[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-27601":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T11:35:27.363Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":406,"aliases":416,"duplicate_of":9,"upstream":464,"downstream":465,"duplicates":476,"related":477,"reserved_at":9,"published_at":484,"modified_at":485,"state":486,"summary":487,"references_raw":495,"kevs":563,"epss":564,"epss_history":567,"metrics":840,"affected":865},"CVE-2026-27601","Underscore.js is a utility-belt library for JavaScript. Prior to 1.13.8, the _.flatten and _.isEqual functions use recursion without a depth limit. Under very specific conditions, detailed below, an attacker could exploit this in a Denial of Service (DoS) attack by triggering a stack overflow. Untrusted input must be used to create a recursive datastructure, for example using JSON.parse, with no enforced depth limit. The datastructure thus created must be passed to _.flatten or _.isEqual. In the case of _.flatten, the vulnerability can only be exploited if it is possible for a remote client to prepare a datastructure that consists of arrays at all levels AND if no finite depth limit is passed as the second argument to _.flatten. In the case of _.isEqual, the vulnerability can only be exploited if there exists a code path in which two distinct datastructures that were submitted by the same remote client are compared using _.isEqual. For example, if a client submits data that are stored in a database, and the same client can later submit another datastructure that is then compared to the data that were saved in the database previously, OR if a client submits a single request, but its data are parsed twice, creating two non-identical but equivalent datastructures that are then compared. Exceptions originating from the call to _.flatten or _.isEqual, as a result of a stack overflow, are not being caught. This vulnerability is fixed in 1.13.8.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-770","Allocation of Resources Without Limits or Throttling","The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.","weakness","Incomplete","Base","High",[20,106,116,120,124,128,132,136,168,230,234,238,268,298,330,334,338,342,346,350],{"id":21,"name":22,"techniques":23},"CAPEC-125","Flooding",[24,78],{"id":25,"name":26,"tactics":27,"countermeasures":31},"T1498.001","Direct Network Flood",[28],{"id":29,"name":30},"TA0105","Impact",[32,37,42,46,50,54,58,62,66,70,74],{"id":33,"name":34,"tactic":35},"D3-APCA","Application Protocol Command Analysis",{"name":36},"Detect",{"id":38,"name":39,"tactic":40},"D3-NTF","Network Traffic Filtering",{"name":41},"Isolate",{"id":43,"name":44,"tactic":45},"D3-ITF","Inbound Traffic Filtering",{"name":41},{"id":47,"name":48,"tactic":49},"D3-ISVA","Inbound Session Volume Analysis",{"name":36},{"id":51,"name":52,"tactic":53},"D3-RTSD","Remote Terminal Session Detection",{"name":36},{"id":55,"name":56,"tactic":57},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":36},{"id":59,"name":60,"tactic":61},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":36},{"id":63,"name":64,"tactic":65},"D3-NTCD","Network Traffic Community Deviation",{"name":36},{"id":67,"name":68,"tactic":69},"D3-CSPP","Client-server Payload Profiling",{"name":36},{"id":71,"name":72,"tactic":73},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":36},{"id":75,"name":76,"tactic":77},"D3-NTSA","Network Traffic Signature Analysis",{"name":36},{"id":79,"name":80,"tactics":81,"countermeasures":83},"T1499","Endpoint Denial of Service",[82],{"id":29,"name":30},[84,86,88,90,92,94,96,98,100,102,104],{"id":47,"name":48,"tactic":85},{"name":36},{"id":59,"name":60,"tactic":87},{"name":36},{"id":33,"name":34,"tactic":89},{"name":36},{"id":63,"name":64,"tactic":91},{"name":36},{"id":51,"name":52,"tactic":93},{"name":36},{"id":67,"name":68,"tactic":95},{"name":36},{"id":38,"name":39,"tactic":97},{"name":41},{"id":43,"name":44,"tactic":99},{"name":41},{"id":55,"name":56,"tactic":101},{"name":36},{"id":71,"name":72,"tactic":103},{"name":36},{"id":75,"name":76,"tactic":105},{"name":36},{"id":107,"name":108,"techniques":109},"CAPEC-130","Excessive Allocation",[110],{"id":111,"name":112,"tactics":113,"countermeasures":115},"T1499.003","Application Exhaustion Flood",[114],{"id":29,"name":30},[],{"id":117,"name":118,"techniques":119},"CAPEC-147","XML Ping of the Death",[],{"id":121,"name":122,"techniques":123},"CAPEC-197","Exponential Data Expansion",[],{"id":125,"name":126,"techniques":127},"CAPEC-229","Serialized Data Parameter Blowup",[],{"id":129,"name":130,"techniques":131},"CAPEC-230","Serialized Data with Nested Payloads",[],{"id":133,"name":134,"techniques":135},"CAPEC-231","Oversized Serialized Data Payloads",[],{"id":137,"name":138,"techniques":139},"CAPEC-469","HTTP DoS",[140],{"id":141,"name":142,"tactics":143,"countermeasures":145},"T1499.002","Service Exhaustion Flood",[144],{"id":29,"name":30},[146,148,150,152,154,156,158,160,162,164,166],{"id":75,"name":76,"tactic":147},{"name":36},{"id":63,"name":64,"tactic":149},{"name":36},{"id":43,"name":44,"tactic":151},{"name":41},{"id":71,"name":72,"tactic":153},{"name":36},{"id":55,"name":56,"tactic":155},{"name":36},{"id":59,"name":60,"tactic":157},{"name":36},{"id":33,"name":34,"tactic":159},{"name":36},{"id":51,"name":52,"tactic":161},{"name":36},{"id":67,"name":68,"tactic":163},{"name":36},{"id":38,"name":39,"tactic":165},{"name":41},{"id":47,"name":48,"tactic":167},{"name":36},{"id":169,"name":170,"techniques":171},"CAPEC-482","TCP Flood",[172,198,204],{"id":25,"name":26,"tactics":173,"countermeasures":175},[174],{"id":29,"name":30},[176,178,180,182,184,186,188,190,192,194,196],{"id":33,"name":34,"tactic":177},{"name":36},{"id":38,"name":39,"tactic":179},{"name":41},{"id":43,"name":44,"tactic":181},{"name":41},{"id":47,"name":48,"tactic":183},{"name":36},{"id":51,"name":52,"tactic":185},{"name":36},{"id":55,"name":56,"tactic":187},{"name":36},{"id":59,"name":60,"tactic":189},{"name":36},{"id":63,"name":64,"tactic":191},{"name":36},{"id":67,"name":68,"tactic":193},{"name":36},{"id":71,"name":72,"tactic":195},{"name":36},{"id":75,"name":76,"tactic":197},{"name":36},{"id":199,"name":200,"tactics":201,"countermeasures":203},"T1499.001","OS Exhaustion Flood",[202],{"id":29,"name":30},[],{"id":141,"name":142,"tactics":205,"countermeasures":207},[206],{"id":29,"name":30},[208,210,212,214,216,218,220,222,224,226,228],{"id":75,"name":76,"tactic":209},{"name":36},{"id":63,"name":64,"tactic":211},{"name":36},{"id":43,"name":44,"tactic":213},{"name":41},{"id":71,"name":72,"tactic":215},{"name":36},{"id":55,"name":56,"tactic":217},{"name":36},{"id":59,"name":60,"tactic":219},{"name":36},{"id":33,"name":34,"tactic":221},{"name":36},{"id":51,"name":52,"tactic":223},{"name":36},{"id":67,"name":68,"tactic":225},{"name":36},{"id":38,"name":39,"tactic":227},{"name":41},{"id":47,"name":48,"tactic":229},{"name":36},{"id":231,"name":232,"techniques":233},"CAPEC-486","UDP Flood",[],{"id":235,"name":236,"techniques":237},"CAPEC-487","ICMP Flood",[],{"id":239,"name":240,"techniques":241},"CAPEC-488","HTTP Flood",[242],{"id":141,"name":142,"tactics":243,"countermeasures":245},[244],{"id":29,"name":30},[246,248,250,252,254,256,258,260,262,264,266],{"id":75,"name":76,"tactic":247},{"name":36},{"id":63,"name":64,"tactic":249},{"name":36},{"id":43,"name":44,"tactic":251},{"name":41},{"id":71,"name":72,"tactic":253},{"name":36},{"id":55,"name":56,"tactic":255},{"name":36},{"id":59,"name":60,"tactic":257},{"name":36},{"id":33,"name":34,"tactic":259},{"name":36},{"id":51,"name":52,"tactic":261},{"name":36},{"id":67,"name":68,"tactic":263},{"name":36},{"id":38,"name":39,"tactic":265},{"name":41},{"id":47,"name":48,"tactic":267},{"name":36},{"id":269,"name":270,"techniques":271},"CAPEC-489","SSL Flood",[272],{"id":141,"name":142,"tactics":273,"countermeasures":275},[274],{"id":29,"name":30},[276,278,280,282,284,286,288,290,292,294,296],{"id":75,"name":76,"tactic":277},{"name":36},{"id":63,"name":64,"tactic":279},{"name":36},{"id":43,"name":44,"tactic":281},{"name":41},{"id":71,"name":72,"tactic":283},{"name":36},{"id":55,"name":56,"tactic":285},{"name":36},{"id":59,"name":60,"tactic":287},{"name":36},{"id":33,"name":34,"tactic":289},{"name":36},{"id":51,"name":52,"tactic":291},{"name":36},{"id":67,"name":68,"tactic":293},{"name":36},{"id":38,"name":39,"tactic":295},{"name":41},{"id":47,"name":48,"tactic":297},{"name":36},{"id":299,"name":300,"techniques":301},"CAPEC-490","Amplification",[302],{"id":303,"name":304,"tactics":305,"countermeasures":307},"T1498.002","Reflection Amplification",[306],{"id":29,"name":30},[308,310,312,314,316,318,320,322,324,326,328],{"id":67,"name":68,"tactic":309},{"name":36},{"id":43,"name":44,"tactic":311},{"name":41},{"id":47,"name":48,"tactic":313},{"name":36},{"id":71,"name":72,"tactic":315},{"name":36},{"id":59,"name":60,"tactic":317},{"name":36},{"id":33,"name":34,"tactic":319},{"name":36},{"id":75,"name":76,"tactic":321},{"name":36},{"id":55,"name":56,"tactic":323},{"name":36},{"id":51,"name":52,"tactic":325},{"name":36},{"id":38,"name":39,"tactic":327},{"name":41},{"id":63,"name":64,"tactic":329},{"name":36},{"id":331,"name":332,"techniques":333},"CAPEC-491","Quadratic Data Expansion",[],{"id":335,"name":336,"techniques":337},"CAPEC-493","SOAP Array Blowup",[],{"id":339,"name":340,"techniques":341},"CAPEC-494","TCP Fragmentation",[],{"id":343,"name":344,"techniques":345},"CAPEC-495","UDP Fragmentation",[],{"id":347,"name":348,"techniques":349},"CAPEC-496","ICMP Fragmentation",[],{"id":351,"name":352,"techniques":353},"CAPEC-528","XML Flood",[354,380],{"id":141,"name":142,"tactics":355,"countermeasures":357},[356],{"id":29,"name":30},[358,360,362,364,366,368,370,372,374,376,378],{"id":75,"name":76,"tactic":359},{"name":36},{"id":63,"name":64,"tactic":361},{"name":36},{"id":43,"name":44,"tactic":363},{"name":41},{"id":71,"name":72,"tactic":365},{"name":36},{"id":55,"name":56,"tactic":367},{"name":36},{"id":59,"name":60,"tactic":369},{"name":36},{"id":33,"name":34,"tactic":371},{"name":36},{"id":51,"name":52,"tactic":373},{"name":36},{"id":67,"name":68,"tactic":375},{"name":36},{"id":38,"name":39,"tactic":377},{"name":41},{"id":47,"name":48,"tactic":379},{"name":36},{"id":25,"name":26,"tactics":381,"countermeasures":383},[382],{"id":29,"name":30},[384,386,388,390,392,394,396,398,400,402,404],{"id":33,"name":34,"tactic":385},{"name":36},{"id":38,"name":39,"tactic":387},{"name":41},{"id":43,"name":44,"tactic":389},{"name":41},{"id":47,"name":48,"tactic":391},{"name":36},{"id":51,"name":52,"tactic":393},{"name":36},{"id":55,"name":56,"tactic":395},{"name":36},{"id":59,"name":60,"tactic":397},{"name":36},{"id":63,"name":64,"tactic":399},{"name":36},{"id":67,"name":68,"tactic":401},{"name":36},{"id":71,"name":72,"tactic":403},{"name":36},{"id":75,"name":76,"tactic":405},{"name":36},[407],{"_key":408,"name":409,"source":410,"url":411,"maturity":412,"reliability_score":413,"verified":414,"type":9,"platforms":415,"requires_auth":9,"exploitdb":9,"metasploit":9},"GITHUB_JASHKENAS_UNDERSCORE","Underscore","github","https://github.com/jashkenas/underscore/security/advisories/GHSA-qpx9-hpmf-5gmw","poc",0.3,false,[],[417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463],"GHSA-qpx9-hpmf-5gmw","UBUNTU-CVE-2026-27601","DEBIAN-CVE-2026-27601","CGA-22r3-8x7c-gf93","CGA-2qfg-pw88-3835","CGA-4m27-pmgm-j6g5","CGA-4m7c-v6p8-f6c2","CGA-4prr-h75r-gg3p","CGA-78r6-3v2r-p3rj","CGA-7px9-pq5v-vvq9","CGA-9mfg-gmwr-3wjv","CGA-c85q-cvhx-5gq2","CGA-f69p-99h5-jjrq","CGA-ff7m-9r9r-f78m","CGA-fmh7-ppgq-464r","CGA-hwr5-qmph-2wgp","CGA-j38w-739x-3jqw","CGA-jj9q-9r87-q294","CGA-pxx4-6v62-mj4x","CGA-66xc-c4cm-mq7j","CGA-6vhj-4xg5-72fx","CGA-7x48-67hv-c5vx","CGA-89fw-mp7m-24gh","CGA-c56v-5f22-w66r","CGA-cp9p-mhgc-w8cp","CGA-hmrp-xrp5-prq4","CGA-hqjx-hg7g-52g9","CGA-m849-69m2-vg5q","CGA-pv58-gjxg-gqw8","CGA-qhrc-7rjx-pw7w","CGA-qjqw-2whc-4m2c","CGA-qx7q-hq5c-hx36","CGA-r4mh-hp5w-r7jx","CGA-r84w-5m78-xp9j","CGA-rg6x-xcpv-jg35","CGA-rjx3-28j2-jxr6","CGA-vpww-qw7g-wfwh","CGA-vq34-3rgp-7m98","CGA-vv29-m3pf-9wx9","CGA-w828-gjmc-9h6m","CGA-wrm6-gm3v-x8f5","CGA-x2w8-6222-cqm4","CGA-x6vw-98q7-fqpm","CGA-xfp7-p727-729v","CGA-xq7p-2pgg-r6rv","CGA-j2f8-cg35-2pgf","CGA-r6jm-q89m-pfvf",[],[466,468,470,472,473,474],{"_key":467},"OPENSUSE-SU-2026:10424-1",{"_key":469},"OPENSUSE-SU-2026:10427-1",{"_key":471},"OPENSUSE-SU-2026:10440-1",{"_key":419},{"_key":418},{"_key":475},"OPENSUSE-SU-2026:21448-1",[],[478,479,480,481,482],{"_key":467},{"_key":469},{"_key":471},{"_key":475},{"_key":483},"CGA-P6MM-848F-WJWH","2026-03-03T22:38:38.955Z","2026-03-04T16:44:40.856Z","Analyzed",{"cisa_kev":414,"cisa_ransomware":414,"cisa_vendor":9,"epss_severity":488,"epss_score":489,"severity":490,"severity_score":491,"severity_version":492,"severity_source":493,"severity_vector":494,"severity_status":486},"low",0.0096,"high",8.2,"v4.0","cve.org","CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",[496,511,517,521,525,529,534,538,542,546,550,554,559],{"url":411,"sources":497,"tags":503},[493,498,499,500,501,502],"nvd","osv_npm","osv_ubuntu","osv_wolfi","osv_chainguard",[504,505,506,507,508,509,510],"X Refsource CONFIRM","Exploit","Patch","Vendor Advisory","WEB","REPORT","Advisory",{"url":512,"sources":513,"tags":514},"https://github.com/jashkenas/underscore/commit/411e222eb0ca5d570cc4f6315c02c05b830ed2b4",[493,498,499,500,501,502],[515,506,508,509,516],"X Refsource MISC","FIX",{"url":518,"sources":519,"tags":520},"https://github.com/jashkenas/underscore/commit/a6e23ae9647461ec33ad9f92a2ecfc220eea0a84",[493,498,499,500,501,502],[515,506,508,509,516],{"url":522,"sources":523,"tags":524},"https://nvd.nist.gov/vuln/detail/CVE-2026-27601",[499,501,502],[510],{"url":526,"sources":527,"tags":528},"https://github.com/jashkenas/underscore/issues/3011",[499],[508],{"url":530,"sources":531,"tags":532},"https://github.com/jashkenas/underscore",[499],[533],"PACKAGE",{"url":535,"sources":536,"tags":537},"https://underscorejs.org/#1.13.8",[499],[508],{"url":539,"sources":540,"tags":541},"https://underscorejs.org/#flatten",[499],[508],{"url":543,"sources":544,"tags":545},"https://underscorejs.org/#isEqual",[499],[508],{"url":547,"sources":548,"tags":549},"https://ubuntu.com/security/CVE-2026-27601",[500],[509],{"url":551,"sources":552,"tags":553},"https://www.cve.org/CVERecord?id=CVE-2026-27601",[500],[509],{"url":555,"sources":556,"tags":558},"https://security-tracker.debian.org/tracker/CVE-2026-27601",[557],"osv_debian",[510],{"url":560,"sources":561,"tags":562},"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27601.json",[501,502],[510],[],{"date":565,"score":489,"percentile":566},"2026-09-19",0.60015,[568,572,575,579,582,585,589,591,594,597,600,603,606,609,612,615,618,621,625,628,630,633,636,639,642,645,648,651,654,657,660,663,667,669,672,675,678,681,684,686,689,692,696,699,702,705,708,711,714,717,720,723,726,729,732,735,738,741,744,747,750,753,756,759,762,765,768,771,775,778,781,784,786,789,792,795,798,801,804,807,810,813,816,819,822,825,828,831,834,837],{"date":569,"score":570,"percentile":571},"2026-03-04",0.0004,0.1181,{"date":573,"score":570,"percentile":574},"2026-03-05",0.11844,{"date":576,"score":577,"percentile":578},"2026-03-06",0.00034,0.09505,{"date":580,"score":577,"percentile":581},"2026-03-07",0.0951,{"date":583,"score":577,"percentile":584},"2026-03-08",0.09473,{"date":586,"score":587,"percentile":588},"2026-03-09",0.00044,0.13239,{"date":590,"score":587,"percentile":588},"2026-03-10",{"date":592,"score":587,"percentile":593},"2026-03-11",0.13269,{"date":595,"score":587,"percentile":596},"2026-03-12",0.1332,{"date":598,"score":587,"percentile":599},"2026-03-13",0.13321,{"date":601,"score":587,"percentile":602},"2026-03-14",0.13323,{"date":604,"score":587,"percentile":605},"2026-03-15",0.1329,{"date":607,"score":587,"percentile":608},"2026-03-16",0.13237,{"date":610,"score":587,"percentile":611},"2026-03-17",0.13215,{"date":613,"score":587,"percentile":614},"2026-03-18",0.13227,{"date":616,"score":587,"percentile":617},"2026-03-19",0.13231,{"date":619,"score":587,"percentile":620},"2026-03-20",0.13306,{"date":622,"score":623,"percentile":624},"2026-03-21",0.00014,0.0261,{"date":626,"score":623,"percentile":627},"2026-03-22",0.02612,{"date":629,"score":623,"percentile":624},"2026-03-23",{"date":631,"score":623,"percentile":632},"2026-03-24",0.02603,{"date":634,"score":623,"percentile":635},"2026-03-25",0.02602,{"date":637,"score":623,"percentile":638},"2026-03-26",0.02607,{"date":640,"score":623,"percentile":641},"2026-03-27",0.02618,{"date":643,"score":623,"percentile":644},"2026-03-28",0.02619,{"date":646,"score":623,"percentile":647},"2026-03-29",0.02611,{"date":649,"score":623,"percentile":650},"2026-03-30",0.026,{"date":652,"score":623,"percentile":653},"2026-03-31",0.02587,{"date":655,"score":623,"percentile":656},"2026-04-01",0.02588,{"date":658,"score":623,"percentile":659},"2026-04-02",0.02659,{"date":661,"score":623,"percentile":662},"2026-04-03",0.02673,{"date":664,"score":665,"percentile":666},"2026-04-04",0.00016,0.03376,{"date":668,"score":665,"percentile":666},"2026-04-05",{"date":670,"score":665,"percentile":671},"2026-04-06",0.03386,{"date":673,"score":665,"percentile":674},"2026-04-07",0.03393,{"date":676,"score":665,"percentile":677},"2026-04-08",0.03396,{"date":679,"score":665,"percentile":680},"2026-04-09",0.03418,{"date":682,"score":665,"percentile":683},"2026-04-10",0.03411,{"date":685,"score":665,"percentile":666},"2026-04-11",{"date":687,"score":665,"percentile":688},"2026-04-12",0.03348,{"date":690,"score":665,"percentile":691},"2026-04-13",0.03325,{"date":693,"score":694,"percentile":695},"2026-04-14",0.00021,0.05579,{"date":697,"score":694,"percentile":698},"2026-04-15",0.05584,{"date":700,"score":694,"percentile":701},"2026-04-16",0.05595,{"date":703,"score":694,"percentile":704},"2026-04-17",0.05605,{"date":706,"score":694,"percentile":707},"2026-04-18",0.05608,{"date":709,"score":694,"percentile":710},"2026-04-19",0.05587,{"date":712,"score":694,"percentile":713},"2026-04-20",0.05588,{"date":715,"score":694,"percentile":716},"2026-04-21",0.05764,{"date":718,"score":694,"percentile":719},"2026-04-22",0.05775,{"date":721,"score":694,"percentile":722},"2026-04-23",0.05797,{"date":724,"score":694,"percentile":725},"2026-04-24",0.05795,{"date":727,"score":694,"percentile":728},"2026-04-25",0.05836,{"date":730,"score":694,"percentile":731},"2026-04-26",0.05832,{"date":733,"score":694,"percentile":734},"2026-04-27",0.05824,{"date":736,"score":694,"percentile":737},"2026-04-28",0.05822,{"date":739,"score":694,"percentile":740},"2026-04-29",0.05841,{"date":742,"score":694,"percentile":743},"2026-04-30",0.05846,{"date":745,"score":694,"percentile":746},"2026-05-01",0.05845,{"date":748,"score":694,"percentile":749},"2026-05-02",0.05868,{"date":751,"score":694,"percentile":752},"2026-05-03",0.05867,{"date":754,"score":694,"percentile":755},"2026-05-04",0.05854,{"date":757,"score":694,"percentile":758},"2026-05-05",0.05851,{"date":760,"score":694,"percentile":761},"2026-05-06",0.05871,{"date":763,"score":694,"percentile":764},"2026-05-07",0.0594,{"date":766,"score":694,"percentile":767},"2026-05-08",0.05953,{"date":769,"score":694,"percentile":770},"2026-05-09",0.05995,{"date":772,"score":773,"percentile":774},"2026-05-10",0.00022,0.06305,{"date":776,"score":773,"percentile":777},"2026-05-11",0.06301,{"date":779,"score":773,"percentile":780},"2026-05-12",0.06303,{"date":782,"score":773,"percentile":783},"2026-05-13",0.0631,{"date":785,"score":773,"percentile":783},"2026-05-14",{"date":787,"score":773,"percentile":788},"2026-05-15",0.06313,{"date":790,"score":773,"percentile":791},"2026-05-16",0.06326,{"date":793,"score":773,"percentile":794},"2026-05-17",0.06319,{"date":796,"score":773,"percentile":797},"2026-05-18",0.06279,{"date":799,"score":773,"percentile":800},"2026-05-19",0.06255,{"date":802,"score":773,"percentile":803},"2026-05-20",0.06219,{"date":805,"score":773,"percentile":806},"2026-05-21",0.0622,{"date":808,"score":773,"percentile":809},"2026-05-22",0.06458,{"date":811,"score":773,"percentile":812},"2026-05-23",0.0646,{"date":814,"score":773,"percentile":815},"2026-05-24",0.06462,{"date":817,"score":773,"percentile":818},"2026-05-25",0.06441,{"date":820,"score":773,"percentile":821},"2026-05-26",0.06419,{"date":823,"score":773,"percentile":824},"2026-05-27",0.06454,{"date":826,"score":773,"percentile":827},"2026-05-28",0.06546,{"date":829,"score":773,"percentile":830},"2026-05-29",0.06567,{"date":832,"score":773,"percentile":833},"2026-05-30",0.06556,{"date":835,"score":773,"percentile":836},"2026-05-31",0.06538,{"date":838,"score":773,"percentile":839},"2026-06-01",0.06507,[841,844,853,856,859,861,863],{"source":493,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":842},{"baseScore":491,"baseSeverity":843,"vectorString":494,"impactScore":9,"exploitabilityScore":9},"HIGH",{"source":498,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":845,"cvss_v4_0":851},{"baseScore":846,"baseSeverity":847,"vectorString":848,"impactScore":849,"exploitabilityScore":850},5.9,"MEDIUM","CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",6,5.6,{"baseScore":491,"baseSeverity":843,"vectorString":852,"impactScore":9,"exploitabilityScore":9},"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",{"source":499,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":854,"cvss_v4_0":855},{"baseScore":846,"baseSeverity":9,"vectorString":848,"impactScore":849,"exploitabilityScore":850},{"baseScore":491,"baseSeverity":9,"vectorString":494,"impactScore":9,"exploitabilityScore":9},{"source":500,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":857,"cvss_v4_0":858},{"baseScore":846,"baseSeverity":9,"vectorString":848,"impactScore":849,"exploitabilityScore":850},{"baseScore":491,"baseSeverity":9,"vectorString":494,"impactScore":9,"exploitabilityScore":9},{"source":557,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":860,"cvss_v4_0":9},{"baseScore":846,"baseSeverity":9,"vectorString":848,"impactScore":849,"exploitabilityScore":850},{"source":501,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":862},{"baseScore":491,"baseSeverity":9,"vectorString":494,"impactScore":9,"exploitabilityScore":9},{"source":502,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":864},{"baseScore":491,"baseSeverity":9,"vectorString":494,"impactScore":9,"exploitabilityScore":9},[866,880,886,892,896,902,908,912,917,921,925,929,933,937,941,947,951,957,966,970,976,982,987,990,993,996,1000,1003,1006,1009,1012,1015,1018,1021,1024,1028,1031,1043,1052,1059,1066],{"ecosystem":867,"name":868,"vendor":869,"product":868,"cpe_part":9,"purl_type":870,"purl_namespace":869,"purl_name":868,"source":9,"versions":871},"Chainguard","arangodb-3.11","chainguard","apk",[872,876],{"version":873,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all",true,"ecosystem",{"version":877,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":878,"version_end_type":879,"fixed_in":9},"lt3_11_14_5_r20","3.11.14.5-r20","excluding",{"ecosystem":867,"name":881,"vendor":869,"product":881,"cpe_part":9,"purl_type":870,"purl_namespace":869,"purl_name":881,"source":9,"versions":882},"arangodb-3.12",[883],{"version":884,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":885,"version_end_type":879,"fixed_in":9},"lt3_12_9_4_r29","3.12.9.4-r29",{"ecosystem":867,"name":887,"vendor":869,"product":887,"cpe_part":9,"purl_type":870,"purl_namespace":869,"purl_name":887,"source":9,"versions":888},"drupal-11.3",[889],{"version":890,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":891,"version_end_type":879,"fixed_in":9},"lt11_3_13_r3","11.3.13-r3",{"ecosystem":867,"name":893,"vendor":869,"product":893,"cpe_part":9,"purl_type":870,"purl_namespace":869,"purl_name":893,"source":9,"versions":894},"jupyter-base-notebook",[895],{"version":873,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":867,"name":897,"vendor":869,"product":897,"cpe_part":9,"purl_type":870,"purl_namespace":869,"purl_name":897,"source":9,"versions":898},"katib-earlystopping",[899],{"version":900,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":901,"version_end_type":879,"fixed_in":9},"lt0_19_0_r31","0.19.0-r31",{"ecosystem":867,"name":903,"vendor":869,"product":903,"cpe_part":9,"purl_type":870,"purl_namespace":869,"purl_name":903,"source":9,"versions":904},"katib-suggestion-goptuna-compat",[905],{"version":906,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":907,"version_end_type":879,"fixed_in":9},"lt0_19_0_r40","0.19.0-r40",{"ecosystem":867,"name":909,"vendor":869,"product":909,"cpe_part":9,"purl_type":870,"purl_namespace":869,"purl_name":909,"source":9,"versions":910},"katib-suggestion-hyperband",[911],{"version":900,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":901,"version_end_type":879,"fixed_in":9},{"ecosystem":867,"name":913,"vendor":869,"product":913,"cpe_part":9,"purl_type":870,"purl_namespace":869,"purl_name":913,"source":9,"versions":914},"katib-suggestion-hyperopt",[915,916],{"version":900,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":901,"version_end_type":879,"fixed_in":9},{"version":906,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":907,"version_end_type":879,"fixed_in":9},{"ecosystem":867,"name":918,"vendor":869,"product":918,"cpe_part":9,"purl_type":870,"purl_namespace":869,"purl_name":918,"source":9,"versions":919},"katib-suggestion-nas-darts",[920],{"version":900,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":901,"version_end_type":879,"fixed_in":9},{"ecosystem":867,"name":922,"vendor":869,"product":922,"cpe_part":9,"purl_type":870,"purl_namespace":869,"purl_name":922,"source":9,"versions":923},"katib-suggestion-nas-enas",[924],{"version":900,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":901,"version_end_type":879,"fixed_in":9},{"ecosystem":867,"name":926,"vendor":869,"product":926,"cpe_part":9,"purl_type":870,"purl_namespace":869,"purl_name":926,"source":9,"versions":927},"katib-suggestion-optuna-enas",[928],{"version":900,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":901,"version_end_type":879,"fixed_in":9},{"ecosystem":867,"name":930,"vendor":869,"product":930,"cpe_part":9,"purl_type":870,"purl_namespace":869,"purl_name":930,"source":9,"versions":931},"katib-suggestion-pbt-enas",[932],{"version":900,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":901,"version_end_type":879,"fixed_in":9},{"ecosystem":867,"name":934,"vendor":869,"product":934,"cpe_part":9,"purl_type":870,"purl_namespace":869,"purl_name":934,"source":9,"versions":935},"katib-suggestion-skopt-enas",[936],{"version":900,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":901,"version_end_type":879,"fixed_in":9},{"ecosystem":867,"name":938,"vendor":869,"product":938,"cpe_part":9,"purl_type":870,"purl_namespace":869,"purl_name":938,"source":9,"versions":939},"katib-tfevent-metricscollector",[940],{"version":900,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":901,"version_end_type":879,"fixed_in":9},{"ecosystem":867,"name":942,"vendor":869,"product":942,"cpe_part":9,"purl_type":870,"purl_namespace":869,"purl_name":942,"source":9,"versions":943},"kubeflow-centraldashboard",[944],{"version":945,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":946,"version_end_type":879,"fixed_in":9},"lt1_10_0_r13","1.10.0-r13",{"ecosystem":867,"name":948,"vendor":869,"product":948,"cpe_part":9,"purl_type":870,"purl_namespace":869,"purl_name":948,"source":9,"versions":949},"nextcloud-server-31",[950],{"version":873,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":867,"name":952,"vendor":869,"product":952,"cpe_part":9,"purl_type":870,"purl_namespace":869,"purl_name":952,"source":9,"versions":953},"prism",[954],{"version":955,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":956,"version_end_type":879,"fixed_in":9},"lt5_14_3_r9","5.14.3-r9",{"ecosystem":867,"name":958,"vendor":869,"product":958,"cpe_part":9,"purl_type":870,"purl_namespace":869,"purl_name":958,"source":9,"versions":959},"renovate",[960,963],{"version":961,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":962,"version_end_type":879,"fixed_in":9},"lt43_55_3_r0","43.55.3-r0",{"version":964,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":965,"version_end_type":879,"fixed_in":9},"lt43_55_6_r0","43.55.6-r0",{"ecosystem":867,"name":967,"vendor":869,"product":967,"cpe_part":9,"purl_type":870,"purl_namespace":869,"purl_name":967,"source":9,"versions":968},"vitess-21",[969],{"version":873,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":867,"name":971,"vendor":869,"product":971,"cpe_part":9,"purl_type":870,"purl_namespace":869,"purl_name":971,"source":9,"versions":972},"vitess-22",[973],{"version":974,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":975,"version_end_type":879,"fixed_in":9},"lt22_0_4_r5","22.0.4-r5",{"ecosystem":867,"name":977,"vendor":869,"product":977,"cpe_part":9,"purl_type":870,"purl_namespace":869,"purl_name":977,"source":9,"versions":978},"vitess-23",[979],{"version":980,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":981,"version_end_type":879,"fixed_in":9},"lt23_0_3_r6","23.0.3-r6",{"ecosystem":983,"name":893,"vendor":984,"product":893,"cpe_part":9,"purl_type":870,"purl_namespace":984,"purl_name":893,"source":9,"versions":985},"Wolfi","wolfi",[986],{"version":873,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":983,"name":897,"vendor":984,"product":897,"cpe_part":9,"purl_type":870,"purl_namespace":984,"purl_name":897,"source":9,"versions":988},[989],{"version":900,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":901,"version_end_type":879,"fixed_in":9},{"ecosystem":983,"name":903,"vendor":984,"product":903,"cpe_part":9,"purl_type":870,"purl_namespace":984,"purl_name":903,"source":9,"versions":991},[992],{"version":906,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":907,"version_end_type":879,"fixed_in":9},{"ecosystem":983,"name":909,"vendor":984,"product":909,"cpe_part":9,"purl_type":870,"purl_namespace":984,"purl_name":909,"source":9,"versions":994},[995],{"version":900,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":901,"version_end_type":879,"fixed_in":9},{"ecosystem":983,"name":913,"vendor":984,"product":913,"cpe_part":9,"purl_type":870,"purl_namespace":984,"purl_name":913,"source":9,"versions":997},[998,999],{"version":900,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":901,"version_end_type":879,"fixed_in":9},{"version":906,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":907,"version_end_type":879,"fixed_in":9},{"ecosystem":983,"name":918,"vendor":984,"product":918,"cpe_part":9,"purl_type":870,"purl_namespace":984,"purl_name":918,"source":9,"versions":1001},[1002],{"version":900,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":901,"version_end_type":879,"fixed_in":9},{"ecosystem":983,"name":922,"vendor":984,"product":922,"cpe_part":9,"purl_type":870,"purl_namespace":984,"purl_name":922,"source":9,"versions":1004},[1005],{"version":900,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":901,"version_end_type":879,"fixed_in":9},{"ecosystem":983,"name":926,"vendor":984,"product":926,"cpe_part":9,"purl_type":870,"purl_namespace":984,"purl_name":926,"source":9,"versions":1007},[1008],{"version":900,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":901,"version_end_type":879,"fixed_in":9},{"ecosystem":983,"name":930,"vendor":984,"product":930,"cpe_part":9,"purl_type":870,"purl_namespace":984,"purl_name":930,"source":9,"versions":1010},[1011],{"version":900,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":901,"version_end_type":879,"fixed_in":9},{"ecosystem":983,"name":934,"vendor":984,"product":934,"cpe_part":9,"purl_type":870,"purl_namespace":984,"purl_name":934,"source":9,"versions":1013},[1014],{"version":900,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":901,"version_end_type":879,"fixed_in":9},{"ecosystem":983,"name":938,"vendor":984,"product":938,"cpe_part":9,"purl_type":870,"purl_namespace":984,"purl_name":938,"source":9,"versions":1016},[1017],{"version":900,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":901,"version_end_type":879,"fixed_in":9},{"ecosystem":983,"name":942,"vendor":984,"product":942,"cpe_part":9,"purl_type":870,"purl_namespace":984,"purl_name":942,"source":9,"versions":1019},[1020],{"version":945,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":946,"version_end_type":879,"fixed_in":9},{"ecosystem":983,"name":952,"vendor":984,"product":952,"cpe_part":9,"purl_type":870,"purl_namespace":984,"purl_name":952,"source":9,"versions":1022},[1023],{"version":955,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":956,"version_end_type":879,"fixed_in":9},{"ecosystem":983,"name":958,"vendor":984,"product":958,"cpe_part":9,"purl_type":870,"purl_namespace":984,"purl_name":958,"source":9,"versions":1025},[1026,1027],{"version":961,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":962,"version_end_type":879,"fixed_in":9},{"version":964,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":965,"version_end_type":879,"fixed_in":9},{"ecosystem":983,"name":977,"vendor":984,"product":977,"cpe_part":9,"purl_type":870,"purl_namespace":984,"purl_name":977,"source":9,"versions":1029},[1030],{"version":980,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":981,"version_end_type":879,"fixed_in":9},{"ecosystem":1032,"name":1033,"vendor":1034,"product":1033,"cpe_part":9,"purl_type":1035,"purl_namespace":1034,"purl_name":1033,"source":9,"versions":1036},"Debian","underscore","debian","deb",[1037,1038,1039,1040],{"version":873,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":873,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":873,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":1041,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":1042,"version_end_type":879,"fixed_in":9},"lt1_13_8~dfsg+~1_13_0_1","1.13.8~dfsg+~1.13.0-1",{"ecosystem":1044,"name":1045,"vendor":1046,"product":1045,"cpe_part":9,"purl_type":1035,"purl_namespace":1046,"purl_name":1045,"source":9,"versions":1047},"Ubuntu","ruby-rails-assets-underscore","ubuntu",[1048,1049,1050,1051],{"version":873,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":873,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":873,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":873,"is_range":874,"range_type":875,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":9,"name":1033,"vendor":1053,"product":1033,"cpe_part":1054,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":1055},"jashkenas","a",[1056],{"version":1057,"is_range":874,"range_type":493,"version_start":9,"version_start_type":9,"version_end":1058,"version_end_type":879,"fixed_in":9},"\u003C 1.13.8","1.13.8",{"ecosystem":1060,"name":1033,"vendor":1060,"product":1033,"cpe_part":9,"purl_type":1061,"purl_namespace":9,"purl_name":1033,"source":9,"versions":1062},"Npm","npm",[1063],{"version":1064,"is_range":874,"range_type":1065,"version_start":9,"version_start_type":9,"version_end":1058,"version_end_type":879,"fixed_in":9},"lt1_13_8","semver",{"ecosystem":9,"name":1033,"vendor":1067,"product":1033,"cpe_part":1054,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":1068},"underscorejs",[1069],{"version":1070,"is_range":874,"range_type":1071,"version_start":9,"version_start_type":9,"version_end":1058,"version_end_type":879,"fixed_in":9},"lt1.13.8","cpe"]