[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-11481":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T11:35:27.363Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":153,"aliases":163,"duplicate_of":9,"upstream":166,"downstream":167,"duplicates":170,"related":171,"reserved_at":9,"published_at":173,"modified_at":174,"state":175,"summary":176,"references_raw":183,"kevs":240,"epss":241,"epss_history":244,"metrics":457,"affected":484},"CVE-2026-11481","A vulnerability was determined in yoanbernabeu grepai up to 0.35.0. The affected element is the function PostgresStore.LookupByContentHash of the file indexer/chunker.go of the component Postgres Embedding Cache. Executing a manipulation of the argument content_hash can lead to use of weak hash. The attack needs to be launched locally. The attack requires a high level of complexity. The exploitability is described as difficult. The exploit has been publicly disclosed and may be utilized. The pull request to fix this issue awaits acceptance.",null,[11,134],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-327","Use of a Broken or Risky Cryptographic Algorithm","The product uses a broken or risky cryptographic algorithm or protocol.","weakness","Draft","Class","High",[20,24,28,118,122,126,130],{"id":21,"name":22,"techniques":23},"CAPEC-20","Encryption Brute Forcing",[],{"id":25,"name":26,"techniques":27},"CAPEC-459","Creating a Rogue Certification Authority Certificate",[],{"id":29,"name":30,"techniques":31},"CAPEC-473","Signature Spoof",[32,109],{"id":33,"name":34,"tactics":35,"countermeasures":42},"T1036.001","Invalid Code Signature",[36,39],{"id":37,"name":38},"TA0030","Defense Evasion",{"id":40,"name":41},"TA0005","Stealth",[43,48,53,57,61,65,70,75,80,85,89,93,97,101,105],{"id":44,"name":45,"tactic":46},"D3-FA","File Analysis",{"name":47},"Detect",{"id":49,"name":50,"tactic":51},"D3-FE","File Encryption",{"name":52},"Harden",{"id":54,"name":55,"tactic":56},"D3-FIM","File Integrity Monitoring",{"name":47},{"id":58,"name":59,"tactic":60},"D3-DA","Dynamic Analysis",{"name":47},{"id":62,"name":63,"tactic":64},"D3-EFA","Emulated File Analysis",{"name":47},{"id":66,"name":67,"tactic":68},"D3-DF","Decoy File",{"name":69},"Deceive",{"id":71,"name":72,"tactic":73},"D3-FEV","File Eviction",{"name":74},"Evict",{"id":76,"name":77,"tactic":78},"D3-RF","Restore File",{"name":79},"Restore",{"id":81,"name":82,"tactic":83},"D3-CF","Content Filtering",{"name":84},"Isolate",{"id":86,"name":87,"tactic":88},"D3-LFP","Local File Permissions",{"name":84},{"id":90,"name":91,"tactic":92},"D3-RFAM","Remote File Access Mediation",{"name":84},{"id":94,"name":95,"tactic":96},"D3-CQ","Content Quarantine",{"name":84},{"id":98,"name":99,"tactic":100},"D3-CM","Content Modification",{"name":84},{"id":102,"name":103,"tactic":104},"D3-EAL","Executable Allowlisting",{"name":84},{"id":106,"name":107,"tactic":108},"D3-EDL","Executable Denylisting",{"name":84},{"id":110,"name":111,"tactics":112,"countermeasures":117},"T1553.002","Code Signing",[113,114],{"id":37,"name":38},{"id":115,"name":116},"TA0112","Defense Impairment",[],{"id":119,"name":120,"techniques":121},"CAPEC-475","Signature Spoofing by Improper Validation",[],{"id":123,"name":124,"techniques":125},"CAPEC-608","Cryptanalysis of Cellular Encryption",[],{"id":127,"name":128,"techniques":129},"CAPEC-614","Rooting SIM Cards",[],{"id":131,"name":132,"techniques":133},"CAPEC-97","Cryptanalysis",[],{"_key":135,"id":135,"name":136,"description":137,"type":15,"status":16,"abstraction":138,"likelihood_of_exploit":9,"capec":139},"CWE-328","Use of Weak Hash","The product uses an algorithm that produces a digest (output value) that does not meet security expectations for a hash function that allows an adversary to reasonably determine the original input (preimage attack), find another input that can produce the same hash (2nd preimage attack), or find multiple inputs that evaluate to the same hash (birthday attack).","Base",[140,144],{"id":141,"name":142,"techniques":143},"CAPEC-461","Web Services API Signature Forgery Leveraging Hash Function Extension Weakness",[],{"id":145,"name":146,"techniques":147},"CAPEC-68","Subvert Code-signing Facilities",[148],{"id":110,"name":111,"tactics":149,"countermeasures":152},[150,151],{"id":37,"name":38},{"id":115,"name":116},[],[154],{"_key":155,"name":156,"source":157,"url":158,"maturity":159,"reliability_score":160,"verified":161,"type":9,"platforms":162,"requires_auth":9,"exploitdb":9,"metasploit":9},"GITHUB_YOANBERNABEU_GREPAI","Grepai","github","https://github.com/yoanbernabeu/grepai/issues/247","poc",0.3,false,[],[164,165],"GHSA-q76h-p6jh-9rw3","GO-2026-6128",[],[168],{"_key":169},"OPENSUSE-SU-2026:21761-1",[],[172],{"_key":169},"2026-06-08T02:45:11.546Z","2026-06-08T13:01:50.902Z","Deferred",{"cisa_kev":161,"cisa_ransomware":161,"cisa_vendor":9,"epss_severity":177,"epss_score":178,"severity":177,"severity_score":179,"severity_version":180,"severity_source":181,"severity_vector":182,"severity_status":175},"low",0.00082,2.5,"v3.1","cve.org","CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R",[184,193,199,204,208,215,221,226,231,236],{"url":185,"sources":186,"tags":189},"https://vuldb.com/vuln/369101",[181,187,188],"nvd","osv_go",[190,191,192],"VDB Entry","Technical Description","WEB",{"url":194,"sources":195,"tags":196},"https://vuldb.com/vuln/369101/cti",[181,187,188],[197,198,192],"Signature","Permissions Required",{"url":200,"sources":201,"tags":202},"https://vuldb.com/cve/CVE-2026-11481",[181,187,188],[203,192],"Third Party Advisory",{"url":205,"sources":206,"tags":207},"https://vuldb.com/submit/833997",[181,187,188],[203,192],{"url":209,"sources":210,"tags":211},"https://github.com/yoanbernabeu/grepai/issues/249",[181,187,188],[212,213,192,214],"Exploit","Issue Tracking","REPORT",{"url":216,"sources":217,"tags":218},"https://github.com/yoanbernabeu/grepai/pull/250",[181,187,188],[213,219,192,220],"Patch","FIX",{"url":222,"sources":223,"tags":224},"https://github.com/yoanbernabeu/grepai/",[181,187],[225],"Product",{"url":227,"sources":228,"tags":229},"https://nvd.nist.gov/vuln/detail/CVE-2026-11481",[188],[230],"Advisory",{"url":232,"sources":233,"tags":234},"https://github.com/yoanbernabeu/grepai",[188],[235],"PACKAGE",{"url":237,"sources":238,"tags":239},"https://github.com/advisories/GHSA-q76h-p6jh-9rw3",[188],[230],[],{"date":242,"score":178,"percentile":243},"2026-09-19",0.00264,[245,249,251,254,256,259,261,265,268,270,273,276,279,281,283,285,288,290,292,294,296,298,300,302,305,307,309,311,314,316,319,322,324,327,329,331,334,337,339,341,343,346,348,350,352,355,357,360,362,365,368,371,373,375,377,379,381,383,386,389,391,393,396,398,400,402,404,406,408,410,412,414,416,418,420,422,424,426,429,432,434,436,439,441,443,445,447,449,452,454],{"date":246,"score":247,"percentile":248},"2026-06-08",0.00008,0.00839,{"date":250,"score":247,"percentile":248},"2026-06-09",{"date":252,"score":247,"percentile":253},"2026-06-10",0.00836,{"date":255,"score":247,"percentile":253},"2026-06-11",{"date":257,"score":247,"percentile":258},"2026-06-12",0.00832,{"date":260,"score":247,"percentile":253},"2026-06-13",{"date":262,"score":263,"percentile":264},"2026-06-14",0.00006,0.00363,{"date":266,"score":178,"percentile":267},"2026-06-15",0.00305,{"date":269,"score":178,"percentile":267},"2026-06-16",{"date":271,"score":178,"percentile":272},"2026-06-17",0.00308,{"date":274,"score":178,"percentile":275},"2026-06-18",0.00309,{"date":277,"score":178,"percentile":278},"2026-06-19",0.0031,{"date":280,"score":178,"percentile":275},"2026-06-20",{"date":282,"score":178,"percentile":275},"2026-06-21",{"date":284,"score":178,"percentile":275},"2026-06-22",{"date":286,"score":178,"percentile":287},"2026-06-23",0.00311,{"date":289,"score":178,"percentile":278},"2026-06-24",{"date":291,"score":178,"percentile":278},"2026-06-25",{"date":293,"score":178,"percentile":287},"2026-06-26",{"date":295,"score":178,"percentile":278},"2026-06-27",{"date":297,"score":178,"percentile":275},"2026-06-28",{"date":299,"score":178,"percentile":272},"2026-06-29",{"date":301,"score":178,"percentile":272},"2026-06-30",{"date":303,"score":178,"percentile":304},"2026-07-01",0.00307,{"date":306,"score":178,"percentile":272},"2026-07-02",{"date":308,"score":178,"percentile":267},"2026-07-03",{"date":310,"score":178,"percentile":267},"2026-07-04",{"date":312,"score":178,"percentile":313},"2026-07-05",0.00304,{"date":315,"score":178,"percentile":313},"2026-07-06",{"date":317,"score":178,"percentile":318},"2026-07-07",0.00297,{"date":320,"score":178,"percentile":321},"2026-07-08",0.003,{"date":323,"score":178,"percentile":321},"2026-07-09",{"date":325,"score":178,"percentile":326},"2026-07-10",0.00299,{"date":328,"score":178,"percentile":326},"2026-07-11",{"date":330,"score":178,"percentile":318},"2026-07-12",{"date":332,"score":178,"percentile":333},"2026-07-13",0.00289,{"date":335,"score":178,"percentile":336},"2026-07-14",0.00288,{"date":338,"score":178,"percentile":336},"2026-07-15",{"date":340,"score":178,"percentile":333},"2026-07-16",{"date":342,"score":178,"percentile":336},"2026-07-17",{"date":344,"score":178,"percentile":345},"2026-07-18",0.00287,{"date":347,"score":178,"percentile":345},"2026-07-19",{"date":349,"score":178,"percentile":345},"2026-07-20",{"date":351,"score":178,"percentile":345},"2026-07-21",{"date":353,"score":178,"percentile":354},"2026-07-22",0.00285,{"date":356,"score":178,"percentile":354},"2026-07-23",{"date":358,"score":178,"percentile":359},"2026-07-24",0.00282,{"date":361,"score":178,"percentile":359},"2026-07-25",{"date":363,"score":178,"percentile":364},"2026-07-26",0.0028,{"date":366,"score":178,"percentile":367},"2026-07-27",0.00279,{"date":369,"score":178,"percentile":370},"2026-07-28",0.00277,{"date":372,"score":178,"percentile":370},"2026-07-29",{"date":374,"score":178,"percentile":370},"2026-07-30",{"date":376,"score":178,"percentile":370},"2026-07-31",{"date":378,"score":178,"percentile":370},"2026-08-01",{"date":380,"score":178,"percentile":370},"2026-08-02",{"date":382,"score":178,"percentile":370},"2026-08-03",{"date":384,"score":178,"percentile":385},"2026-08-04",0.00276,{"date":387,"score":178,"percentile":388},"2026-08-05",0.00262,{"date":390,"score":178,"percentile":388},"2026-08-06",{"date":392,"score":178,"percentile":388},"2026-08-07",{"date":394,"score":178,"percentile":395},"2026-08-08",0.00261,{"date":397,"score":178,"percentile":395},"2026-08-09",{"date":399,"score":178,"percentile":395},"2026-08-10",{"date":401,"score":178,"percentile":388},"2026-08-11",{"date":403,"score":178,"percentile":388},"2026-08-12",{"date":405,"score":178,"percentile":388},"2026-08-13",{"date":407,"score":178,"percentile":388},"2026-08-14",{"date":409,"score":178,"percentile":388},"2026-08-15",{"date":411,"score":178,"percentile":395},"2026-08-16",{"date":413,"score":178,"percentile":388},"2026-08-17",{"date":415,"score":178,"percentile":388},"2026-08-18",{"date":417,"score":178,"percentile":388},"2026-08-19",{"date":419,"score":178,"percentile":395},"2026-08-20",{"date":421,"score":178,"percentile":395},"2026-08-21",{"date":423,"score":178,"percentile":388},"2026-08-22",{"date":425,"score":178,"percentile":388},"2026-08-23",{"date":427,"score":178,"percentile":428},"2026-08-24",0.00251,{"date":430,"score":178,"percentile":431},"2026-08-25",0.00247,{"date":433,"score":178,"percentile":431},"2026-08-26",{"date":435,"score":178,"percentile":431},"2026-08-27",{"date":437,"score":178,"percentile":438},"2026-08-28",0.00246,{"date":440,"score":178,"percentile":438},"2026-08-29",{"date":442,"score":178,"percentile":438},"2026-08-30",{"date":444,"score":178,"percentile":438},"2026-08-31",{"date":446,"score":178,"percentile":438},"2026-09-01",{"date":448,"score":178,"percentile":438},"2026-09-02",{"date":450,"score":178,"percentile":451},"2026-09-03",0.00243,{"date":453,"score":178,"percentile":451},"2026-09-04",{"date":455,"score":178,"percentile":456},"2026-09-05",0.00234,[458,473,481],{"source":181,"cvss_v2_0":459,"cvss_v3_0":464,"cvss_v3_1":469,"cvss_v4_0":470},{"baseScore":460,"baseSeverity":9,"vectorString":461,"impactScore":462,"exploitabilityScore":463},1,"AV:L/AC:H/Au:S/C:P/I:N/A:N/E:POC/RL:ND/RC:UR",2.9,1.5,{"baseScore":179,"baseSeverity":465,"vectorString":466,"impactScore":467,"exploitabilityScore":468},"LOW","CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R",2.3,2.6,{"baseScore":179,"baseSeverity":465,"vectorString":182,"impactScore":467,"exploitabilityScore":468},{"baseScore":471,"baseSeverity":465,"vectorString":472,"impactScore":9,"exploitabilityScore":9},2,"CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P",{"source":187,"cvss_v2_0":474,"cvss_v3_0":9,"cvss_v3_1":476,"cvss_v4_0":478},{"baseScore":460,"baseSeverity":9,"vectorString":475,"impactScore":462,"exploitabilityScore":463},"AV:L/AC:H/Au:S/C:P/I:N/A:N",{"baseScore":179,"baseSeverity":465,"vectorString":477,"impactScore":467,"exploitabilityScore":468},"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",{"baseScore":479,"baseSeverity":465,"vectorString":480,"impactScore":9,"exploitabilityScore":9},1.1,"CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",{"source":188,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":482,"cvss_v4_0":483},{"baseScore":179,"baseSeverity":9,"vectorString":477,"impactScore":467,"exploitabilityScore":468},{"baseScore":471,"baseSeverity":9,"vectorString":472,"impactScore":9,"exploitabilityScore":9},[485,500],{"ecosystem":486,"name":487,"vendor":488,"product":489,"cpe_part":9,"purl_type":490,"purl_namespace":488,"purl_name":489,"source":9,"versions":491},"Go","github.com/yoanbernabeu/grepai","github.com/yoanbernabeu","grepai","golang",[492,498],{"version":493,"is_range":494,"range_type":495,"version_start":9,"version_start_type":9,"version_end":496,"version_end_type":497,"fixed_in":9},"lte0_35_0",true,"semver","0.35.0","including",{"version":499,"is_range":494,"range_type":495,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all",{"ecosystem":9,"name":489,"vendor":501,"product":489,"cpe_part":502,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":503},"yoanbernabeu","a",[504,506,508,510,512,514,516,518,520,522,524,526,528,530,532,534,536,538,540,542,544,546,548,550,552,554,556,558,560,562,564,566,568,570,572],{"version":505,"is_range":161,"range_type":181,"version_start":505,"version_start_type":497,"version_end":505,"version_end_type":497,"fixed_in":9},"0.1",{"version":507,"is_range":161,"range_type":181,"version_start":507,"version_start_type":497,"version_end":507,"version_end_type":497,"fixed_in":9},"0.2",{"version":509,"is_range":161,"range_type":181,"version_start":509,"version_start_type":497,"version_end":509,"version_end_type":497,"fixed_in":9},"0.3",{"version":511,"is_range":161,"range_type":181,"version_start":511,"version_start_type":497,"version_end":511,"version_end_type":497,"fixed_in":9},"0.4",{"version":513,"is_range":161,"range_type":181,"version_start":513,"version_start_type":497,"version_end":513,"version_end_type":497,"fixed_in":9},"0.5",{"version":515,"is_range":161,"range_type":181,"version_start":515,"version_start_type":497,"version_end":515,"version_end_type":497,"fixed_in":9},"0.6",{"version":517,"is_range":161,"range_type":181,"version_start":517,"version_start_type":497,"version_end":517,"version_end_type":497,"fixed_in":9},"0.7",{"version":519,"is_range":161,"range_type":181,"version_start":519,"version_start_type":497,"version_end":519,"version_end_type":497,"fixed_in":9},"0.8",{"version":521,"is_range":161,"range_type":181,"version_start":521,"version_start_type":497,"version_end":521,"version_end_type":497,"fixed_in":9},"0.9",{"version":523,"is_range":161,"range_type":181,"version_start":523,"version_start_type":497,"version_end":523,"version_end_type":497,"fixed_in":9},"0.10",{"version":525,"is_range":161,"range_type":181,"version_start":525,"version_start_type":497,"version_end":525,"version_end_type":497,"fixed_in":9},"0.11",{"version":527,"is_range":161,"range_type":181,"version_start":527,"version_start_type":497,"version_end":527,"version_end_type":497,"fixed_in":9},"0.12",{"version":529,"is_range":161,"range_type":181,"version_start":529,"version_start_type":497,"version_end":529,"version_end_type":497,"fixed_in":9},"0.13",{"version":531,"is_range":161,"range_type":181,"version_start":531,"version_start_type":497,"version_end":531,"version_end_type":497,"fixed_in":9},"0.14",{"version":533,"is_range":161,"range_type":181,"version_start":533,"version_start_type":497,"version_end":533,"version_end_type":497,"fixed_in":9},"0.15",{"version":535,"is_range":161,"range_type":181,"version_start":535,"version_start_type":497,"version_end":535,"version_end_type":497,"fixed_in":9},"0.16",{"version":537,"is_range":161,"range_type":181,"version_start":537,"version_start_type":497,"version_end":537,"version_end_type":497,"fixed_in":9},"0.17",{"version":539,"is_range":161,"range_type":181,"version_start":539,"version_start_type":497,"version_end":539,"version_end_type":497,"fixed_in":9},"0.18",{"version":541,"is_range":161,"range_type":181,"version_start":541,"version_start_type":497,"version_end":541,"version_end_type":497,"fixed_in":9},"0.19",{"version":543,"is_range":161,"range_type":181,"version_start":543,"version_start_type":497,"version_end":543,"version_end_type":497,"fixed_in":9},"0.20",{"version":545,"is_range":161,"range_type":181,"version_start":545,"version_start_type":497,"version_end":545,"version_end_type":497,"fixed_in":9},"0.21",{"version":547,"is_range":161,"range_type":181,"version_start":547,"version_start_type":497,"version_end":547,"version_end_type":497,"fixed_in":9},"0.22",{"version":549,"is_range":161,"range_type":181,"version_start":549,"version_start_type":497,"version_end":549,"version_end_type":497,"fixed_in":9},"0.23",{"version":551,"is_range":161,"range_type":181,"version_start":551,"version_start_type":497,"version_end":551,"version_end_type":497,"fixed_in":9},"0.24",{"version":553,"is_range":161,"range_type":181,"version_start":553,"version_start_type":497,"version_end":553,"version_end_type":497,"fixed_in":9},"0.25",{"version":555,"is_range":161,"range_type":181,"version_start":555,"version_start_type":497,"version_end":555,"version_end_type":497,"fixed_in":9},"0.26",{"version":557,"is_range":161,"range_type":181,"version_start":557,"version_start_type":497,"version_end":557,"version_end_type":497,"fixed_in":9},"0.27",{"version":559,"is_range":161,"range_type":181,"version_start":559,"version_start_type":497,"version_end":559,"version_end_type":497,"fixed_in":9},"0.28",{"version":561,"is_range":161,"range_type":181,"version_start":561,"version_start_type":497,"version_end":561,"version_end_type":497,"fixed_in":9},"0.29",{"version":563,"is_range":161,"range_type":181,"version_start":563,"version_start_type":497,"version_end":563,"version_end_type":497,"fixed_in":9},"0.30",{"version":565,"is_range":161,"range_type":181,"version_start":565,"version_start_type":497,"version_end":565,"version_end_type":497,"fixed_in":9},"0.31",{"version":567,"is_range":161,"range_type":181,"version_start":567,"version_start_type":497,"version_end":567,"version_end_type":497,"fixed_in":9},"0.32",{"version":569,"is_range":161,"range_type":181,"version_start":569,"version_start_type":497,"version_end":569,"version_end_type":497,"fixed_in":9},"0.33",{"version":571,"is_range":161,"range_type":181,"version_start":571,"version_start_type":497,"version_end":571,"version_end_type":497,"fixed_in":9},"0.34",{"version":496,"is_range":161,"range_type":181,"version_start":496,"version_start_type":497,"version_end":496,"version_end_type":497,"fixed_in":9}]