[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2023-31124":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T08:55:32.481Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":177,"aliases":178,"duplicate_of":9,"upstream":179,"downstream":180,"duplicates":215,"related":216,"reserved_at":9,"published_at":229,"modified_at":230,"state":231,"summary":232,"references_raw":240,"kevs":266,"epss":267,"epss_history":270,"metrics":531,"affected":539},"CVE-2023-31124","c-ares is an asynchronous resolver library. When cross-compiling c-ares and using the autotools build system, CARES_RANDOM_FILE will not be set, as seen when cross compiling aarch64 android.  This will downgrade to using rand() as a fallback which could allow an attacker to take advantage of the lack of entropy by not using a CSPRNG. This issue was patched in version 1.19.1.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-330","Use of Insufficiently Random Values","The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.","weakness","Stable","Class","High",[20,145,173],{"id":21,"name":22,"techniques":23},"CAPEC-112","Brute Force",[24],{"id":25,"name":22,"tactics":26,"countermeasures":30},"T1110",[27],{"id":28,"name":29},"TA0031","Credential Access",[31,36,40,44,48,52,56,60,64,68,72,76,80,84,89,93,98,103,107,111,115,119,123,127,131,136,141],{"id":32,"name":33,"tactic":34},"D3-CCSA","Credential Compromise Scope Analysis",{"name":35},"Detect",{"id":37,"name":38,"tactic":39},"D3-AEM","Application Exception Monitoring",{"name":35},{"id":41,"name":42,"tactic":43},"D3-OPM","Operational Process Monitoring",{"name":35},{"id":45,"name":46,"tactic":47},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":35},{"id":49,"name":50,"tactic":51},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":35},{"id":53,"name":54,"tactic":55},"D3-CSPP","Client-server Payload Profiling",{"name":35},{"id":57,"name":58,"tactic":59},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":35},{"id":61,"name":62,"tactic":63},"D3-NTSA","Network Traffic Signature Analysis",{"name":35},{"id":65,"name":66,"tactic":67},"D3-APCA","Application Protocol Command Analysis",{"name":35},{"id":69,"name":70,"tactic":71},"D3-NTCD","Network Traffic Community Deviation",{"name":35},{"id":73,"name":74,"tactic":75},"D3-RTSD","Remote Terminal Session Detection",{"name":35},{"id":77,"name":78,"tactic":79},"D3-CAA","Connection Attempt Analysis",{"name":35},{"id":81,"name":82,"tactic":83},"D3-ANAA","Administrative Network Activity Analysis",{"name":35},{"id":85,"name":86,"tactic":87},"D3-CR","Credential Revocation",{"name":88},"Evict",{"id":90,"name":91,"tactic":92},"D3-ANCI","Authentication Cache Invalidation",{"name":88},{"id":94,"name":95,"tactic":96},"D3-DUC","Decoy User Credential",{"name":97},"Deceive",{"id":99,"name":100,"tactic":101},"D3-CH","Credential Hardening",{"name":102},"Harden",{"id":104,"name":105,"tactic":106},"D3-MFA","Multi-factor Authentication",{"name":102},{"id":108,"name":109,"tactic":110},"D3-CRO","Credential Rotation",{"name":102},{"id":112,"name":113,"tactic":114},"D3-PR","Password Rotation",{"name":102},{"id":116,"name":117,"tactic":118},"D3-PWA","Password Authentication",{"name":102},{"id":120,"name":121,"tactic":122},"D3-CDP","Change Default Password",{"name":102},{"id":124,"name":125,"tactic":126},"D3-SPP","Strong Password Policy",{"name":102},{"id":128,"name":129,"tactic":130},"D3-OTP","One-time Password",{"name":102},{"id":132,"name":133,"tactic":134},"D3-RIC","Reissue Credential",{"name":135},"Restore",{"id":137,"name":138,"tactic":139},"D3-CTS","Credential Transmission Scoping",{"name":140},"Isolate",{"id":142,"name":143,"tactic":144},"D3-NTF","Network Traffic Filtering",{"name":140},{"id":146,"name":147,"techniques":148},"CAPEC-485","Signature Spoofing by Key Recreation",[149],{"id":150,"name":151,"tactics":152,"countermeasures":154},"T1552.004","Private Keys",[153],{"id":28,"name":29},[155,157,159,161,163,165,167,169,171],{"id":32,"name":33,"tactic":156},{"name":35},{"id":85,"name":86,"tactic":158},{"name":88},{"id":90,"name":91,"tactic":160},{"name":88},{"id":94,"name":95,"tactic":162},{"name":97},{"id":99,"name":100,"tactic":164},{"name":102},{"id":104,"name":105,"tactic":166},{"name":102},{"id":108,"name":109,"tactic":168},{"name":102},{"id":132,"name":133,"tactic":170},{"name":135},{"id":137,"name":138,"tactic":172},{"name":140},{"id":174,"name":175,"techniques":176},"CAPEC-59","Session Credential Falsification through Prediction",[],[],[],[],[181,183,185,187,189,191,193,195,197,199,201,203,205,207,209,211,213],{"_key":182},"SUSE-SU-2023:2655-1",{"_key":184},"SUSE-SU-2023:2662-1",{"_key":186},"RHSA-2023:3577",{"_key":188},"RHSA-2023:3586",{"_key":190},"RHSA-2023:4033",{"_key":192},"RHSA-2023:4034",{"_key":194},"RHSA-2023:4035",{"_key":196},"RHSA-2023:4036",{"_key":198},"RHSA-2023:4039",{"_key":200},"RHSA-2023:6635",{"_key":202},"SUSE-SU-2023:2477-1",{"_key":204},"SUSE-SU-2023:2861-1",{"_key":206},"SUSE-SU-2023:2313-1",{"_key":208},"SUSE-SU-2023:2663-1",{"_key":210},"SUSE-SU-2023:2669-1",{"_key":212},"OPENSUSE-SU-2024:12951-1",{"_key":214},"DEBIAN-CVE-2023-31124",[],[217,218,219,220,221,222,223,224,225,227],{"_key":182},{"_key":184},{"_key":202},{"_key":204},{"_key":206},{"_key":208},{"_key":210},{"_key":212},{"_key":226},"CGA-WW85-PWMF-67W8",{"_key":228},"CGA-CVPQ-QPPM-65CF","2023-05-25T21:09:31.881Z","2025-02-13T16:49:43.787Z","Modified",{"cisa_kev":233,"cisa_ransomware":233,"cisa_vendor":9,"epss_severity":234,"epss_score":235,"severity":234,"severity_score":236,"severity_version":237,"severity_source":238,"severity_vector":239,"severity_status":231},false,"low",0.00083,3.7,"v3.1","cve.org","CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",[241,248,253,258,262],{"url":242,"sources":243,"tags":245},"https://github.com/c-ares/c-ares/security/advisories/GHSA-54xr-f67r-4pc4",[238,244],"nvd",[246,247],"X Refsource CONFIRM","Third Party Advisory",{"url":249,"sources":250,"tags":251},"https://github.com/c-ares/c-ares/releases/tag/cares-1_19_1",[238,244],[252,247],"X Refsource MISC",{"url":254,"sources":255,"tags":256},"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/B5Z5XFNXTNPTCBBVXFDNZQVLLIE6VRBY/",[238,244],[257,247],"Mailing List",{"url":259,"sources":260,"tags":261},"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UBFWILTA33LOSV23P44FGTQQIDRJHIY7/",[238,244],[257,247],{"url":263,"sources":264,"tags":265},"https://security.gentoo.org/glsa/202310-09",[238,244],[247],[],{"date":268,"score":235,"percentile":269},"2026-06-04",0.2417,[271,275,277,280,283,286,289,292,295,298,301,304,307,310,313,317,320,322,325,328,331,334,337,340,343,346,349,352,355,358,361,364,367,369,372,375,378,381,384,387,390,393,395,398,401,404,407,410,412,415,418,420,423,426,429,432,435,438,440,443,446,449,452,455,458,461,464,467,469,471,474,476,479,482,485,488,491,494,497,499,502,504,507,510,513,516,519,522,525,528],{"date":272,"score":273,"percentile":274},"2025-11-04",0.0007,0.21638,{"date":276,"score":273,"percentile":274},"2025-11-05",{"date":278,"score":273,"percentile":279},"2025-11-06",0.21645,{"date":281,"score":273,"percentile":282},"2025-11-07",0.2166,{"date":284,"score":273,"percentile":285},"2025-11-08",0.21668,{"date":287,"score":273,"percentile":288},"2025-11-09",0.21622,{"date":290,"score":273,"percentile":291},"2025-11-10",0.2156,{"date":293,"score":273,"percentile":294},"2025-11-11",0.21585,{"date":296,"score":273,"percentile":297},"2025-11-12",0.21643,{"date":299,"score":273,"percentile":300},"2025-11-13",0.21655,{"date":302,"score":273,"percentile":303},"2025-11-14",0.21644,{"date":305,"score":273,"percentile":306},"2025-11-15",0.21626,{"date":308,"score":273,"percentile":309},"2025-11-16",0.21576,{"date":311,"score":273,"percentile":312},"2025-11-17",0.21538,{"date":314,"score":315,"percentile":316},"2025-11-18",0.00302,0.50576,{"date":318,"score":315,"percentile":319},"2025-11-19",0.50588,{"date":321,"score":315,"percentile":316},"2025-11-20",{"date":323,"score":273,"percentile":324},"2025-11-21",0.2151,{"date":326,"score":273,"percentile":327},"2025-11-22",0.21504,{"date":329,"score":273,"percentile":330},"2025-11-23",0.21468,{"date":332,"score":273,"percentile":333},"2025-11-24",0.21439,{"date":335,"score":273,"percentile":336},"2025-11-25",0.21423,{"date":338,"score":273,"percentile":339},"2025-11-26",0.21413,{"date":341,"score":273,"percentile":342},"2025-11-27",0.21374,{"date":344,"score":273,"percentile":345},"2025-11-28",0.2135,{"date":347,"score":273,"percentile":348},"2025-11-29",0.21335,{"date":350,"score":273,"percentile":351},"2025-11-30",0.21326,{"date":353,"score":273,"percentile":354},"2025-12-01",0.21373,{"date":356,"score":273,"percentile":357},"2025-12-02",0.2139,{"date":359,"score":273,"percentile":360},"2025-12-03",0.21401,{"date":362,"score":273,"percentile":363},"2025-12-04",0.21342,{"date":365,"score":273,"percentile":366},"2025-12-05",0.21385,{"date":368,"score":273,"percentile":366},"2025-12-06",{"date":370,"score":273,"percentile":371},"2025-12-07",0.21358,{"date":373,"score":273,"percentile":374},"2025-12-08",0.2137,{"date":376,"score":273,"percentile":377},"2025-12-09",0.21422,{"date":379,"score":273,"percentile":380},"2025-12-10",0.21496,{"date":382,"score":273,"percentile":383},"2025-12-11",0.21537,{"date":385,"score":273,"percentile":386},"2025-12-12",0.21551,{"date":388,"score":273,"percentile":389},"2025-12-13",0.21557,{"date":391,"score":273,"percentile":392},"2025-12-14",0.21525,{"date":394,"score":273,"percentile":327},"2025-12-15",{"date":396,"score":273,"percentile":397},"2025-12-16",0.21536,{"date":399,"score":273,"percentile":400},"2025-12-17",0.21612,{"date":402,"score":273,"percentile":403},"2025-12-18",0.21696,{"date":405,"score":273,"percentile":406},"2025-12-19",0.21719,{"date":408,"score":273,"percentile":409},"2025-12-20",0.21698,{"date":411,"score":273,"percentile":297},"2025-12-21",{"date":413,"score":273,"percentile":414},"2025-12-22",0.2161,{"date":416,"score":273,"percentile":417},"2025-12-23",0.21606,{"date":419,"score":273,"percentile":306},"2025-12-24",{"date":421,"score":273,"percentile":422},"2025-12-25",0.21706,{"date":424,"score":273,"percentile":425},"2025-12-26",0.21689,{"date":427,"score":273,"percentile":428},"2025-12-27",0.21697,{"date":430,"score":273,"percentile":431},"2025-12-28",0.21652,{"date":433,"score":273,"percentile":434},"2025-12-29",0.21614,{"date":436,"score":273,"percentile":437},"2025-12-30",0.21596,{"date":439,"score":273,"percentile":300},"2025-12-31",{"date":441,"score":273,"percentile":442},"2026-01-01",0.21747,{"date":444,"score":273,"percentile":445},"2026-01-02",0.21745,{"date":447,"score":273,"percentile":448},"2026-01-03",0.21729,{"date":450,"score":273,"percentile":451},"2026-01-04",0.21627,{"date":453,"score":273,"percentile":454},"2026-01-05",0.2162,{"date":456,"score":273,"percentile":457},"2026-01-06",0.21635,{"date":459,"score":273,"percentile":460},"2026-01-07",0.2167,{"date":462,"score":273,"percentile":463},"2026-01-08",0.21726,{"date":465,"score":273,"percentile":466},"2026-01-09",0.2172,{"date":468,"score":273,"percentile":409},"2026-01-10",{"date":470,"score":273,"percentile":285},"2026-01-11",{"date":472,"score":273,"percentile":473},"2026-01-12",0.21634,{"date":475,"score":273,"percentile":414},"2026-01-13",{"date":477,"score":273,"percentile":478},"2026-01-14",0.21673,{"date":480,"score":273,"percentile":481},"2026-01-15",0.21678,{"date":483,"score":273,"percentile":484},"2026-01-16",0.21709,{"date":486,"score":273,"percentile":487},"2026-01-17",0.21715,{"date":489,"score":273,"percentile":490},"2026-01-18",0.21659,{"date":492,"score":273,"percentile":493},"2026-01-19",0.21609,{"date":495,"score":273,"percentile":496},"2026-01-20",0.2159,{"date":498,"score":273,"percentile":386},"2026-01-21",{"date":500,"score":273,"percentile":501},"2026-01-22",0.21531,{"date":503,"score":273,"percentile":454},"2026-01-23",{"date":505,"score":273,"percentile":506},"2026-01-24",0.21642,{"date":508,"score":273,"percentile":509},"2026-01-25",0.21562,{"date":511,"score":273,"percentile":512},"2026-01-26",0.21451,{"date":514,"score":273,"percentile":515},"2026-01-27",0.2144,{"date":517,"score":273,"percentile":518},"2026-01-28",0.21441,{"date":520,"score":273,"percentile":521},"2026-01-29",0.21403,{"date":523,"score":273,"percentile":524},"2026-01-30",0.21406,{"date":526,"score":273,"percentile":527},"2026-01-31",0.21409,{"date":529,"score":273,"percentile":530},"2026-02-01",0.21449,[532,537],{"source":238,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":533,"cvss_v4_0":9},{"baseScore":236,"baseSeverity":534,"vectorString":239,"impactScore":535,"exploitabilityScore":536},"LOW",2.3,5.6,{"source":244,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":538,"cvss_v4_0":9},{"baseScore":236,"baseSeverity":534,"vectorString":239,"impactScore":535,"exploitabilityScore":536},[540,551,555],{"ecosystem":9,"name":541,"vendor":542,"product":541,"cpe_part":543,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":544},"c-ares","c-ares_project","a",[545],{"version":546,"is_range":547,"range_type":548,"version_start":9,"version_start_type":9,"version_end":549,"version_end_type":550,"fixed_in":9},"lt1.19.1",true,"cpe","1.19.1","excluding",{"ecosystem":9,"name":541,"vendor":541,"product":541,"cpe_part":543,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":552},[553],{"version":554,"is_range":547,"range_type":238,"version_start":9,"version_start_type":9,"version_end":549,"version_end_type":550,"fixed_in":9},"\u003C 1.19.1",{"ecosystem":9,"name":556,"vendor":557,"product":556,"cpe_part":558,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":559},"fedora","fedoraproject","o",[560,562],{"version":561,"is_range":233,"range_type":548,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"37",{"version":563,"is_range":233,"range_type":548,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"38"]