30424,{"date":357,"score":168,"percentile":358},"2026-01-31",0.30429,{"date":360,"score":361,"percentile":362},"2026-02-01",0.00076,0.22767,[364,369,371],{"source":57,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":365,"cvss_v4_0":9},{"baseScore":55,"baseSeverity":366,"vectorString":58,"impactScore":367,"exploitabilityScore":368},"HIGH",6,10,{"source":63,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":370,"cvss_v4_0":9},{"baseScore":55,"baseSeverity":366,"vectorString":58,"impactScore":367,"exploitabilityScore":368},{"source":64,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":372,"cvss_v4_0":9},{"baseScore":55,"baseSeverity":9,"vectorString":58,"impactScore":367,"exploitabilityScore":368},[374,387,395,403],{"ecosystem":9,"name":375,"vendor":376,"product":377,"cpe_part":378,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":379},"Apache Log4j","apache software foundation","apache log4j","a",[380],{"version":381,"is_range":382,"range_type":57,"version_start":383,"version_start_type":384,"version_end":385,"version_end_type":386,"fixed_in":9},">= 1.0.4, \u003C 2",true,"1.0.4","including","2","excluding",{"ecosystem":9,"name":388,"vendor":389,"product":388,"cpe_part":378,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":390},"log4j","apache",[391],{"version":392,"is_range":382,"range_type":393,"version_start":383,"version_start_type":384,"version_end":394,"version_end_type":386,"fixed_in":9},"gte1.0.4_lt2.0","cpe","2.0",{"ecosystem":396,"name":397,"vendor":388,"product":388,"cpe_part":9,"purl_type":398,"purl_namespace":388,"purl_name":388,"source":9,"versions":399},"Maven","log4j:log4j","maven",[400],{"version":401,"is_range":382,"range_type":402,"version_start":383,"version_start_type":384,"version_end":394,"version_end_type":386,"fixed_in":9},"gte1_0_4_lt2_0","ecosystem",{"ecosystem":396,"name":404,"vendor":405,"product":406,"cpe_part":9,"purl_type":398,"purl_namespace":405,"purl_name":406,"source":9,"versions":407},"org.apache.logging.log4j:log4j-core","org.apache.logging.log4j","log4j-core",[408],{"version":401,"is_range":382,"range_type":402,"version_start":383,"version_start_type":384,"version_end":394,"version_end_type":386,"fixed_in":9}]