[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-10579":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T17:35:29.592Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":27,"aliases":28,"duplicate_of":9,"upstream":29,"downstream":30,"duplicates":37,"related":38,"reserved_at":9,"published_at":39,"modified_at":40,"state":41,"summary":42,"references_raw":51,"kevs":81,"epss":82,"epss_history":85,"metrics":207,"affected":214},"CVE-2026-10579","A flaw was found in Picketlink Federation SAML; the unsolcited response handler would accept forged assertions with no verification or validation, permitting an unauthed attacker to authenticate as any principal in any role. This could lead to information disclosure, access to restricted operations, or other flaws.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-347","Improper Verification of Cryptographic Signature","The product does not verify, or incorrectly verifies, the cryptographic signature for data.","weakness","Draft","Base",[19,23],{"id":20,"name":21,"techniques":22},"CAPEC-463","Padding Oracle Crypto Attack",[],{"id":24,"name":25,"techniques":26},"CAPEC-475","Signature Spoofing by Improper Validation",[],[],[],[],[31,33,35],{"_key":32},"RHSA-2026:53644",{"_key":34},"RHSA-2026:53645",{"_key":36},"RHSA-2026:53646",[],[],"2026-08-11T08:49:35.062Z","2026-09-17T23:26:48.574Z","Awaiting Analysis",{"cisa_kev":43,"cisa_ransomware":43,"cisa_vendor":9,"epss_severity":44,"epss_score":45,"severity":46,"severity_score":47,"severity_version":48,"severity_source":49,"severity_vector":50,"severity_status":41},false,"low",0.00322,"critical",9.8,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",[52,59,63,68,73,77],{"url":53,"sources":54,"tags":56},"https://access.redhat.com/errata/RHSA-2026:53644",[49,55],"nvd",[57,58],"Vendor Advisory","X Refsource REDHAT",{"url":60,"sources":61,"tags":62},"https://access.redhat.com/errata/RHSA-2026:53806",[49,55],[57,58],{"url":64,"sources":65,"tags":66},"https://access.redhat.com/security/cve/CVE-2026-10579",[49,55],[67,58],"VDB Entry",{"url":69,"sources":70,"tags":71},"https://bugzilla.redhat.com/show_bug.cgi?id=2480325",[49,55],[72,58],"Issue Tracking",{"url":74,"sources":75,"tags":76},"https://access.redhat.com/errata/RHSA-2026:53645",[49,55],[57,58],{"url":78,"sources":79,"tags":80},"https://access.redhat.com/errata/RHSA-2026:53646",[49,55],[57,58],[],{"date":83,"score":45,"percentile":84},"2026-09-19",0.2541,[86,90,94,97,100,103,106,109,112,115,118,121,124,127,131,134,137,140,143,146,149,152,155,158,161,164,167,170,173,176,179,182,185,188,191,194,197,200,203,206],{"date":87,"score":88,"percentile":89},"2026-08-11",0.00394,0.32262,{"date":91,"score":92,"percentile":93},"2026-08-12",0.00303,0.22778,{"date":95,"score":92,"percentile":96},"2026-08-13",0.22803,{"date":98,"score":92,"percentile":99},"2026-08-14",0.22836,{"date":101,"score":92,"percentile":102},"2026-08-15",0.2299,{"date":104,"score":92,"percentile":105},"2026-08-16",0.23002,{"date":107,"score":92,"percentile":108},"2026-08-17",0.22914,{"date":110,"score":92,"percentile":111},"2026-08-18",0.22934,{"date":113,"score":92,"percentile":114},"2026-08-19",0.23029,{"date":116,"score":92,"percentile":117},"2026-08-20",0.23072,{"date":119,"score":92,"percentile":120},"2026-08-21",0.23105,{"date":122,"score":92,"percentile":123},"2026-08-22",0.23108,{"date":125,"score":92,"percentile":126},"2026-08-23",0.23083,{"date":128,"score":129,"percentile":130},"2026-08-24",0.00299,0.21941,{"date":132,"score":129,"percentile":133},"2026-08-25",0.21958,{"date":135,"score":129,"percentile":136},"2026-08-26",0.22028,{"date":138,"score":129,"percentile":139},"2026-08-27",0.22035,{"date":141,"score":129,"percentile":142},"2026-08-28",0.22039,{"date":144,"score":129,"percentile":145},"2026-08-29",0.22063,{"date":147,"score":129,"percentile":148},"2026-08-30",0.22104,{"date":150,"score":129,"percentile":151},"2026-08-31",0.22081,{"date":153,"score":129,"percentile":154},"2026-09-01",0.22108,{"date":156,"score":129,"percentile":157},"2026-09-02",0.22133,{"date":159,"score":129,"percentile":160},"2026-09-03",0.22151,{"date":162,"score":129,"percentile":163},"2026-09-04",0.22178,{"date":165,"score":129,"percentile":166},"2026-09-05",0.222,{"date":168,"score":129,"percentile":169},"2026-09-06",0.22246,{"date":171,"score":129,"percentile":172},"2026-09-07",0.22245,{"date":174,"score":129,"percentile":175},"2026-09-08",0.22257,{"date":177,"score":129,"percentile":178},"2026-09-09",0.22383,{"date":180,"score":129,"percentile":181},"2026-09-10",0.22388,{"date":183,"score":129,"percentile":184},"2026-09-11",0.22375,{"date":186,"score":129,"percentile":187},"2026-09-12",0.22483,{"date":189,"score":129,"percentile":190},"2026-09-13",0.22441,{"date":192,"score":129,"percentile":193},"2026-09-14",0.22461,{"date":195,"score":129,"percentile":196},"2026-09-15",0.22533,{"date":198,"score":129,"percentile":199},"2026-09-16",0.22622,{"date":201,"score":129,"percentile":202},"2026-09-17",0.22671,{"date":204,"score":45,"percentile":205},"2026-09-18",0.25404,{"date":83,"score":45,"percentile":84},[208,212],{"source":49,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":209,"cvss_v4_0":9},{"baseScore":47,"baseSeverity":210,"vectorString":50,"impactScore":47,"exploitabilityScore":211},"CRITICAL",10,{"source":55,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":213,"cvss_v4_0":9},{"baseScore":47,"baseSeverity":210,"vectorString":50,"impactScore":47,"exploitabilityScore":211},[]]