[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-14456":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T11:35:27.363Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":406,"aliases":407,"duplicate_of":9,"upstream":438,"downstream":442,"duplicates":460,"related":461,"reserved_at":9,"published_at":469,"modified_at":470,"state":471,"summary":472,"references_raw":481,"kevs":596,"epss":597,"epss_history":600,"metrics":712,"affected":732},"CVE-2026-14456","Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes\nvalid QUIC Initial packets for unknown destination connection IDs, it\ncan allocate and queue new incoming channels without enforcing any limit.\n\nImpact summary: A remote peer that can make many Initial packets reach the\nserver listener faster than the application accepts connections, can cause the\nmemory allocated to store the per-channel state to grow without any limits,\npotentially making the QUIC listener unavailable and causing Denial of Service.\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: The function that handles inbound QUIC packets uses\nConnection-Id from the packet header to find an existing connection\n(QUIC channel). If no existing connection is found and the packet\ntype is INITIAL, the function treats the packet as a new connection. It\nallocates a new channel object and inserts it into a queue where it\nwaits to be accepted by the local application with SSL_accept(3ossl).\nThe memory occupied by these initial channel objects may grow\nwithout bounds if the application is not able to call SSL_accept()\nfrequently enough to serve these inbound connection requests.\n\nThe issue is present since OpenSSL 3.5 when the QUIC server implementation\nwas added.\n\nThe fix introduces a limit for pending connections. The default limit is set\nto 256 pending connections (waiting to be accepted by the local application).\nApplications may change the default by calling SSL_set_value_uint(3ossl).\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-770","Allocation of Resources Without Limits or Throttling","The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.","weakness","Incomplete","Base","High",[20,106,116,120,124,128,132,136,168,230,234,238,268,298,330,334,338,342,346,350],{"id":21,"name":22,"techniques":23},"CAPEC-125","Flooding",[24,78],{"id":25,"name":26,"tactics":27,"countermeasures":31},"T1498.001","Direct Network Flood",[28],{"id":29,"name":30},"TA0105","Impact",[32,37,42,46,50,54,58,62,66,70,74],{"id":33,"name":34,"tactic":35},"D3-APCA","Application Protocol Command Analysis",{"name":36},"Detect",{"id":38,"name":39,"tactic":40},"D3-NTF","Network Traffic Filtering",{"name":41},"Isolate",{"id":43,"name":44,"tactic":45},"D3-ITF","Inbound Traffic Filtering",{"name":41},{"id":47,"name":48,"tactic":49},"D3-ISVA","Inbound Session Volume Analysis",{"name":36},{"id":51,"name":52,"tactic":53},"D3-RTSD","Remote Terminal Session Detection",{"name":36},{"id":55,"name":56,"tactic":57},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":36},{"id":59,"name":60,"tactic":61},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":36},{"id":63,"name":64,"tactic":65},"D3-NTCD","Network Traffic Community Deviation",{"name":36},{"id":67,"name":68,"tactic":69},"D3-CSPP","Client-server Payload Profiling",{"name":36},{"id":71,"name":72,"tactic":73},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":36},{"id":75,"name":76,"tactic":77},"D3-NTSA","Network Traffic Signature Analysis",{"name":36},{"id":79,"name":80,"tactics":81,"countermeasures":83},"T1499","Endpoint Denial of Service",[82],{"id":29,"name":30},[84,86,88,90,92,94,96,98,100,102,104],{"id":47,"name":48,"tactic":85},{"name":36},{"id":59,"name":60,"tactic":87},{"name":36},{"id":33,"name":34,"tactic":89},{"name":36},{"id":63,"name":64,"tactic":91},{"name":36},{"id":51,"name":52,"tactic":93},{"name":36},{"id":67,"name":68,"tactic":95},{"name":36},{"id":38,"name":39,"tactic":97},{"name":41},{"id":43,"name":44,"tactic":99},{"name":41},{"id":55,"name":56,"tactic":101},{"name":36},{"id":71,"name":72,"tactic":103},{"name":36},{"id":75,"name":76,"tactic":105},{"name":36},{"id":107,"name":108,"techniques":109},"CAPEC-130","Excessive Allocation",[110],{"id":111,"name":112,"tactics":113,"countermeasures":115},"T1499.003","Application Exhaustion Flood",[114],{"id":29,"name":30},[],{"id":117,"name":118,"techniques":119},"CAPEC-147","XML Ping of the Death",[],{"id":121,"name":122,"techniques":123},"CAPEC-197","Exponential Data Expansion",[],{"id":125,"name":126,"techniques":127},"CAPEC-229","Serialized Data Parameter Blowup",[],{"id":129,"name":130,"techniques":131},"CAPEC-230","Serialized Data with Nested Payloads",[],{"id":133,"name":134,"techniques":135},"CAPEC-231","Oversized Serialized Data Payloads",[],{"id":137,"name":138,"techniques":139},"CAPEC-469","HTTP DoS",[140],{"id":141,"name":142,"tactics":143,"countermeasures":145},"T1499.002","Service Exhaustion Flood",[144],{"id":29,"name":30},[146,148,150,152,154,156,158,160,162,164,166],{"id":75,"name":76,"tactic":147},{"name":36},{"id":63,"name":64,"tactic":149},{"name":36},{"id":43,"name":44,"tactic":151},{"name":41},{"id":71,"name":72,"tactic":153},{"name":36},{"id":55,"name":56,"tactic":155},{"name":36},{"id":59,"name":60,"tactic":157},{"name":36},{"id":33,"name":34,"tactic":159},{"name":36},{"id":51,"name":52,"tactic":161},{"name":36},{"id":67,"name":68,"tactic":163},{"name":36},{"id":38,"name":39,"tactic":165},{"name":41},{"id":47,"name":48,"tactic":167},{"name":36},{"id":169,"name":170,"techniques":171},"CAPEC-482","TCP Flood",[172,198,204],{"id":25,"name":26,"tactics":173,"countermeasures":175},[174],{"id":29,"name":30},[176,178,180,182,184,186,188,190,192,194,196],{"id":33,"name":34,"tactic":177},{"name":36},{"id":38,"name":39,"tactic":179},{"name":41},{"id":43,"name":44,"tactic":181},{"name":41},{"id":47,"name":48,"tactic":183},{"name":36},{"id":51,"name":52,"tactic":185},{"name":36},{"id":55,"name":56,"tactic":187},{"name":36},{"id":59,"name":60,"tactic":189},{"name":36},{"id":63,"name":64,"tactic":191},{"name":36},{"id":67,"name":68,"tactic":193},{"name":36},{"id":71,"name":72,"tactic":195},{"name":36},{"id":75,"name":76,"tactic":197},{"name":36},{"id":199,"name":200,"tactics":201,"countermeasures":203},"T1499.001","OS Exhaustion Flood",[202],{"id":29,"name":30},[],{"id":141,"name":142,"tactics":205,"countermeasures":207},[206],{"id":29,"name":30},[208,210,212,214,216,218,220,222,224,226,228],{"id":75,"name":76,"tactic":209},{"name":36},{"id":63,"name":64,"tactic":211},{"name":36},{"id":43,"name":44,"tactic":213},{"name":41},{"id":71,"name":72,"tactic":215},{"name":36},{"id":55,"name":56,"tactic":217},{"name":36},{"id":59,"name":60,"tactic":219},{"name":36},{"id":33,"name":34,"tactic":221},{"name":36},{"id":51,"name":52,"tactic":223},{"name":36},{"id":67,"name":68,"tactic":225},{"name":36},{"id":38,"name":39,"tactic":227},{"name":41},{"id":47,"name":48,"tactic":229},{"name":36},{"id":231,"name":232,"techniques":233},"CAPEC-486","UDP Flood",[],{"id":235,"name":236,"techniques":237},"CAPEC-487","ICMP Flood",[],{"id":239,"name":240,"techniques":241},"CAPEC-488","HTTP Flood",[242],{"id":141,"name":142,"tactics":243,"countermeasures":245},[244],{"id":29,"name":30},[246,248,250,252,254,256,258,260,262,264,266],{"id":75,"name":76,"tactic":247},{"name":36},{"id":63,"name":64,"tactic":249},{"name":36},{"id":43,"name":44,"tactic":251},{"name":41},{"id":71,"name":72,"tactic":253},{"name":36},{"id":55,"name":56,"tactic":255},{"name":36},{"id":59,"name":60,"tactic":257},{"name":36},{"id":33,"name":34,"tactic":259},{"name":36},{"id":51,"name":52,"tactic":261},{"name":36},{"id":67,"name":68,"tactic":263},{"name":36},{"id":38,"name":39,"tactic":265},{"name":41},{"id":47,"name":48,"tactic":267},{"name":36},{"id":269,"name":270,"techniques":271},"CAPEC-489","SSL Flood",[272],{"id":141,"name":142,"tactics":273,"countermeasures":275},[274],{"id":29,"name":30},[276,278,280,282,284,286,288,290,292,294,296],{"id":75,"name":76,"tactic":277},{"name":36},{"id":63,"name":64,"tactic":279},{"name":36},{"id":43,"name":44,"tactic":281},{"name":41},{"id":71,"name":72,"tactic":283},{"name":36},{"id":55,"name":56,"tactic":285},{"name":36},{"id":59,"name":60,"tactic":287},{"name":36},{"id":33,"name":34,"tactic":289},{"name":36},{"id":51,"name":52,"tactic":291},{"name":36},{"id":67,"name":68,"tactic":293},{"name":36},{"id":38,"name":39,"tactic":295},{"name":41},{"id":47,"name":48,"tactic":297},{"name":36},{"id":299,"name":300,"techniques":301},"CAPEC-490","Amplification",[302],{"id":303,"name":304,"tactics":305,"countermeasures":307},"T1498.002","Reflection Amplification",[306],{"id":29,"name":30},[308,310,312,314,316,318,320,322,324,326,328],{"id":67,"name":68,"tactic":309},{"name":36},{"id":43,"name":44,"tactic":311},{"name":41},{"id":47,"name":48,"tactic":313},{"name":36},{"id":71,"name":72,"tactic":315},{"name":36},{"id":59,"name":60,"tactic":317},{"name":36},{"id":33,"name":34,"tactic":319},{"name":36},{"id":75,"name":76,"tactic":321},{"name":36},{"id":55,"name":56,"tactic":323},{"name":36},{"id":51,"name":52,"tactic":325},{"name":36},{"id":38,"name":39,"tactic":327},{"name":41},{"id":63,"name":64,"tactic":329},{"name":36},{"id":331,"name":332,"techniques":333},"CAPEC-491","Quadratic Data Expansion",[],{"id":335,"name":336,"techniques":337},"CAPEC-493","SOAP Array Blowup",[],{"id":339,"name":340,"techniques":341},"CAPEC-494","TCP Fragmentation",[],{"id":343,"name":344,"techniques":345},"CAPEC-495","UDP Fragmentation",[],{"id":347,"name":348,"techniques":349},"CAPEC-496","ICMP Fragmentation",[],{"id":351,"name":352,"techniques":353},"CAPEC-528","XML Flood",[354,380],{"id":141,"name":142,"tactics":355,"countermeasures":357},[356],{"id":29,"name":30},[358,360,362,364,366,368,370,372,374,376,378],{"id":75,"name":76,"tactic":359},{"name":36},{"id":63,"name":64,"tactic":361},{"name":36},{"id":43,"name":44,"tactic":363},{"name":41},{"id":71,"name":72,"tactic":365},{"name":36},{"id":55,"name":56,"tactic":367},{"name":36},{"id":59,"name":60,"tactic":369},{"name":36},{"id":33,"name":34,"tactic":371},{"name":36},{"id":51,"name":52,"tactic":373},{"name":36},{"id":67,"name":68,"tactic":375},{"name":36},{"id":38,"name":39,"tactic":377},{"name":41},{"id":47,"name":48,"tactic":379},{"name":36},{"id":25,"name":26,"tactics":381,"countermeasures":383},[382],{"id":29,"name":30},[384,386,388,390,392,394,396,398,400,402,404],{"id":33,"name":34,"tactic":385},{"name":36},{"id":38,"name":39,"tactic":387},{"name":41},{"id":43,"name":44,"tactic":389},{"name":41},{"id":47,"name":48,"tactic":391},{"name":36},{"id":51,"name":52,"tactic":393},{"name":36},{"id":55,"name":56,"tactic":395},{"name":36},{"id":59,"name":60,"tactic":397},{"name":36},{"id":63,"name":64,"tactic":399},{"name":36},{"id":67,"name":68,"tactic":401},{"name":36},{"id":71,"name":72,"tactic":403},{"name":36},{"id":75,"name":76,"tactic":405},{"name":36},[],[408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437],"UBUNTU-CVE-2026-14456","DEBIAN-CVE-2026-14456","RHSA-2026:56097","ALPINE-CVE-2026-14456","CGA-2ppv-r4hv-jx33","CGA-2x4v-f88x-wgmx","CGA-35mx-c7ph-5wqg","CGA-36gj-w863-j9mh","CGA-5945-g4x2-xfmq","CGA-6rvx-cjv3-fjpj","CGA-93ch-6vxx-3pjv","CGA-fq88-94gm-g9r9","CGA-gc6w-2x98-r76w","CGA-jfcj-jfm4-h7gj","CGA-p7xj-xqpj-mc43","CGA-39cj-9g8f-fjp2","CGA-3whq-6wr2-276j","CGA-5r9p-9gq5-mx67","CGA-5xcq-h89p-h3xj","CGA-8gwq-6353-663v","CGA-cxxp-2m33-pq52","CGA-hc7m-3h9x-w8xr","CGA-mcg4-pv9j-q45r","CGA-p72q-8cxv-3vx7","CGA-q39r-r5jj-9539","CGA-qchw-xc4v-23mf","CGA-rf3c-9vcc-5pfq","CGA-w6r7-pqf5-57vf","CGA-whw8-5ph3-8pfm","CGA-x4jp-5c7q-v482",[439,440],{"_key":7},{"_key":441},"CVE-2026-54876",[443,445,447,449,451,453,455,456,458],{"_key":444},"OPENSUSE-SU-2026:11623-1",{"_key":446},"MGASA-2026-0353",{"_key":448},"USN-8678-1",{"_key":450},"OPENSUSE-SU-2026:21744-1",{"_key":452},"SUSE-SU-2026:4039-1",{"_key":454},"SUSE-SU-2026:23463-1",{"_key":7},{"_key":457},"RHSA-2026:67154",{"_key":459},"RHSA-2026:67165",[],[462,463,464,465,466,467],{"_key":444},{"_key":450},{"_key":452},{"_key":454},{"_key":448},{"_key":468},"CGA-8XXM-GC5X-RMJG","2026-08-13T13:55:52.370Z","2026-08-13T17:41:29.420Z","Awaiting Analysis",{"cisa_kev":473,"cisa_ransomware":473,"cisa_vendor":9,"epss_severity":474,"epss_score":475,"severity":476,"severity_score":477,"severity_version":478,"severity_source":479,"severity_vector":480,"severity_status":471},false,"low",0.00729,"high",7.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",[482,495,501,505,509,514,518,522,527,531,535,539,543,547,551,555,559,564,568,572,576,580,584,588,592],{"url":483,"sources":484,"tags":490},"https://openssl-library.org/news/secadv/20260813.txt",[479,485,486,487,488,489],"nvd","osv_ubuntu","osv_red_hat","osv_wolfi","osv_chainguard",[491,492,493,494],"Vendor Advisory","REPORT","ARTICLE","Advisory",{"url":496,"sources":497,"tags":498},"https://github.com/openssl/openssl/commit/f2f1465f2d2e5c61dfeac4d20fd093797d821139",[479,485,486,487,488,489],[499,492,493,500],"Patch","FIX",{"url":502,"sources":503,"tags":504},"https://github.com/openssl/openssl/commit/4084152e040329ca0194c4c1750b9b46d00a5b6b",[479,485,486,487,488,489],[499,492,493,500],{"url":506,"sources":507,"tags":508},"https://github.com/openssl/openssl/commit/08e7756c3900bcfd77a720e7b74e27d6e4ed01a9",[479,485,486,487,488,489],[499,492,493,500],{"url":510,"sources":511,"tags":512},"http://www.openwall.com/lists/oss-security/2026/08/13/4",[479,485,488,489],[513],"WEB",{"url":515,"sources":516,"tags":517},"https://ubuntu.com/security/CVE-2026-14456",[486],[492],{"url":519,"sources":520,"tags":521},"https://www.cve.org/CVERecord?id=CVE-2026-14456",[486,487],[492,494],{"url":523,"sources":524,"tags":526},"https://security-tracker.debian.org/tracker/CVE-2026-14456",[525],"osv_debian",[494],{"url":528,"sources":529,"tags":530},"https://access.redhat.com/errata/RHSA-2026:56097",[487],[494],{"url":532,"sources":533,"tags":534},"https://access.redhat.com/security/cve/CVE-2026-14456",[487],[492],{"url":536,"sources":537,"tags":538},"https://access.redhat.com/security/updates/classification/",[487],[493],{"url":540,"sources":541,"tags":542},"https://images.redhat.com/",[487],[493],{"url":544,"sources":545,"tags":546},"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_56097.json",[487],[494],{"url":548,"sources":549,"tags":550},"https://bugzilla.redhat.com/show_bug.cgi?id=2515348",[487],[492],{"url":552,"sources":553,"tags":554},"https://nvd.nist.gov/vuln/detail/CVE-2026-14456",[487,488,489],[494],{"url":556,"sources":557,"tags":558},"https://access.redhat.com/security/cve/CVE-2026-54876",[487],[493,492],{"url":560,"sources":561,"tags":563},"https://security.alpinelinux.org/vuln/CVE-2026-14456",[562],"osv_alpine",[494],{"url":565,"sources":566,"tags":567},"https://ubuntu.com/security/notices/USN-8678-1",[486],[494],{"url":569,"sources":570,"tags":571},"https://bugzilla.redhat.com/show_bug.cgi?id=2511600",[487],[492],{"url":573,"sources":574,"tags":575},"https://www.cve.org/CVERecord?id=CVE-2026-54876",[487],[494],{"url":577,"sources":578,"tags":579},"https://nvd.nist.gov/vuln/detail/CVE-2026-54876",[487],[494],{"url":581,"sources":582,"tags":583},"https://github.com/openssl/openssl/commit/155b5fe0f93365e6df1c56ee3606b121080c6c12",[487],[493],{"url":585,"sources":586,"tags":587},"https://github.com/openssl/openssl/commit/d8c51048ac037a21bae0f41cad7a3920dc7f3638",[487],[493],{"url":589,"sources":590,"tags":591},"https://openssl-library.org/news/secadv/20260805.txt",[487],[493],{"url":593,"sources":594,"tags":595},"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/14xxx/CVE-2026-14456.json",[488,489],[494],[],{"date":598,"score":475,"percentile":599},"2026-09-19",0.52757,[601,605,608,611,614,617,620,623,626,629,632,636,639,642,645,648,651,654,657,660,663,666,669,672,675,678,681,684,687,690,693,696,699,702,705,708,711],{"date":602,"score":603,"percentile":604},"2026-08-14",0.00465,0.38232,{"date":606,"score":603,"percentile":607},"2026-08-15",0.38343,{"date":609,"score":603,"percentile":610},"2026-08-16",0.3837,{"date":612,"score":603,"percentile":613},"2026-08-17",0.38328,{"date":615,"score":603,"percentile":616},"2026-08-18",0.38354,{"date":618,"score":603,"percentile":619},"2026-08-19",0.38553,{"date":621,"score":603,"percentile":622},"2026-08-20",0.38598,{"date":624,"score":603,"percentile":625},"2026-08-21",0.38643,{"date":627,"score":603,"percentile":628},"2026-08-22",0.38657,{"date":630,"score":603,"percentile":631},"2026-08-23",0.38567,{"date":633,"score":634,"percentile":635},"2026-08-24",0.00612,0.46587,{"date":637,"score":634,"percentile":638},"2026-08-25",0.46617,{"date":640,"score":475,"percentile":641},"2026-08-26",0.51568,{"date":643,"score":475,"percentile":644},"2026-08-27",0.51613,{"date":646,"score":475,"percentile":647},"2026-08-28",0.51236,{"date":649,"score":475,"percentile":650},"2026-08-29",0.51268,{"date":652,"score":475,"percentile":653},"2026-08-30",0.517,{"date":655,"score":475,"percentile":656},"2026-08-31",0.51709,{"date":658,"score":475,"percentile":659},"2026-09-01",0.51736,{"date":661,"score":475,"percentile":662},"2026-09-02",0.51783,{"date":664,"score":475,"percentile":665},"2026-09-03",0.5181,{"date":667,"score":475,"percentile":668},"2026-09-04",0.51845,{"date":670,"score":475,"percentile":671},"2026-09-05",0.51473,{"date":673,"score":475,"percentile":674},"2026-09-06",0.51906,{"date":676,"score":475,"percentile":677},"2026-09-07",0.51913,{"date":679,"score":475,"percentile":680},"2026-09-08",0.51933,{"date":682,"score":475,"percentile":683},"2026-09-09",0.52097,{"date":685,"score":475,"percentile":686},"2026-09-10",0.52123,{"date":688,"score":475,"percentile":689},"2026-09-11",0.5216,{"date":691,"score":475,"percentile":692},"2026-09-12",0.52229,{"date":694,"score":475,"percentile":695},"2026-09-13",0.52228,{"date":697,"score":475,"percentile":698},"2026-09-14",0.52254,{"date":700,"score":475,"percentile":701},"2026-09-15",0.52336,{"date":703,"score":475,"percentile":704},"2026-09-16",0.52507,{"date":706,"score":475,"percentile":707},"2026-09-17",0.52589,{"date":709,"score":475,"percentile":710},"2026-09-18",0.52716,{"date":598,"score":475,"percentile":599},[713,718,720,722,724,726,728,730],{"source":479,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":714,"cvss_v4_0":9},{"baseScore":477,"baseSeverity":715,"vectorString":480,"impactScore":716,"exploitabilityScore":717},"HIGH",6,10,{"source":485,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":719,"cvss_v4_0":9},{"baseScore":477,"baseSeverity":715,"vectorString":480,"impactScore":716,"exploitabilityScore":717},{"source":525,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":721,"cvss_v4_0":9},{"baseScore":477,"baseSeverity":9,"vectorString":480,"impactScore":716,"exploitabilityScore":717},{"source":486,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":723,"cvss_v4_0":9},{"baseScore":477,"baseSeverity":9,"vectorString":480,"impactScore":716,"exploitabilityScore":717},{"source":487,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":725,"cvss_v4_0":9},{"baseScore":477,"baseSeverity":9,"vectorString":480,"impactScore":716,"exploitabilityScore":717},{"source":562,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":727,"cvss_v4_0":9},{"baseScore":477,"baseSeverity":9,"vectorString":480,"impactScore":716,"exploitabilityScore":717},{"source":488,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":729,"cvss_v4_0":9},{"baseScore":477,"baseSeverity":9,"vectorString":480,"impactScore":716,"exploitabilityScore":717},{"source":489,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":731,"cvss_v4_0":9},{"baseScore":477,"baseSeverity":9,"vectorString":480,"impactScore":716,"exploitabilityScore":717},[733,747,757,762,767,773,779,783,786,790,794,798,804,808,812,817,820,823,826,829,832,835,850,860,864,868,877,881,885,902],{"ecosystem":734,"name":735,"vendor":736,"product":735,"cpe_part":9,"purl_type":737,"purl_namespace":736,"purl_name":735,"source":9,"versions":738},"Alpine Linux","openssl","alpine","apk",[739,745,746],{"version":740,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":743,"version_end_type":744,"fixed_in":9},"lt3_5_8_r0",true,"ecosystem","3.5.8-r0","excluding",{"version":740,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":743,"version_end_type":744,"fixed_in":9},{"version":740,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":743,"version_end_type":744,"fixed_in":9},{"ecosystem":748,"name":749,"vendor":750,"product":749,"cpe_part":9,"purl_type":737,"purl_namespace":750,"purl_name":749,"source":9,"versions":751},"Chainguard","eco-python-openssl-4","chainguard",[752,754],{"version":753,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all",{"version":755,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":756,"version_end_type":744,"fixed_in":9},"lt4_0_2_r0","4.0.2-r0",{"ecosystem":748,"name":758,"vendor":750,"product":758,"cpe_part":9,"purl_type":737,"purl_namespace":750,"purl_name":758,"source":9,"versions":759},"eco-python-openssl-4-pyca",[760,761],{"version":753,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":755,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":756,"version_end_type":744,"fixed_in":9},{"ecosystem":748,"name":763,"vendor":750,"product":763,"cpe_part":9,"purl_type":737,"purl_namespace":750,"purl_name":763,"source":9,"versions":764},"eco-python-openssl-4-pyca-dev",[765,766],{"version":753,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":755,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":756,"version_end_type":744,"fixed_in":9},{"ecosystem":748,"name":768,"vendor":750,"product":768,"cpe_part":9,"purl_type":737,"purl_namespace":750,"purl_name":768,"source":9,"versions":769},"libcrypto3",[770],{"version":771,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":772,"version_end_type":744,"fixed_in":9},"lt3_6_3_r5","3.6.3-r5",{"ecosystem":748,"name":774,"vendor":750,"product":774,"cpe_part":9,"purl_type":737,"purl_namespace":750,"purl_name":774,"source":9,"versions":775},"libcrypto3-2.34",[776],{"version":777,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":778,"version_end_type":744,"fixed_in":9},"lt3_6_3_r3","3.6.3-r3",{"ecosystem":748,"name":780,"vendor":750,"product":780,"cpe_part":9,"purl_type":737,"purl_namespace":750,"purl_name":780,"source":9,"versions":781},"libssl3",[782],{"version":771,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":772,"version_end_type":744,"fixed_in":9},{"ecosystem":748,"name":735,"vendor":750,"product":735,"cpe_part":9,"purl_type":737,"purl_namespace":750,"purl_name":735,"source":9,"versions":784},[785],{"version":771,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":772,"version_end_type":744,"fixed_in":9},{"ecosystem":748,"name":787,"vendor":750,"product":787,"cpe_part":9,"purl_type":737,"purl_namespace":750,"purl_name":787,"source":9,"versions":788},"openssl-dbg",[789],{"version":771,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":772,"version_end_type":744,"fixed_in":9},{"ecosystem":748,"name":791,"vendor":750,"product":791,"cpe_part":9,"purl_type":737,"purl_namespace":750,"purl_name":791,"source":9,"versions":792},"openssl-dev",[793],{"version":771,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":772,"version_end_type":744,"fixed_in":9},{"ecosystem":748,"name":795,"vendor":750,"product":795,"cpe_part":9,"purl_type":737,"purl_namespace":750,"purl_name":795,"source":9,"versions":796},"openssl-doc",[797],{"version":771,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":772,"version_end_type":744,"fixed_in":9},{"ecosystem":748,"name":799,"vendor":750,"product":799,"cpe_part":9,"purl_type":737,"purl_namespace":750,"purl_name":799,"source":9,"versions":800},"openssl-provider-fips-3.6.0",[801],{"version":802,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":803,"version_end_type":744,"fixed_in":9},"lt0","0",{"ecosystem":748,"name":805,"vendor":750,"product":805,"cpe_part":9,"purl_type":737,"purl_namespace":750,"purl_name":805,"source":9,"versions":806},"openssl-provider-fips-3.6.0-dbg",[807],{"version":802,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":803,"version_end_type":744,"fixed_in":9},{"ecosystem":748,"name":809,"vendor":750,"product":809,"cpe_part":9,"purl_type":737,"purl_namespace":750,"purl_name":809,"source":9,"versions":810},"openssl-provider-legacy",[811],{"version":771,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":772,"version_end_type":744,"fixed_in":9},{"ecosystem":813,"name":768,"vendor":814,"product":768,"cpe_part":9,"purl_type":737,"purl_namespace":814,"purl_name":768,"source":9,"versions":815},"Wolfi","wolfi",[816],{"version":771,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":772,"version_end_type":744,"fixed_in":9},{"ecosystem":813,"name":780,"vendor":814,"product":780,"cpe_part":9,"purl_type":737,"purl_namespace":814,"purl_name":780,"source":9,"versions":818},[819],{"version":771,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":772,"version_end_type":744,"fixed_in":9},{"ecosystem":813,"name":735,"vendor":814,"product":735,"cpe_part":9,"purl_type":737,"purl_namespace":814,"purl_name":735,"source":9,"versions":821},[822],{"version":771,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":772,"version_end_type":744,"fixed_in":9},{"ecosystem":813,"name":787,"vendor":814,"product":787,"cpe_part":9,"purl_type":737,"purl_namespace":814,"purl_name":787,"source":9,"versions":824},[825],{"version":771,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":772,"version_end_type":744,"fixed_in":9},{"ecosystem":813,"name":791,"vendor":814,"product":791,"cpe_part":9,"purl_type":737,"purl_namespace":814,"purl_name":791,"source":9,"versions":827},[828],{"version":771,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":772,"version_end_type":744,"fixed_in":9},{"ecosystem":813,"name":795,"vendor":814,"product":795,"cpe_part":9,"purl_type":737,"purl_namespace":814,"purl_name":795,"source":9,"versions":830},[831],{"version":771,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":772,"version_end_type":744,"fixed_in":9},{"ecosystem":813,"name":809,"vendor":814,"product":809,"cpe_part":9,"purl_type":737,"purl_namespace":814,"purl_name":809,"source":9,"versions":833},[834],{"version":771,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":772,"version_end_type":744,"fixed_in":9},{"ecosystem":836,"name":735,"vendor":837,"product":735,"cpe_part":9,"purl_type":838,"purl_namespace":837,"purl_name":735,"source":9,"versions":839},"Debian","debian","deb",[840,841,842,843,844,847],{"version":753,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":753,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":753,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":753,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":845,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":846,"version_end_type":744,"fixed_in":9},"lt3_5_7_1~deb13u2","3.5.7-1~deb13u2",{"version":848,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":849,"version_end_type":744,"fixed_in":9},"lt3_6_4_1","3.6.4-1",{"ecosystem":851,"name":852,"vendor":853,"product":852,"cpe_part":9,"purl_type":838,"purl_namespace":853,"purl_name":852,"source":9,"versions":854},"Ubuntu","edk2","ubuntu",[855,856,857,858,859],{"version":753,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":753,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":753,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":753,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":753,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":851,"name":861,"vendor":853,"product":861,"cpe_part":9,"purl_type":838,"purl_namespace":853,"purl_name":861,"source":9,"versions":862},"edk2-hwe",[863],{"version":753,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":851,"name":865,"vendor":853,"product":865,"cpe_part":9,"purl_type":838,"purl_namespace":853,"purl_name":865,"source":9,"versions":866},"nodejs",[867],{"version":753,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":851,"name":735,"vendor":853,"product":735,"cpe_part":9,"purl_type":838,"purl_namespace":853,"purl_name":735,"source":9,"versions":869},[870,871,872,873,874],{"version":753,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":753,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":753,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":753,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":875,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":876,"version_end_type":744,"fixed_in":9},"lt3_5_5_1ubuntu3_4","3.5.5-1ubuntu3.4",{"ecosystem":851,"name":878,"vendor":853,"product":878,"cpe_part":9,"purl_type":838,"purl_namespace":853,"purl_name":878,"source":9,"versions":879},"openssl-fips",[880],{"version":753,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":851,"name":882,"vendor":853,"product":882,"cpe_part":9,"purl_type":838,"purl_namespace":853,"purl_name":882,"source":9,"versions":883},"openssl1.0",[884],{"version":753,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":9,"name":886,"vendor":735,"product":735,"cpe_part":887,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":888},"OpenSSL","a",[889,894,898],{"version":890,"is_range":741,"range_type":479,"version_start":891,"version_start_type":892,"version_end":893,"version_end_type":744,"fixed_in":9},"gte4.0.0_lt4.0.2","4.0.0","including","4.0.2",{"version":895,"is_range":741,"range_type":479,"version_start":896,"version_start_type":892,"version_end":897,"version_end_type":744,"fixed_in":9},"gte3.6.0_lt3.6.4","3.6.0","3.6.4",{"version":899,"is_range":741,"range_type":479,"version_start":900,"version_start_type":892,"version_end":901,"version_end_type":744,"fixed_in":9},"gte3.5.0_lt3.5.8","3.5.0","3.5.8",{"ecosystem":903,"name":735,"vendor":904,"product":735,"cpe_part":9,"purl_type":905,"purl_namespace":904,"purl_name":735,"source":9,"versions":906},"Red Hat","redhat","rpm",[907],{"version":908,"is_range":741,"range_type":742,"version_start":9,"version_start_type":9,"version_end":909,"version_end_type":744,"fixed_in":9},"lt0:3_5_6_0_5_hum1","0:3.5.6-0.5.hum1"]