[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2023-31130":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T14:55:33.319Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":27,"aliases":28,"duplicate_of":9,"upstream":29,"downstream":30,"duplicates":81,"related":82,"reserved_at":9,"published_at":95,"modified_at":96,"state":97,"summary":98,"references_raw":107,"kevs":146,"epss":147,"epss_history":150,"metrics":402,"affected":413},"CVE-2023-31130","c-ares is an asynchronous resolver library. ares_inet_net_pton() is vulnerable to a buffer underflow for certain ipv6 addresses, in particular \"0::00:00:00/2\" was found to cause an issue.  C-ares only uses this function internally for configuration purposes which would require an administrator to configure such an address via ares_set_sortlist(). However, users may externally use ares_inet_net_pton() for other purposes and thus be vulnerable to more severe issues. This issue has been fixed in 1.19.1.",null,[11,20],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-124","Buffer Underwrite ('Buffer Underflow')","The product writes to a buffer using an index or pointer that references a memory location prior to the beginning of the buffer.","weakness","Incomplete","Base","Medium",[],{"_key":21,"id":21,"name":22,"description":23,"type":15,"status":24,"abstraction":17,"likelihood_of_exploit":25,"capec":26},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","Draft","High",[],[],[],[],[31,33,35,37,39,41,43,45,47,49,51,53,55,57,59,61,63,65,67,69,71,73,75,77,79],{"_key":32},"SUSE-SU-2023:2655-1",{"_key":34},"SUSE-SU-2023:2662-1",{"_key":36},"RHSA-2023:3577",{"_key":38},"RHSA-2023:3586",{"_key":40},"RHSA-2023:4033",{"_key":42},"RHSA-2023:4034",{"_key":44},"RHSA-2023:4035",{"_key":46},"RHSA-2023:4036",{"_key":48},"RHSA-2023:4039",{"_key":50},"RHSA-2023:6635",{"_key":52},"SUSE-SU-2023:2477-1",{"_key":54},"SUSE-SU-2023:2861-1",{"_key":56},"SUSE-SU-2023:2313-1",{"_key":58},"SUSE-SU-2023:2663-1",{"_key":60},"SUSE-SU-2023:2669-1",{"_key":62},"OPENSUSE-SU-2024:12951-1",{"_key":64},"DLA-3471-1",{"_key":66},"DSA-5419-1",{"_key":68},"RHSA-2023:7392",{"_key":70},"RHSA-2023:7543",{"_key":72},"RHSA-2023:7207",{"_key":74},"USN-6164-1",{"_key":76},"UBUNTU-CVE-2023-31130",{"_key":78},"DEBIAN-CVE-2023-31130",{"_key":80},"USN-6164-2",[],[83,84,85,86,87,88,89,90,91,93],{"_key":32},{"_key":34},{"_key":52},{"_key":54},{"_key":56},{"_key":58},{"_key":60},{"_key":62},{"_key":92},"CGA-P2C7-47HM-PVCM",{"_key":94},"CGA-CM5W-2JQ9-RV9Q","2023-05-25T21:45:42.645Z","2025-02-13T16:49:44.998Z","Modified",{"cisa_kev":99,"cisa_ransomware":99,"cisa_vendor":9,"epss_severity":100,"epss_score":101,"severity":102,"severity_score":103,"severity_version":104,"severity_source":105,"severity_vector":106,"severity_status":97},false,"low",0.00012,"medium",6.4,"v3.1","nvd","CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",[108,115,121,126,130,134,138,142],{"url":109,"sources":110,"tags":112},"https://github.com/c-ares/c-ares/security/advisories/GHSA-x6mf-cxr9-8q6v",[111,105],"cve.org",[113,114],"X Refsource CONFIRM","Third Party Advisory",{"url":116,"sources":117,"tags":118},"https://github.com/c-ares/c-ares/releases/tag/cares-1_19_1",[111,105],[119,120],"X Refsource MISC","Release Notes",{"url":122,"sources":123,"tags":124},"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/B5Z5XFNXTNPTCBBVXFDNZQVLLIE6VRBY/",[111,105],[125,114],"Mailing List",{"url":127,"sources":128,"tags":129},"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UBFWILTA33LOSV23P44FGTQQIDRJHIY7/",[111,105],[125,114],{"url":131,"sources":132,"tags":133},"https://www.debian.org/security/2023/dsa-5419",[111,105],[114],{"url":135,"sources":136,"tags":137},"https://lists.debian.org/debian-lts-announce/2023/06/msg00034.html",[111,105],[125],{"url":139,"sources":140,"tags":141},"https://security.gentoo.org/glsa/202310-09",[111,105],[114],{"url":143,"sources":144,"tags":145},"https://security.netapp.com/advisory/ntap-20240605-0005/",[111,105],[],[],{"date":148,"score":101,"percentile":149},"2026-06-04",0.01869,[151,155,158,161,164,166,169,172,175,178,180,182,185,188,191,195,198,201,204,208,211,214,217,220,223,226,229,232,235,238,241,244,247,250,253,256,259,262,265,268,271,274,277,280,283,285,288,291,294,297,300,302,305,308,311,313,315,317,320,322,325,327,329,331,333,335,337,339,342,344,346,349,352,355,358,360,363,366,369,372,375,377,380,382,385,388,391,394,396,399],{"date":152,"score":153,"percentile":154},"2025-11-04",0.00011,0.00871,{"date":156,"score":153,"percentile":157},"2025-11-05",0.0088,{"date":159,"score":153,"percentile":160},"2025-11-06",0.00884,{"date":162,"score":153,"percentile":163},"2025-11-07",0.00886,{"date":165,"score":153,"percentile":160},"2025-11-08",{"date":167,"score":153,"percentile":168},"2025-11-09",0.00883,{"date":170,"score":153,"percentile":171},"2025-11-10",0.00874,{"date":173,"score":153,"percentile":174},"2025-11-11",0.00878,{"date":176,"score":153,"percentile":177},"2025-11-12",0.00877,{"date":179,"score":153,"percentile":177},"2025-11-13",{"date":181,"score":153,"percentile":157},"2025-11-14",{"date":183,"score":153,"percentile":184},"2025-11-15",0.00897,{"date":186,"score":153,"percentile":187},"2025-11-16",0.00895,{"date":189,"score":153,"percentile":190},"2025-11-17",0.00893,{"date":192,"score":193,"percentile":194},"2025-11-18",0.00124,0.26734,{"date":196,"score":193,"percentile":197},"2025-11-19",0.26759,{"date":199,"score":193,"percentile":200},"2025-11-20",0.26764,{"date":202,"score":153,"percentile":203},"2025-11-21",0.0092,{"date":205,"score":206,"percentile":207},"2025-11-22",0.0001,0.00744,{"date":209,"score":206,"percentile":210},"2025-11-23",0.00738,{"date":212,"score":206,"percentile":213},"2025-11-24",0.00735,{"date":215,"score":206,"percentile":216},"2025-11-25",0.00732,{"date":218,"score":206,"percentile":219},"2025-11-26",0.00724,{"date":221,"score":206,"percentile":222},"2025-11-27",0.00723,{"date":224,"score":206,"percentile":225},"2025-11-28",0.00727,{"date":227,"score":206,"percentile":228},"2025-11-29",0.00742,{"date":230,"score":206,"percentile":231},"2025-11-30",0.00741,{"date":233,"score":206,"percentile":234},"2025-12-01",0.00747,{"date":236,"score":206,"percentile":237},"2025-12-02",0.00745,{"date":239,"score":153,"percentile":240},"2025-12-03",0.00939,{"date":242,"score":153,"percentile":243},"2025-12-04",0.00931,{"date":245,"score":153,"percentile":246},"2025-12-05",0.00941,{"date":248,"score":153,"percentile":249},"2025-12-06",0.00942,{"date":251,"score":153,"percentile":252},"2025-12-07",0.00948,{"date":254,"score":153,"percentile":255},"2025-12-08",0.00953,{"date":257,"score":153,"percentile":258},"2025-12-09",0.00966,{"date":260,"score":153,"percentile":261},"2025-12-10",0.00978,{"date":263,"score":153,"percentile":264},"2025-12-11",0.0097,{"date":266,"score":153,"percentile":267},"2025-12-12",0.00967,{"date":269,"score":153,"percentile":270},"2025-12-13",0.00956,{"date":272,"score":153,"percentile":273},"2025-12-14",0.00955,{"date":275,"score":153,"percentile":276},"2025-12-15",0.00954,{"date":278,"score":153,"percentile":279},"2025-12-16",0.00958,{"date":281,"score":153,"percentile":282},"2025-12-17",0.00963,{"date":284,"score":153,"percentile":276},"2025-12-18",{"date":286,"score":153,"percentile":287},"2025-12-19",0.0096,{"date":289,"score":153,"percentile":290},"2025-12-20",0.00959,{"date":292,"score":153,"percentile":293},"2025-12-21",0.00962,{"date":295,"score":153,"percentile":296},"2025-12-22",0.00973,{"date":298,"score":153,"percentile":299},"2025-12-23",0.00969,{"date":301,"score":153,"percentile":299},"2025-12-24",{"date":303,"score":153,"percentile":304},"2025-12-25",0.00972,{"date":306,"score":153,"percentile":307},"2025-12-26",0.00974,{"date":309,"score":153,"percentile":310},"2025-12-27",0.00981,{"date":312,"score":153,"percentile":304},"2025-12-28",{"date":314,"score":153,"percentile":267},"2025-12-29",{"date":316,"score":153,"percentile":258},"2025-12-30",{"date":318,"score":153,"percentile":319},"2025-12-31",0.00961,{"date":321,"score":153,"percentile":264},"2026-01-01",{"date":323,"score":153,"percentile":324},"2026-01-02",0.00968,{"date":326,"score":153,"percentile":304},"2026-01-03",{"date":328,"score":153,"percentile":279},"2026-01-04",{"date":330,"score":153,"percentile":293},"2026-01-05",{"date":332,"score":153,"percentile":290},"2026-01-06",{"date":334,"score":153,"percentile":287},"2026-01-07",{"date":336,"score":153,"percentile":299},"2026-01-08",{"date":338,"score":153,"percentile":310},"2026-01-09",{"date":340,"score":153,"percentile":341},"2026-01-10",0.00983,{"date":343,"score":153,"percentile":341},"2026-01-11",{"date":345,"score":153,"percentile":341},"2026-01-12",{"date":347,"score":153,"percentile":348},"2026-01-13",0.00986,{"date":350,"score":153,"percentile":351},"2026-01-14",0.00984,{"date":353,"score":153,"percentile":354},"2026-01-15",0.00991,{"date":356,"score":153,"percentile":357},"2026-01-16",0.00998,{"date":359,"score":153,"percentile":357},"2026-01-17",{"date":361,"score":153,"percentile":362},"2026-01-18",0.01006,{"date":364,"score":153,"percentile":365},"2026-01-19",0.01009,{"date":367,"score":153,"percentile":368},"2026-01-20",0.01001,{"date":370,"score":153,"percentile":371},"2026-01-21",0.00996,{"date":373,"score":153,"percentile":374},"2026-01-22",0.00999,{"date":376,"score":153,"percentile":365},"2026-01-23",{"date":378,"score":153,"percentile":379},"2026-01-24",0.01008,{"date":381,"score":153,"percentile":379},"2026-01-25",{"date":383,"score":153,"percentile":384},"2026-01-26",0.0101,{"date":386,"score":153,"percentile":387},"2026-01-27",0.01002,{"date":389,"score":153,"percentile":390},"2026-01-28",0.01,{"date":392,"score":153,"percentile":393},"2026-01-29",0.01003,{"date":395,"score":153,"percentile":362},"2026-01-30",{"date":397,"score":153,"percentile":398},"2026-01-31",0.01016,{"date":400,"score":153,"percentile":401},"2026-02-01",0.01024,[403,410],{"source":111,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":404,"cvss_v4_0":9},{"baseScore":405,"baseSeverity":406,"vectorString":407,"impactScore":408,"exploitabilityScore":409},4.1,"MEDIUM","CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",6,1.3,{"source":105,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":411,"cvss_v4_0":9},{"baseScore":103,"baseSeverity":406,"vectorString":106,"impactScore":412,"exploitabilityScore":409},9.8,[414,425,429,439],{"ecosystem":9,"name":415,"vendor":416,"product":415,"cpe_part":417,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":418},"c-ares","c-ares_project","a",[419],{"version":420,"is_range":421,"range_type":422,"version_start":9,"version_start_type":9,"version_end":423,"version_end_type":424,"fixed_in":9},"lt1.19.1",true,"cpe","1.19.1","excluding",{"ecosystem":9,"name":415,"vendor":415,"product":415,"cpe_part":417,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":426},[427],{"version":428,"is_range":421,"range_type":111,"version_start":9,"version_start_type":9,"version_end":423,"version_end_type":424,"fixed_in":9},"\u003C 1.19.1",{"ecosystem":9,"name":430,"vendor":431,"product":432,"cpe_part":433,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":434},"debian linux","debian","debian_linux","o",[435,437],{"version":436,"is_range":99,"range_type":422,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10.0",{"version":438,"is_range":99,"range_type":422,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"11.0",{"ecosystem":9,"name":440,"vendor":441,"product":440,"cpe_part":433,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":442},"fedora","fedoraproject",[443,445],{"version":444,"is_range":99,"range_type":422,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"37",{"version":446,"is_range":99,"range_type":422,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"38"]