[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-33809":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-31T17:19:26.604Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":68,"aliases":69,"duplicate_of":9,"upstream":72,"downstream":73,"duplicates":92,"related":93,"reserved_at":9,"published_at":103,"modified_at":104,"state":105,"summary":106,"references_raw":115,"kevs":146,"epss":147,"epss_history":150,"metrics":419,"affected":429},"CVE-2026-33809","A maliciously crafted TIFF file can cause image decoding to attempt to allocate up 4GiB of memory, causing either excessive resource consumption or an out-of-memory error.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-434","Unrestricted Upload of File with Dangerous Type","The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.","weakness","Draft","Base","Medium",[20],{"id":21,"name":22,"techniques":23},"CAPEC-1","Accessing Functionality Not Properly Constrained by ACLs",[24],{"id":25,"name":26,"tactics":27,"countermeasures":43},"T1574.010","Services File Permissions Weakness",[28,31,34,37,40],{"id":29,"name":30},"TA0110","Persistence",{"id":32,"name":33},"TA0111","Privilege Escalation",{"id":35,"name":36},"TA0030","Defense Evasion",{"id":38,"name":39},"TA0005","Stealth",{"id":41,"name":42},"TA0104","Execution",[44,49,53,58,63],{"id":45,"name":46,"tactic":47},"D3-SWI","Software Inventory",{"name":48},"Model",{"id":50,"name":51,"tactic":52},"D3-AVE","Asset Vulnerability Enumeration",{"name":48},{"id":54,"name":55,"tactic":56},"D3-SBV","Service Binary Verification",{"name":57},"Detect",{"id":59,"name":60,"tactic":61},"D3-SU","Software Update",{"name":62},"Harden",{"id":64,"name":65,"tactic":66},"D3-RS","Restore Software",{"name":67},"Restore",[],[70,71],"GO-2026-4815","GHSA-44p7-9xx4-hf2g",[],[74,76,78,80,82,84,86,88,90],{"_key":75},"SUSE-SU-2026:1135-1",{"_key":77},"OPENSUSE-SU-2026:10628-1",{"_key":79},"UBUNTU-CVE-2026-33809",{"_key":81},"OPENSUSE-SU-2026:10856-1",{"_key":83},"DEBIAN-CVE-2026-33809",{"_key":85},"OPENSUSE-SU-2026:20963-1",{"_key":87},"RHSA-2026:7291",{"_key":89},"RHSA-2026:7385",{"_key":91},"OPENSUSE-SU-2026:11290-1",[],[94,95,96,97,98,99,100,101],{"_key":75},{"_key":77},{"_key":87},{"_key":89},{"_key":81},{"_key":85},{"_key":91},{"_key":102},"CGA-F77H-3R3H-H42J","2026-03-25T18:24:04.222Z","2026-04-06T21:12:56.092Z","Analyzed",{"cisa_kev":107,"cisa_ransomware":107,"cisa_vendor":9,"epss_severity":108,"epss_score":109,"severity":110,"severity_score":111,"severity_version":112,"severity_source":113,"severity_vector":114,"severity_status":105},false,"low",0.00328,"medium",5.3,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",[116,125,131,136,141],{"url":117,"sources":118,"tags":121},"https://go.dev/cl/757660",[113,119,120],"nvd","osv_go",[122,123,124],"FIX","WEB","Mailing List",{"url":126,"sources":127,"tags":128},"https://go.dev/issue/78267",[113,119,120],[129,123,130],"REPORT","Issue Tracking",{"url":132,"sources":133,"tags":134},"https://pkg.go.dev/vuln/GO-2026-4815",[113,119,120],[123,135],"Vendor Advisory",{"url":137,"sources":138,"tags":139},"https://nvd.nist.gov/vuln/detail/CVE-2026-33809",[120],[140],"Advisory",{"url":142,"sources":143,"tags":144},"https://cs.opensource.google/go/x/image",[120],[145],"PACKAGE",[],{"date":148,"score":109,"percentile":149},"2026-07-05",0.2472,[151,155,158,161,164,167,171,174,177,180,183,186,189,192,195,198,201,204,207,210,213,216,219,222,225,228,231,235,239,242,245,248,251,254,257,260,263,266,269,272,275,278,281,283,286,289,291,294,297,300,303,306,308,311,314,317,320,323,326,329,332,335,338,341,343,346,349,352,356,359,362,364,367,370,373,376,379,382,385,387,389,392,395,398,401,404,407,410,413,416],{"date":152,"score":153,"percentile":154},"2026-03-26",0.00027,0.07594,{"date":156,"score":153,"percentile":157},"2026-03-27",0.07585,{"date":159,"score":153,"percentile":160},"2026-03-28",0.0759,{"date":162,"score":153,"percentile":163},"2026-03-29",0.07577,{"date":165,"score":153,"percentile":166},"2026-03-30",0.07555,{"date":168,"score":169,"percentile":170},"2026-03-31",0.00036,0.10466,{"date":172,"score":169,"percentile":173},"2026-04-01",0.10459,{"date":175,"score":169,"percentile":176},"2026-04-02",0.10602,{"date":178,"score":169,"percentile":179},"2026-04-03",0.10625,{"date":181,"score":169,"percentile":182},"2026-04-04",0.10663,{"date":184,"score":169,"percentile":185},"2026-04-05",0.10653,{"date":187,"score":169,"percentile":188},"2026-04-06",0.10525,{"date":190,"score":169,"percentile":191},"2026-04-07",0.10527,{"date":193,"score":169,"percentile":194},"2026-04-08",0.106,{"date":196,"score":169,"percentile":197},"2026-04-09",0.1066,{"date":199,"score":169,"percentile":200},"2026-04-10",0.10686,{"date":202,"score":169,"percentile":203},"2026-04-11",0.10673,{"date":205,"score":169,"percentile":206},"2026-04-12",0.10641,{"date":208,"score":169,"percentile":209},"2026-04-13",0.10616,{"date":211,"score":169,"percentile":212},"2026-04-14",0.10474,{"date":214,"score":169,"percentile":215},"2026-04-15",0.10494,{"date":217,"score":169,"percentile":218},"2026-04-16",0.10483,{"date":220,"score":169,"percentile":221},"2026-04-17",0.10498,{"date":223,"score":169,"percentile":224},"2026-04-18",0.10501,{"date":226,"score":169,"percentile":227},"2026-04-19",0.10468,{"date":229,"score":169,"percentile":230},"2026-04-20",0.10458,{"date":232,"score":233,"percentile":234},"2026-04-21",0.00012,0.01594,{"date":236,"score":237,"percentile":238},"2026-04-22",0.00011,0.01531,{"date":240,"score":237,"percentile":241},"2026-04-23",0.01539,{"date":243,"score":237,"percentile":244},"2026-04-24",0.01533,{"date":246,"score":237,"percentile":247},"2026-04-25",0.01532,{"date":249,"score":233,"percentile":250},"2026-04-26",0.01909,{"date":252,"score":233,"percentile":253},"2026-04-27",0.01919,{"date":255,"score":233,"percentile":256},"2026-04-28",0.01929,{"date":258,"score":233,"percentile":259},"2026-04-29",0.01944,{"date":261,"score":233,"percentile":262},"2026-04-30",0.0191,{"date":264,"score":233,"percentile":265},"2026-05-01",0.01905,{"date":267,"score":233,"percentile":268},"2026-05-02",0.01898,{"date":270,"score":233,"percentile":271},"2026-05-03",0.01899,{"date":273,"score":233,"percentile":274},"2026-05-04",0.01894,{"date":276,"score":233,"percentile":277},"2026-05-05",0.01891,{"date":279,"score":233,"percentile":280},"2026-05-06",0.01878,{"date":282,"score":233,"percentile":280},"2026-05-07",{"date":284,"score":233,"percentile":285},"2026-05-08",0.01885,{"date":287,"score":233,"percentile":288},"2026-05-09",0.01901,{"date":290,"score":233,"percentile":288},"2026-05-10",{"date":292,"score":233,"percentile":293},"2026-05-11",0.01902,{"date":295,"score":233,"percentile":296},"2026-05-12",0.01874,{"date":298,"score":233,"percentile":299},"2026-05-13",0.01883,{"date":301,"score":233,"percentile":302},"2026-05-14",0.01882,{"date":304,"score":233,"percentile":305},"2026-05-15",0.01881,{"date":307,"score":233,"percentile":302},"2026-05-16",{"date":309,"score":233,"percentile":310},"2026-05-17",0.0188,{"date":312,"score":233,"percentile":313},"2026-05-18",0.01865,{"date":315,"score":233,"percentile":316},"2026-05-19",0.01856,{"date":318,"score":233,"percentile":319},"2026-05-20",0.0185,{"date":321,"score":233,"percentile":322},"2026-05-21",0.01841,{"date":324,"score":233,"percentile":325},"2026-05-22",0.01969,{"date":327,"score":233,"percentile":328},"2026-05-23",0.01966,{"date":330,"score":233,"percentile":331},"2026-05-24",0.01964,{"date":333,"score":233,"percentile":334},"2026-05-25",0.01951,{"date":336,"score":233,"percentile":337},"2026-05-26",0.01942,{"date":339,"score":233,"percentile":340},"2026-05-27",0.01956,{"date":342,"score":233,"percentile":334},"2026-05-28",{"date":344,"score":233,"percentile":345},"2026-05-29",0.0196,{"date":347,"score":233,"percentile":348},"2026-05-30",0.01984,{"date":350,"score":233,"percentile":351},"2026-05-31",0.01978,{"date":353,"score":354,"percentile":355},"2026-06-01",0.00013,0.0216,{"date":357,"score":354,"percentile":358},"2026-06-02",0.02154,{"date":360,"score":354,"percentile":361},"2026-06-03",0.02135,{"date":363,"score":354,"percentile":361},"2026-06-04",{"date":365,"score":354,"percentile":366},"2026-06-05",0.02151,{"date":368,"score":354,"percentile":369},"2026-06-06",0.02157,{"date":371,"score":354,"percentile":372},"2026-06-07",0.02144,{"date":374,"score":354,"percentile":375},"2026-06-08",0.02132,{"date":377,"score":354,"percentile":378},"2026-06-09",0.02127,{"date":380,"score":354,"percentile":381},"2026-06-10",0.02129,{"date":383,"score":354,"percentile":384},"2026-06-11",0.02125,{"date":386,"score":354,"percentile":381},"2026-06-12",{"date":388,"score":354,"percentile":384},"2026-06-13",{"date":390,"score":354,"percentile":391},"2026-06-14",0.02134,{"date":393,"score":109,"percentile":394},"2026-06-15",0.24348,{"date":396,"score":109,"percentile":397},"2026-06-16",0.24379,{"date":399,"score":109,"percentile":400},"2026-06-17",0.24399,{"date":402,"score":109,"percentile":403},"2026-06-18",0.2442,{"date":405,"score":109,"percentile":406},"2026-06-19",0.24412,{"date":408,"score":109,"percentile":409},"2026-06-20",0.24401,{"date":411,"score":109,"percentile":412},"2026-06-21",0.24383,{"date":414,"score":109,"percentile":415},"2026-06-22",0.24357,{"date":417,"score":109,"percentile":418},"2026-06-23",0.24428,[420,425,427],{"source":113,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":421,"cvss_v4_0":9},{"baseScore":111,"baseSeverity":422,"vectorString":114,"impactScore":423,"exploitabilityScore":424},"MEDIUM",2.3,10,{"source":119,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":426,"cvss_v4_0":9},{"baseScore":111,"baseSeverity":422,"vectorString":114,"impactScore":423,"exploitabilityScore":424},{"source":120,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":428,"cvss_v4_0":9},{"baseScore":111,"baseSeverity":9,"vectorString":114,"impactScore":423,"exploitabilityScore":424},[430,443,450],{"ecosystem":431,"name":432,"vendor":433,"product":434,"cpe_part":9,"purl_type":435,"purl_namespace":433,"purl_name":434,"source":9,"versions":436},"Go","golang.org/x/image","golang.org/x","image","golang",[437],{"version":438,"is_range":439,"range_type":440,"version_start":9,"version_start_type":9,"version_end":441,"version_end_type":442,"fixed_in":9},"lt0_38_0",true,"semver","0.38.0","excluding",{"ecosystem":9,"name":444,"vendor":435,"product":444,"cpe_part":445,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":446},"tiff","a",[447],{"version":448,"is_range":439,"range_type":449,"version_start":9,"version_start_type":9,"version_end":441,"version_end_type":442,"fixed_in":9},"lt0.38.0","cpe",{"ecosystem":9,"name":451,"vendor":432,"product":451,"cpe_part":445,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":452},"golang.org/x/image/tiff",[453],{"version":454,"is_range":439,"range_type":113,"version_start":9,"version_start_type":9,"version_end":441,"version_end_type":442,"fixed_in":9},"\u003C 0.38.0"]