[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-11479":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T11:35:27.363Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":153,"aliases":163,"duplicate_of":9,"upstream":166,"downstream":167,"duplicates":170,"related":171,"reserved_at":9,"published_at":173,"modified_at":174,"state":175,"summary":176,"references_raw":184,"kevs":239,"epss":240,"epss_history":243,"metrics":501,"affected":528},"CVE-2026-11479","A vulnerability has been found in yoanbernabeu grepai 0.35.0. This issue affects some unknown processing of the file indexer/chunker.go of the component Qdrant Backend. Such manipulation leads to use of weak hash. The attack may be performed from remote. Attacks of this nature are highly complex. The exploitability is assessed as difficult. The exploit has been disclosed to the public and may be used. The pull request to fix this issue awaits acceptance.",null,[11,134],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-327","Use of a Broken or Risky Cryptographic Algorithm","The product uses a broken or risky cryptographic algorithm or protocol.","weakness","Draft","Class","High",[20,24,28,118,122,126,130],{"id":21,"name":22,"techniques":23},"CAPEC-20","Encryption Brute Forcing",[],{"id":25,"name":26,"techniques":27},"CAPEC-459","Creating a Rogue Certification Authority Certificate",[],{"id":29,"name":30,"techniques":31},"CAPEC-473","Signature Spoof",[32,109],{"id":33,"name":34,"tactics":35,"countermeasures":42},"T1036.001","Invalid Code Signature",[36,39],{"id":37,"name":38},"TA0030","Defense Evasion",{"id":40,"name":41},"TA0005","Stealth",[43,48,53,57,61,65,70,75,80,85,89,93,97,101,105],{"id":44,"name":45,"tactic":46},"D3-FA","File Analysis",{"name":47},"Detect",{"id":49,"name":50,"tactic":51},"D3-FE","File Encryption",{"name":52},"Harden",{"id":54,"name":55,"tactic":56},"D3-FIM","File Integrity Monitoring",{"name":47},{"id":58,"name":59,"tactic":60},"D3-DA","Dynamic Analysis",{"name":47},{"id":62,"name":63,"tactic":64},"D3-EFA","Emulated File Analysis",{"name":47},{"id":66,"name":67,"tactic":68},"D3-DF","Decoy File",{"name":69},"Deceive",{"id":71,"name":72,"tactic":73},"D3-FEV","File Eviction",{"name":74},"Evict",{"id":76,"name":77,"tactic":78},"D3-RF","Restore File",{"name":79},"Restore",{"id":81,"name":82,"tactic":83},"D3-CF","Content Filtering",{"name":84},"Isolate",{"id":86,"name":87,"tactic":88},"D3-LFP","Local File Permissions",{"name":84},{"id":90,"name":91,"tactic":92},"D3-RFAM","Remote File Access Mediation",{"name":84},{"id":94,"name":95,"tactic":96},"D3-CQ","Content Quarantine",{"name":84},{"id":98,"name":99,"tactic":100},"D3-CM","Content Modification",{"name":84},{"id":102,"name":103,"tactic":104},"D3-EAL","Executable Allowlisting",{"name":84},{"id":106,"name":107,"tactic":108},"D3-EDL","Executable Denylisting",{"name":84},{"id":110,"name":111,"tactics":112,"countermeasures":117},"T1553.002","Code Signing",[113,114],{"id":37,"name":38},{"id":115,"name":116},"TA0112","Defense Impairment",[],{"id":119,"name":120,"techniques":121},"CAPEC-475","Signature Spoofing by Improper Validation",[],{"id":123,"name":124,"techniques":125},"CAPEC-608","Cryptanalysis of Cellular Encryption",[],{"id":127,"name":128,"techniques":129},"CAPEC-614","Rooting SIM Cards",[],{"id":131,"name":132,"techniques":133},"CAPEC-97","Cryptanalysis",[],{"_key":135,"id":135,"name":136,"description":137,"type":15,"status":16,"abstraction":138,"likelihood_of_exploit":9,"capec":139},"CWE-328","Use of Weak Hash","The product uses an algorithm that produces a digest (output value) that does not meet security expectations for a hash function that allows an adversary to reasonably determine the original input (preimage attack), find another input that can produce the same hash (2nd preimage attack), or find multiple inputs that evaluate to the same hash (birthday attack).","Base",[140,144],{"id":141,"name":142,"techniques":143},"CAPEC-461","Web Services API Signature Forgery Leveraging Hash Function Extension Weakness",[],{"id":145,"name":146,"techniques":147},"CAPEC-68","Subvert Code-signing Facilities",[148],{"id":110,"name":111,"tactics":149,"countermeasures":152},[150,151],{"id":37,"name":38},{"id":115,"name":116},[],[154],{"_key":155,"name":156,"source":157,"url":158,"maturity":159,"reliability_score":160,"verified":161,"type":9,"platforms":162,"requires_auth":9,"exploitdb":9,"metasploit":9},"GITHUB_YOANBERNABEU_GREPAI","Grepai","github","https://github.com/yoanbernabeu/grepai/issues/247","poc",0.3,false,[],[164,165],"GHSA-6h35-9p2w-3j3r","GO-2026-6125",[],[168],{"_key":169},"OPENSUSE-SU-2026:21761-1",[],[172],{"_key":169},"2026-06-08T02:15:09.333Z","2026-06-09T14:46:40.423Z","Deferred",{"cisa_kev":161,"cisa_ransomware":161,"cisa_vendor":9,"epss_severity":177,"epss_score":178,"severity":179,"severity_score":180,"severity_version":181,"severity_source":182,"severity_vector":183,"severity_status":175},"low",0.0016,"medium",4.2,"v3.1","cve.org","CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R",[185,193,199,204,208,214,220,225,230,235],{"url":186,"sources":187,"tags":190},"https://vuldb.com/vuln/369099",[182,188,189],"nvd","osv_go",[191,192],"VDB Entry","WEB",{"url":194,"sources":195,"tags":196},"https://vuldb.com/vuln/369099/cti",[182,188,189],[197,198,192],"Signature","Permissions Required",{"url":200,"sources":201,"tags":202},"https://vuldb.com/cve/CVE-2026-11479",[182,188,189],[203,192],"Third Party Advisory",{"url":205,"sources":206,"tags":207},"https://vuldb.com/submit/833971",[182,188,189],[203,192],{"url":158,"sources":209,"tags":210},[182,188,189],[211,212,192,213],"Exploit","Issue Tracking","REPORT",{"url":215,"sources":216,"tags":217},"https://github.com/yoanbernabeu/grepai/pull/248",[182,188,189],[212,218,192,219],"Patch","FIX",{"url":221,"sources":222,"tags":223},"https://github.com/yoanbernabeu/grepai/",[182,188],[224],"Product",{"url":226,"sources":227,"tags":228},"https://nvd.nist.gov/vuln/detail/CVE-2026-11479",[189],[229],"Advisory",{"url":231,"sources":232,"tags":233},"https://github.com/yoanbernabeu/grepai",[189],[234],"PACKAGE",{"url":236,"sources":237,"tags":238},"https://github.com/advisories/GHSA-6h35-9p2w-3j3r",[189],[229],[],{"date":241,"score":178,"percentile":242},"2026-09-19",0.05649,[244,248,251,254,257,260,263,267,270,273,275,278,281,284,287,290,293,296,299,302,305,308,311,314,317,319,322,325,328,331,334,337,339,341,344,347,349,352,355,358,361,363,366,369,372,375,378,381,384,387,390,393,396,399,402,405,408,411,414,417,420,422,425,428,430,432,434,436,439,442,445,448,451,454,456,459,461,464,467,470,473,476,479,482,485,488,491,493,495,498],{"date":245,"score":246,"percentile":247},"2026-06-08",0.00031,0.09474,{"date":249,"score":246,"percentile":250},"2026-06-09",0.09503,{"date":252,"score":246,"percentile":253},"2026-06-10",0.09546,{"date":255,"score":246,"percentile":256},"2026-06-11",0.09588,{"date":258,"score":246,"percentile":259},"2026-06-12",0.09631,{"date":261,"score":246,"percentile":262},"2026-06-13",0.09629,{"date":264,"score":265,"percentile":266},"2026-06-14",0.00021,0.06214,{"date":268,"score":178,"percentile":269},"2026-06-15",0.05544,{"date":271,"score":178,"percentile":272},"2026-06-16",0.05547,{"date":274,"score":178,"percentile":272},"2026-06-17",{"date":276,"score":178,"percentile":277},"2026-06-18",0.05546,{"date":279,"score":178,"percentile":280},"2026-06-19",0.05538,{"date":282,"score":178,"percentile":283},"2026-06-20",0.05528,{"date":285,"score":178,"percentile":286},"2026-06-21",0.05519,{"date":288,"score":178,"percentile":289},"2026-06-22",0.05507,{"date":291,"score":178,"percentile":292},"2026-06-23",0.0551,{"date":294,"score":178,"percentile":295},"2026-06-24",0.05517,{"date":297,"score":178,"percentile":298},"2026-06-25",0.05537,{"date":300,"score":178,"percentile":301},"2026-06-26",0.05566,{"date":303,"score":178,"percentile":304},"2026-06-27",0.05576,{"date":306,"score":178,"percentile":307},"2026-06-28",0.05596,{"date":309,"score":178,"percentile":310},"2026-06-29",0.05588,{"date":312,"score":178,"percentile":313},"2026-06-30",0.05579,{"date":315,"score":178,"percentile":316},"2026-07-01",0.05577,{"date":318,"score":178,"percentile":301},"2026-07-02",{"date":320,"score":178,"percentile":321},"2026-07-03",0.05556,{"date":323,"score":178,"percentile":324},"2026-07-04",0.05559,{"date":326,"score":178,"percentile":327},"2026-07-05",0.0556,{"date":329,"score":178,"percentile":330},"2026-07-06",0.05564,{"date":332,"score":178,"percentile":333},"2026-07-07",0.05562,{"date":335,"score":178,"percentile":336},"2026-07-08",0.05557,{"date":338,"score":178,"percentile":313},"2026-07-09",{"date":340,"score":178,"percentile":310},"2026-07-10",{"date":342,"score":178,"percentile":343},"2026-07-11",0.05584,{"date":345,"score":178,"percentile":346},"2026-07-12",0.0558,{"date":348,"score":178,"percentile":346},"2026-07-13",{"date":350,"score":178,"percentile":351},"2026-07-14",0.05578,{"date":353,"score":178,"percentile":354},"2026-07-15",0.05582,{"date":356,"score":178,"percentile":357},"2026-07-16",0.0559,{"date":359,"score":178,"percentile":360},"2026-07-17",0.05592,{"date":362,"score":178,"percentile":360},"2026-07-18",{"date":364,"score":178,"percentile":365},"2026-07-19",0.05586,{"date":367,"score":178,"percentile":368},"2026-07-20",0.05589,{"date":370,"score":178,"percentile":371},"2026-07-21",0.05618,{"date":373,"score":178,"percentile":374},"2026-07-22",0.05646,{"date":376,"score":178,"percentile":377},"2026-07-23",0.05608,{"date":379,"score":178,"percentile":380},"2026-07-24",0.05607,{"date":382,"score":178,"percentile":383},"2026-07-25",0.05603,{"date":385,"score":178,"percentile":386},"2026-07-26",0.05605,{"date":388,"score":178,"percentile":389},"2026-07-27",0.05616,{"date":391,"score":178,"percentile":392},"2026-07-28",0.05633,{"date":394,"score":178,"percentile":395},"2026-07-29",0.05629,{"date":397,"score":178,"percentile":398},"2026-07-30",0.05652,{"date":400,"score":178,"percentile":401},"2026-07-31",0.05667,{"date":403,"score":178,"percentile":404},"2026-08-01",0.05659,{"date":406,"score":178,"percentile":407},"2026-08-02",0.05661,{"date":409,"score":178,"percentile":410},"2026-08-03",0.05669,{"date":412,"score":178,"percentile":413},"2026-08-04",0.05662,{"date":415,"score":178,"percentile":416},"2026-08-05",0.05658,{"date":418,"score":178,"percentile":419},"2026-08-06",0.05651,{"date":421,"score":178,"percentile":374},"2026-08-07",{"date":423,"score":178,"percentile":424},"2026-08-08",0.05643,{"date":426,"score":178,"percentile":427},"2026-08-09",0.05641,{"date":429,"score":178,"percentile":374},"2026-08-10",{"date":431,"score":178,"percentile":374},"2026-08-11",{"date":433,"score":178,"percentile":413},"2026-08-12",{"date":435,"score":178,"percentile":401},"2026-08-13",{"date":437,"score":178,"percentile":438},"2026-08-14",0.05698,{"date":440,"score":178,"percentile":441},"2026-08-15",0.05695,{"date":443,"score":178,"percentile":444},"2026-08-16",0.0569,{"date":446,"score":178,"percentile":447},"2026-08-17",0.05711,{"date":449,"score":178,"percentile":450},"2026-08-18",0.05697,{"date":452,"score":178,"percentile":453},"2026-08-19",0.05719,{"date":455,"score":178,"percentile":453},"2026-08-20",{"date":457,"score":178,"percentile":458},"2026-08-21",0.05715,{"date":460,"score":178,"percentile":458},"2026-08-22",{"date":462,"score":178,"percentile":463},"2026-08-23",0.05685,{"date":465,"score":178,"percentile":466},"2026-08-24",0.05381,{"date":468,"score":178,"percentile":469},"2026-08-25",0.05403,{"date":471,"score":178,"percentile":472},"2026-08-26",0.05412,{"date":474,"score":178,"percentile":475},"2026-08-27",0.05486,{"date":477,"score":178,"percentile":478},"2026-08-28",0.05475,{"date":480,"score":178,"percentile":481},"2026-08-29",0.05482,{"date":483,"score":178,"percentile":484},"2026-08-30",0.05497,{"date":486,"score":178,"percentile":487},"2026-08-31",0.05498,{"date":489,"score":178,"percentile":490},"2026-09-01",0.0549,{"date":492,"score":178,"percentile":487},"2026-09-02",{"date":494,"score":178,"percentile":475},"2026-09-03",{"date":496,"score":178,"percentile":497},"2026-09-04",0.05489,{"date":499,"score":178,"percentile":500},"2026-09-05",0.05493,[502,517,525],{"source":182,"cvss_v2_0":503,"cvss_v3_0":508,"cvss_v3_1":512,"cvss_v4_0":513},{"baseScore":504,"baseSeverity":9,"vectorString":505,"impactScore":506,"exploitabilityScore":507},3.6,"AV:N/AC:H/Au:S/C:N/I:P/A:P/E:POC/RL:ND/RC:UR",4.9,3.9,{"baseScore":180,"baseSeverity":509,"vectorString":510,"impactScore":180,"exploitabilityScore":511},"MEDIUM","CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R",4.1,{"baseScore":180,"baseSeverity":509,"vectorString":183,"impactScore":180,"exploitabilityScore":511},{"baseScore":514,"baseSeverity":515,"vectorString":516,"impactScore":9,"exploitabilityScore":9},2.3,"LOW","CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",{"source":188,"cvss_v2_0":518,"cvss_v3_0":9,"cvss_v3_1":520,"cvss_v4_0":522},{"baseScore":504,"baseSeverity":9,"vectorString":519,"impactScore":506,"exploitabilityScore":507},"AV:N/AC:H/Au:S/C:N/I:P/A:P",{"baseScore":180,"baseSeverity":509,"vectorString":521,"impactScore":180,"exploitabilityScore":511},"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L",{"baseScore":523,"baseSeverity":515,"vectorString":524,"impactScore":9,"exploitabilityScore":9},1.3,"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",{"source":189,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":526,"cvss_v4_0":527},{"baseScore":180,"baseSeverity":9,"vectorString":521,"impactScore":180,"exploitabilityScore":511},{"baseScore":514,"baseSeverity":9,"vectorString":516,"impactScore":9,"exploitabilityScore":9},[529,544],{"ecosystem":530,"name":531,"vendor":532,"product":533,"cpe_part":9,"purl_type":534,"purl_namespace":532,"purl_name":533,"source":9,"versions":535},"Go","github.com/yoanbernabeu/grepai","github.com/yoanbernabeu","grepai","golang",[536,542],{"version":537,"is_range":538,"range_type":539,"version_start":9,"version_start_type":9,"version_end":540,"version_end_type":541,"fixed_in":9},"lte0_35_0",true,"semver","0.35.0","including",{"version":543,"is_range":538,"range_type":539,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all",{"ecosystem":9,"name":533,"vendor":545,"product":533,"cpe_part":546,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":547},"yoanbernabeu","a",[548],{"version":540,"is_range":161,"range_type":182,"version_start":540,"version_start_type":541,"version_end":540,"version_end_type":541,"fixed_in":9}]