{"schemaVersion":3,"id":"CVE-2024-1681","aliases":["GHSA-84pr-m4jr-85g5","PYSEC-2024-271","UBUNTU-CVE-2024-1681","DEBIAN-CVE-2024-1681","CGA-2c9q-4483-h452","CGA-4jrh-955p-5382","CGA-64rq-5663-gjg4","CGA-79qh-mh4m-4mr5","CGA-8hp3-76j8-8w8g","CGA-c9vx-r2m2-7ggv","CGA-j3hg-92xw-gfhx","CGA-j3rh-pjrv-26v2","CGA-jxmx-wgmj-q7g3","CGA-mfj3-pf55-g7j3","CGA-mhf2-x393-52jp","CGA-r4rv-6fcp-2h5r","CGA-rjf4-9m6c-wwxp","CGA-vxfj-vmvg-v7r7","CGA-wvrq-whfq-4pg6","CGA-x63w-wjqm-53c6","openSUSE-SU-2024:14293-1"],"status":"published","duplicateOf":null,"title":null,"description":"corydolphin/flask-cors is vulnerable to log injection when the log level is set to debug. An attacker can inject fake log entries into the log file by sending a specially crafted GET request containing a CRLF sequence in the request path. This vulnerability allows attackers to corrupt log files, potentially covering tracks of other attacks, confusing log post-processing tools, and forging log entries. The issue is due to improper output neutralization for logs.","dates":{"published":"2024-04-19T19:37:27.998Z","modified":"2025-11-03T19:29:18.706Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.3,"severity":"medium","version":"3.0","versionLabel":"v3.0","source":"CVE.org","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"CVE.org","score":5.3,"severity":"medium","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Pypi","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","exploitability":10,"impact":2.3,"computed":true},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Ubuntu","score":5.3,"severity":"medium","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.0","versionLabel":"v3.0","source":"NVD","score":5.3,"severity":"medium","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00579,"percentile":0.46616,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00579},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00579,"percentile":0.46616}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00579,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00579,"percentile":0.46616}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_34606A3560E8D67B","name":"Exploit Reference (huntr.com)","source":"reference","url":"https://huntr.com/bounties/25a7a0ba-9fa2-4777-acb6-03e5539bb644","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-117","name":"Improper Output Neutralization for Logs","description":"The product constructs a log message from external input, but it does not neutralize or incorrectly neutralizes special elements when the message is written to a log file.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/117.html"}],"affected":[{"vendor":"chainguard","product":"kubeflow-jupyter-web-app","name":"kubeflow-jupyter-web-app","label":"kubeflow-jupyter-web-app","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-jupyter-web-app","purlType":"apk","versions":[{"text":"< 1.8.0-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.8.0-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-volumes-web-app","name":"kubeflow-volumes-web-app","label":"kubeflow-volumes-web-app","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-volumes-web-app","purlType":"apk","versions":[{"text":"< 1.8.0-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.8.0-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"py3-flask-cors","name":"py3-flask-cors","label":"py3-flask-cors","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3-flask-cors","purlType":"apk","versions":[{"text":"< 4.0.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.1-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"py3-supported-flask-cors","name":"py3-supported-flask-cors","label":"py3-supported-flask-cors","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3-supported-flask-cors","purlType":"apk","versions":[{"text":"< 4.0.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.1-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"py3.10-flask-cors","name":"py3.10-flask-cors","label":"py3.10-flask-cors","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3.10-flask-cors","purlType":"apk","versions":[{"text":"< 4.0.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.1-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"py3.11-flask-cors","name":"py3.11-flask-cors","label":"py3.11-flask-cors","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3.11-flask-cors","purlType":"apk","versions":[{"text":"< 4.0.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.1-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"py3.12-flask-cors","name":"py3.12-flask-cors","label":"py3.12-flask-cors","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3.12-flask-cors","purlType":"apk","versions":[{"text":"< 4.0.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.1-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"py3.13-flask-cors","name":"py3.13-flask-cors","label":"py3.13-flask-cors","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3.13-flask-cors","purlType":"apk","versions":[{"text":"< 4.0.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.1-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-jupyter-web-app","name":"kubeflow-jupyter-web-app","label":"kubeflow-jupyter-web-app","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-jupyter-web-app","purlType":"apk","versions":[{"text":"< 1.8.0-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.8.0-r7","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-volumes-web-app","name":"kubeflow-volumes-web-app","label":"kubeflow-volumes-web-app","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-volumes-web-app","purlType":"apk","versions":[{"text":"< 1.8.0-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.8.0-r6","eol":null,"hubHref":null},{"vendor":"wolfi","product":"py3-flask-cors","name":"py3-flask-cors","label":"py3-flask-cors","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/py3-flask-cors","purlType":"apk","versions":[{"text":"< 4.0.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.1-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"py3-supported-flask-cors","name":"py3-supported-flask-cors","label":"py3-supported-flask-cors","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/py3-supported-flask-cors","purlType":"apk","versions":[{"text":"< 4.0.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.1-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"py3.10-flask-cors","name":"py3.10-flask-cors","label":"py3.10-flask-cors","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/py3.10-flask-cors","purlType":"apk","versions":[{"text":"< 4.0.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.1-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"py3.11-flask-cors","name":"py3.11-flask-cors","label":"py3.11-flask-cors","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/py3.11-flask-cors","purlType":"apk","versions":[{"text":"< 4.0.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.1-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"py3.12-flask-cors","name":"py3.12-flask-cors","label":"py3.12-flask-cors","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/py3.12-flask-cors","purlType":"apk","versions":[{"text":"< 4.0.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.1-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"py3.13-flask-cors","name":"py3.13-flask-cors","label":"py3.13-flask-cors","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/py3.13-flask-cors","purlType":"apk","versions":[{"text":"< 4.0.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.1-r0","eol":null,"hubHref":null},{"vendor":"corydolphin","product":"corydolphin/flask-cors","name":"corydolphin/flask-cors","label":"corydolphin/flask-cors","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ unspecified, ≤ latest","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ unspecified, ≤ latest","eol":null,"hubHref":"/vendor/corydolphin/corydolphinflask-cors"},{"vendor":"corydolphin","product":"flask-cors","name":"flask-cors","label":"flask-cors","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"4.0.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"4.0.0","eol":null,"hubHref":"/vendor/corydolphin/flask-cors"},{"vendor":"debian","product":"python-flask-cors","name":"python-flask-cors","label":"python-flask-cors","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/python-flask-cors","purlType":"deb","versions":[{"text":"< 3.0.10-2+deb12u1","noFixRecorded":false,"fixedIn":null},{"text":"< 4.0.1-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0.10-2+deb12u1 | < 4.0.1-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"python-flask-cors","name":"python-flask-cors","label":"python-flask-cors","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/python-flask-cors","purlType":"deb","versions":[{"text":"< 3.0.8-2ubuntu0.1+esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 3.0.9-2ubuntu0.1","noFixRecorded":false,"fixedIn":null},{"text":"< 4.0.0-1ubuntu0.1~esm1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0.8-2ubuntu0.1+esm1 | < 3.0.9-2ubuntu0.1 | < 4.0.0-1ubuntu0.1~esm1","eol":null,"hubHref":null},{"vendor":"PyPI","product":"flask-cors","name":"flask-cors","label":"flask-cors","ecosystem":"PyPI","cpePart":null,"purl":"pkg:pypi/flask-cors","purlType":"pypi","versions":[{"text":"< 4.0.1","noFixRecorded":false,"fixedIn":null},{"text":"≤ 4.0.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.1 | ≤ 4.0.0","eol":null,"hubHref":null},{"vendor":"opensuse","product":"python-Flask-Cors&distro=openSUSE Tumbleweed","name":"python-Flask-Cors","label":"python-Flask-Cors&distro=openSUSE Tumbleweed","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/python-Flask-Cors&distro=openSUSE Tumbleweed","purlType":"rpm","versions":[{"text":"< 4.0.1-1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.0.1-1.1","eol":null,"hubHref":null}],"affectedCount":22,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://huntr.com/bounties/25a7a0ba-9fa2-4777-acb6-03e5539bb644","label":"huntr.com/bounties/25a7a0ba-9fa2-4777-acb6-03e5539bb644","hostname":"huntr.com","tags":["WEB","EVIDENCE","REPORT","Exploit","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/05/msg00049.html","label":"lists.debian.org/debian-lts-announce/2025/05/msg00049.html","hostname":"lists.debian.org","tags":["WEB"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1681","label":"nvd.nist.gov/vuln/detail/CVE-2024-1681","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/corydolphin/flask-cors","label":"github.com/corydolphin/flask-cors","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://github.com/corydolphin/flask-cors/blob/40acc8092332dfed4bb54d7a4f89a6d479466de7/flask_cors/extension.py#L194","label":"github.com/corydolphin/…","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/flask-cors/PYSEC-2024-271.yaml","label":"github.com/pypa/advisory-database/tree/main/vulns/flask-cors/PYSEC-2024-271.yaml","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/advisories/GHSA-84pr-m4jr-85g5","label":"github.com/advisories/GHSA-84pr-m4jr-85g5","hostname":"github.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-1681","label":"ubuntu.com/security/CVE-2024-1681","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-1681","label":"www.cve.org/CVERecord?id=CVE-2024-1681","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-7612-1","label":"ubuntu.com/security/notices/USN-7612-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-1681","label":"security-tracker.debian.org/tracker/CVE-2024-1681","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2024-1681","label":"www.suse.com/security/cve/CVE-2024-1681","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":["DLA-4197-1","MGASA-2025-0286","OPENSUSE-SU-2026:11990-1","USN-7612-1"],"duplicates":[],"related":["CGA-29FC-3HFX-348C","CGA-4M77-HCH5-975Q","CGA-JR52-5M9J-GVWW","CGA-VQR9-GW75-6V3W","OPENSUSE-SU-2026:11990-1","USN-7612-1"]},"timeline":[{"kind":"published","date":"2024-04-19T19:37:27.998Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-11-03T19:29:18.706Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":31,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T13:07:13.943Z","stale":false,"partial":false}}