[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-34183":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T11:35:27.363Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":31,"aliases":32,"duplicate_of":9,"upstream":50,"downstream":51,"duplicates":73,"related":74,"reserved_at":9,"published_at":83,"modified_at":84,"state":85,"summary":86,"references_raw":95,"kevs":171,"epss":172,"epss_history":175,"metrics":450,"affected":468},"CVE-2026-34183","Issue summary: Remote peer may exhaust heap memory of the QUIC\nserver or client by flooding it with packets containing PATH_CHALLENGE\nframes.\n\nImpact summary: A malicious remote peer can cause an unbounded\nmemory allocation which can lead to an abnormal termination of the\napplication acting as a QUIC client or server and a Denial of Service.\n\nA remote peer may exhaust heap memory by flooding the local\nQUIC stack with PATH_CHALLENGE frames. The local QUIC stack\nallocates a PATH_RESPONSE frame for every PATH_CHALLENGE it receives.\nThe allocated PATH_RESPONSE frame gets freed only when the remote\npeer acknowledges reception of the PATH_RESPONSE frame which will\nnot be done by a malicious peer.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by\nthis issue. The QUIC stack is outside of OpenSSL FIPS module\nboundary.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-1325","Improperly Controlled Sequential Memory Allocation","The product manages a group of objects or resources and performs a separate memory allocation for each object, but it does not properly limit the total amount of memory that is consumed by all of the combined objects.","weakness","Incomplete","Base",[19],{"id":20,"name":21,"techniques":22},"CAPEC-130","Excessive Allocation",[23],{"id":24,"name":25,"tactics":26,"countermeasures":30},"T1499.003","Application Exhaustion Flood",[27],{"id":28,"name":29},"TA0105","Impact",[],[],[33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49],"DEBIAN-CVE-2026-34183","UBUNTU-CVE-2026-34183","ALPINE-CVE-2026-34183","CGA-9w75-pmjm-p5h6","CGA-cgmc-p8cj-mrp4","CGA-gf4j-vjfp-8c3m","CGA-25ph-76w6-rw82","CGA-64cx-62gf-m7qr","CGA-8g4c-pxp7-29j2","CGA-9fpx-w258-fxfw","CGA-c4h5-ffj2-fcpv","CGA-h94v-mr54-vjhf","CGA-jrq6-26mq-x8rv","CGA-pm63-f339-8349","CGA-vf4m-mv9q-p3qv","CGA-wcf4-gr66-vqx4","CGA-xm6c-wcqr-7hgw",[],[52,54,56,57,59,60,62,64,65,67,69,71],{"_key":53},"USN-8414-1",{"_key":55},"OPENSUSE-SU-2026:11023-1",{"_key":33},{"_key":58},"SUSE-SU-2026:2648-1",{"_key":35},{"_key":61},"SUSE-SU-2026:22251-1",{"_key":63},"SUSE-SU-2026:22315-1",{"_key":34},{"_key":66},"OPENSUSE-SU-2026:21005-1",{"_key":68},"MGASA-2026-0253",{"_key":70},"RHSA-2026:25237",{"_key":72},"RHSA-2026:25239",[],[75,76,77,78,79,80,81],{"_key":55},{"_key":58},{"_key":61},{"_key":63},{"_key":66},{"_key":53},{"_key":82},"CGA-VGVW-4GRV-5FJC","2026-06-09T16:03:23.623Z","2026-06-10T15:51:12.557Z","Analyzed",{"cisa_kev":87,"cisa_ransomware":87,"cisa_vendor":9,"epss_severity":88,"epss_score":89,"severity":90,"severity_score":91,"severity_version":92,"severity_source":93,"severity_vector":94,"severity_status":85},false,"low",0.01049,"high",7.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",[96,107,112,116,120,124,129,133,137,141,146,150,154,158,163,167],{"url":97,"sources":98,"tags":103},"https://openssl-library.org/news/secadv/20260609.txt",[93,99,100,101,102],"nvd","osv_ubuntu","osv_wolfi","osv_chainguard",[104,105,106],"Vendor Advisory","REPORT","Advisory",{"url":108,"sources":109,"tags":110},"https://github.com/openssl/security/commit/fbaa83859c01ad64f497b757aaf51be7d05ed9eb",[93,99],[111],"Patch",{"url":113,"sources":114,"tags":115},"https://github.com/openssl/security/commit/5b306efb0b3779dfdd0803b4afc9d08c91f11517",[93,99],[111],{"url":117,"sources":118,"tags":119},"https://github.com/openssl/security/commit/7d06955ebe0ecf8adfd4c1e92018586da47ef9ac",[93,99],[111],{"url":121,"sources":122,"tags":123},"https://github.com/openssl/security/commit/d2e9efbe4900a373227deb136e8665401404ffac",[93,99],[111],{"url":125,"sources":126,"tags":127},"https://github.com/openssl/openssl/commit/fbaa83859c01ad64f497b757aaf51be7d05ed9eb",[93,99,101,102],[111,128],"FIX",{"url":130,"sources":131,"tags":132},"https://github.com/openssl/openssl/commit/5b306efb0b3779dfdd0803b4afc9d08c91f11517",[93,99,101,102],[111,128],{"url":134,"sources":135,"tags":136},"https://github.com/openssl/openssl/commit/7d06955ebe0ecf8adfd4c1e92018586da47ef9ac",[93,99,101,102],[111,128],{"url":138,"sources":139,"tags":140},"https://github.com/openssl/openssl/commit/d2e9efbe4900a373227deb136e8665401404ffac",[93,99,101,102],[111,128],{"url":142,"sources":143,"tags":145},"https://security-tracker.debian.org/tracker/CVE-2026-34183",[144],"osv_debian",[106],{"url":147,"sources":148,"tags":149},"https://ubuntu.com/security/CVE-2026-34183",[100],[105],{"url":151,"sources":152,"tags":153},"https://www.cve.org/CVERecord?id=CVE-2026-34183",[100],[105],{"url":155,"sources":156,"tags":157},"https://ubuntu.com/security/notices/USN-8414-1",[100],[106],{"url":159,"sources":160,"tags":162},"https://security.alpinelinux.org/vuln/CVE-2026-34183",[161],"osv_alpine",[106],{"url":164,"sources":165,"tags":166},"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/34xxx/CVE-2026-34183.json",[101,102],[106],{"url":168,"sources":169,"tags":170},"https://nvd.nist.gov/vuln/detail/CVE-2026-34183",[101,102],[106],[],{"date":173,"score":89,"percentile":174},"2026-09-19",0.62757,[176,180,184,187,190,193,197,200,203,206,209,212,215,218,222,225,228,231,234,237,240,243,246,249,252,255,258,261,264,267,270,273,276,279,282,285,288,291,294,297,300,303,306,309,312,315,318,321,324,327,330,333,336,339,342,345,348,351,354,357,360,363,366,369,372,375,378,381,384,387,390,393,396,399,402,405,408,411,414,417,420,423,426,429,432,435,438,441,444,447],{"date":177,"score":178,"percentile":179},"2026-06-10",0.00016,0.03557,{"date":181,"score":182,"percentile":183},"2026-06-11",0.00038,0.11753,{"date":185,"score":182,"percentile":186},"2026-06-12",0.11839,{"date":188,"score":182,"percentile":189},"2026-06-13",0.11838,{"date":191,"score":182,"percentile":192},"2026-06-14",0.11814,{"date":194,"score":195,"percentile":196},"2026-06-15",0.00531,0.4043,{"date":198,"score":195,"percentile":199},"2026-06-16",0.40486,{"date":201,"score":195,"percentile":202},"2026-06-17",0.40564,{"date":204,"score":195,"percentile":205},"2026-06-18",0.40609,{"date":207,"score":195,"percentile":208},"2026-06-19",0.40603,{"date":210,"score":195,"percentile":211},"2026-06-20",0.40595,{"date":213,"score":195,"percentile":214},"2026-06-21",0.40581,{"date":216,"score":195,"percentile":217},"2026-06-22",0.40574,{"date":219,"score":220,"percentile":221},"2026-06-23",0.00511,0.39478,{"date":223,"score":220,"percentile":224},"2026-06-24",0.39513,{"date":226,"score":220,"percentile":227},"2026-06-25",0.39586,{"date":229,"score":220,"percentile":230},"2026-06-26",0.3963,{"date":232,"score":220,"percentile":233},"2026-06-27",0.39671,{"date":235,"score":220,"percentile":236},"2026-06-28",0.39658,{"date":238,"score":220,"percentile":239},"2026-06-29",0.39661,{"date":241,"score":220,"percentile":242},"2026-06-30",0.39641,{"date":244,"score":220,"percentile":245},"2026-07-01",0.39738,{"date":247,"score":220,"percentile":248},"2026-07-02",0.39772,{"date":250,"score":220,"percentile":251},"2026-07-03",0.39793,{"date":253,"score":220,"percentile":254},"2026-07-04",0.39815,{"date":256,"score":220,"percentile":257},"2026-07-05",0.39833,{"date":259,"score":220,"percentile":260},"2026-07-06",0.39837,{"date":262,"score":220,"percentile":263},"2026-07-07",0.39842,{"date":265,"score":220,"percentile":266},"2026-07-08",0.39854,{"date":268,"score":220,"percentile":269},"2026-07-09",0.39905,{"date":271,"score":220,"percentile":272},"2026-07-10",0.39938,{"date":274,"score":220,"percentile":275},"2026-07-11",0.3997,{"date":277,"score":220,"percentile":278},"2026-07-12",0.39964,{"date":280,"score":220,"percentile":281},"2026-07-13",0.3999,{"date":283,"score":220,"percentile":284},"2026-07-14",0.40005,{"date":286,"score":220,"percentile":287},"2026-07-15",0.40097,{"date":289,"score":220,"percentile":290},"2026-07-16",0.40132,{"date":292,"score":220,"percentile":293},"2026-07-17",0.40159,{"date":295,"score":220,"percentile":296},"2026-07-18",0.40175,{"date":298,"score":220,"percentile":299},"2026-07-19",0.40182,{"date":301,"score":220,"percentile":302},"2026-07-20",0.40249,{"date":304,"score":220,"percentile":305},"2026-07-21",0.40268,{"date":307,"score":220,"percentile":308},"2026-07-22",0.40487,{"date":310,"score":220,"percentile":311},"2026-07-23",0.40503,{"date":313,"score":89,"percentile":314},"2026-07-24",0.60684,{"date":316,"score":89,"percentile":317},"2026-07-25",0.60723,{"date":319,"score":89,"percentile":320},"2026-07-26",0.60717,{"date":322,"score":89,"percentile":323},"2026-07-27",0.60712,{"date":325,"score":89,"percentile":326},"2026-07-28",0.60755,{"date":328,"score":89,"percentile":329},"2026-07-29",0.60778,{"date":331,"score":89,"percentile":332},"2026-07-30",0.60841,{"date":334,"score":89,"percentile":335},"2026-07-31",0.60868,{"date":337,"score":89,"percentile":338},"2026-08-01",0.60879,{"date":340,"score":89,"percentile":341},"2026-08-02",0.60887,{"date":343,"score":89,"percentile":344},"2026-08-03",0.60896,{"date":346,"score":89,"percentile":347},"2026-08-04",0.6092,{"date":349,"score":89,"percentile":350},"2026-08-05",0.6095,{"date":352,"score":89,"percentile":353},"2026-08-06",0.60982,{"date":355,"score":89,"percentile":356},"2026-08-07",0.61025,{"date":358,"score":89,"percentile":359},"2026-08-08",0.61036,{"date":361,"score":89,"percentile":362},"2026-08-09",0.61031,{"date":364,"score":89,"percentile":365},"2026-08-10",0.61039,{"date":367,"score":89,"percentile":368},"2026-08-11",0.61106,{"date":370,"score":89,"percentile":371},"2026-08-12",0.61186,{"date":373,"score":89,"percentile":374},"2026-08-13",0.61221,{"date":376,"score":89,"percentile":377},"2026-08-14",0.61281,{"date":379,"score":89,"percentile":380},"2026-08-15",0.61371,{"date":382,"score":89,"percentile":383},"2026-08-16",0.61392,{"date":385,"score":89,"percentile":386},"2026-08-17",0.61395,{"date":388,"score":89,"percentile":389},"2026-08-18",0.6142,{"date":391,"score":89,"percentile":392},"2026-08-19",0.61569,{"date":394,"score":89,"percentile":395},"2026-08-20",0.61623,{"date":397,"score":89,"percentile":398},"2026-08-21",0.61665,{"date":400,"score":89,"percentile":401},"2026-08-22",0.6167,{"date":403,"score":89,"percentile":404},"2026-08-23",0.61171,{"date":406,"score":89,"percentile":407},"2026-08-24",0.61653,{"date":409,"score":89,"percentile":410},"2026-08-25",0.61673,{"date":412,"score":89,"percentile":413},"2026-08-26",0.61739,{"date":415,"score":89,"percentile":416},"2026-08-27",0.61778,{"date":418,"score":89,"percentile":419},"2026-08-28",0.61311,{"date":421,"score":89,"percentile":422},"2026-08-29",0.61341,{"date":424,"score":89,"percentile":425},"2026-08-30",0.61853,{"date":427,"score":89,"percentile":428},"2026-08-31",0.61855,{"date":430,"score":89,"percentile":431},"2026-09-01",0.61881,{"date":433,"score":89,"percentile":434},"2026-09-02",0.61922,{"date":436,"score":89,"percentile":437},"2026-09-03",0.61941,{"date":439,"score":89,"percentile":440},"2026-09-04",0.61966,{"date":442,"score":89,"percentile":443},"2026-09-05",0.61504,{"date":445,"score":89,"percentile":446},"2026-09-06",0.62015,{"date":448,"score":89,"percentile":449},"2026-09-07",0.62024,[451,456,458,460,462,464,466],{"source":93,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":452,"cvss_v4_0":9},{"baseScore":91,"baseSeverity":453,"vectorString":94,"impactScore":454,"exploitabilityScore":455},"HIGH",6,10,{"source":99,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":457,"cvss_v4_0":9},{"baseScore":91,"baseSeverity":453,"vectorString":94,"impactScore":454,"exploitabilityScore":455},{"source":144,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":459,"cvss_v4_0":9},{"baseScore":91,"baseSeverity":9,"vectorString":94,"impactScore":454,"exploitabilityScore":455},{"source":100,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":461,"cvss_v4_0":9},{"baseScore":91,"baseSeverity":9,"vectorString":94,"impactScore":454,"exploitabilityScore":455},{"source":161,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":463,"cvss_v4_0":9},{"baseScore":91,"baseSeverity":9,"vectorString":94,"impactScore":454,"exploitabilityScore":455},{"source":101,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":465,"cvss_v4_0":9},{"baseScore":91,"baseSeverity":9,"vectorString":94,"impactScore":454,"exploitabilityScore":455},{"source":102,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":467,"cvss_v4_0":9},{"baseScore":91,"baseSeverity":9,"vectorString":94,"impactScore":454,"exploitabilityScore":455},[469,488,496,500,503,509,513,517,521,526,529,540,548,552,556,564],{"ecosystem":470,"name":471,"vendor":472,"product":471,"cpe_part":9,"purl_type":473,"purl_namespace":472,"purl_name":471,"source":9,"versions":474},"Alpine Linux","openssl","alpine","apk",[475,483,486,487],{"version":476,"is_range":477,"range_type":478,"version_start":479,"version_start_type":480,"version_end":481,"version_end_type":482,"fixed_in":9},"gte3_4_0_lt3_3_7_r1",true,"ecosystem","3.4.0","including","3.3.7-r1","excluding",{"version":484,"is_range":477,"range_type":478,"version_start":479,"version_start_type":480,"version_end":485,"version_end_type":482,"fixed_in":9},"gte3_4_0_lt3_5_7_r0","3.5.7-r0",{"version":484,"is_range":477,"range_type":478,"version_start":479,"version_start_type":480,"version_end":485,"version_end_type":482,"fixed_in":9},{"version":484,"is_range":477,"range_type":478,"version_start":479,"version_start_type":480,"version_end":485,"version_end_type":482,"fixed_in":9},{"ecosystem":489,"name":490,"vendor":491,"product":490,"cpe_part":9,"purl_type":473,"purl_namespace":491,"purl_name":490,"source":9,"versions":492},"Chainguard","libcrypto3","chainguard",[493],{"version":494,"is_range":477,"range_type":478,"version_start":9,"version_start_type":9,"version_end":495,"version_end_type":482,"fixed_in":9},"lt3_6_3_r0","3.6.3-r0",{"ecosystem":489,"name":497,"vendor":491,"product":497,"cpe_part":9,"purl_type":473,"purl_namespace":491,"purl_name":497,"source":9,"versions":498},"libcrypto3-2.34",[499],{"version":494,"is_range":477,"range_type":478,"version_start":9,"version_start_type":9,"version_end":495,"version_end_type":482,"fixed_in":9},{"ecosystem":489,"name":471,"vendor":491,"product":471,"cpe_part":9,"purl_type":473,"purl_namespace":491,"purl_name":471,"source":9,"versions":501},[502],{"version":494,"is_range":477,"range_type":478,"version_start":9,"version_start_type":9,"version_end":495,"version_end_type":482,"fixed_in":9},{"ecosystem":489,"name":504,"vendor":491,"product":504,"cpe_part":9,"purl_type":473,"purl_namespace":491,"purl_name":504,"source":9,"versions":505},"openssl-provider-fips-3.4.0",[506],{"version":507,"is_range":477,"range_type":478,"version_start":9,"version_start_type":9,"version_end":508,"version_end_type":482,"fixed_in":9},"lt0","0",{"ecosystem":489,"name":510,"vendor":491,"product":510,"cpe_part":9,"purl_type":473,"purl_namespace":491,"purl_name":510,"source":9,"versions":511},"openssl-provider-fips-3.4.0-dbg",[512],{"version":507,"is_range":477,"range_type":478,"version_start":9,"version_start_type":9,"version_end":508,"version_end_type":482,"fixed_in":9},{"ecosystem":489,"name":514,"vendor":491,"product":514,"cpe_part":9,"purl_type":473,"purl_namespace":491,"purl_name":514,"source":9,"versions":515},"openssl-provider-fips-3.6.0",[516],{"version":507,"is_range":477,"range_type":478,"version_start":9,"version_start_type":9,"version_end":508,"version_end_type":482,"fixed_in":9},{"ecosystem":489,"name":518,"vendor":491,"product":518,"cpe_part":9,"purl_type":473,"purl_namespace":491,"purl_name":518,"source":9,"versions":519},"openssl-provider-fips-3.6.0-dbg",[520],{"version":507,"is_range":477,"range_type":478,"version_start":9,"version_start_type":9,"version_end":508,"version_end_type":482,"fixed_in":9},{"ecosystem":522,"name":490,"vendor":523,"product":490,"cpe_part":9,"purl_type":473,"purl_namespace":523,"purl_name":490,"source":9,"versions":524},"Wolfi","wolfi",[525],{"version":494,"is_range":477,"range_type":478,"version_start":9,"version_start_type":9,"version_end":495,"version_end_type":482,"fixed_in":9},{"ecosystem":522,"name":471,"vendor":523,"product":471,"cpe_part":9,"purl_type":473,"purl_namespace":523,"purl_name":471,"source":9,"versions":527},[528],{"version":494,"is_range":477,"range_type":478,"version_start":9,"version_start_type":9,"version_end":495,"version_end_type":482,"fixed_in":9},{"ecosystem":530,"name":471,"vendor":531,"product":471,"cpe_part":9,"purl_type":532,"purl_namespace":531,"purl_name":471,"source":9,"versions":533},"Debian","debian","deb",[534,537],{"version":535,"is_range":477,"range_type":478,"version_start":9,"version_start_type":9,"version_end":536,"version_end_type":482,"fixed_in":9},"lt3_5_6_1~deb13u2","3.5.6-1~deb13u2",{"version":538,"is_range":477,"range_type":478,"version_start":9,"version_start_type":9,"version_end":539,"version_end_type":482,"fixed_in":9},"lt3_6_3_1","3.6.3-1",{"ecosystem":541,"name":542,"vendor":543,"product":542,"cpe_part":9,"purl_type":532,"purl_namespace":543,"purl_name":542,"source":9,"versions":544},"Ubuntu","edk2","ubuntu",[545,547],{"version":546,"is_range":477,"range_type":478,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all",{"version":546,"is_range":477,"range_type":478,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":541,"name":549,"vendor":543,"product":549,"cpe_part":9,"purl_type":532,"purl_namespace":543,"purl_name":549,"source":9,"versions":550},"edk2-hwe",[551],{"version":546,"is_range":477,"range_type":478,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":541,"name":553,"vendor":543,"product":553,"cpe_part":9,"purl_type":532,"purl_namespace":543,"purl_name":553,"source":9,"versions":554},"nodejs",[555],{"version":546,"is_range":477,"range_type":478,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":541,"name":471,"vendor":543,"product":471,"cpe_part":9,"purl_type":532,"purl_namespace":543,"purl_name":471,"source":9,"versions":557},[558,561],{"version":559,"is_range":477,"range_type":478,"version_start":9,"version_start_type":9,"version_end":560,"version_end_type":482,"fixed_in":9},"lt3_5_3_1ubuntu3_4","3.5.3-1ubuntu3.4",{"version":562,"is_range":477,"range_type":478,"version_start":9,"version_start_type":9,"version_end":563,"version_end_type":482,"fixed_in":9},"lt3_5_5_1ubuntu3_2","3.5.5-1ubuntu3.2",{"ecosystem":9,"name":565,"vendor":471,"product":471,"cpe_part":566,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":567},"OpenSSL","a",[568,572,576,580,584],{"version":569,"is_range":477,"range_type":93,"version_start":570,"version_start_type":480,"version_end":571,"version_end_type":482,"fixed_in":9},">= 4.0.0, \u003C 4.0.1","4.0.0","4.0.1",{"version":573,"is_range":477,"range_type":574,"version_start":479,"version_start_type":480,"version_end":575,"version_end_type":482,"fixed_in":9},"gte3.4.0_lt3.4.6","cpe","3.4.6",{"version":577,"is_range":477,"range_type":574,"version_start":578,"version_start_type":480,"version_end":579,"version_end_type":482,"fixed_in":9},"gte3.5.0_lt3.5.7","3.5.0","3.5.7",{"version":581,"is_range":477,"range_type":574,"version_start":582,"version_start_type":480,"version_end":583,"version_end_type":482,"fixed_in":9},"gte3.6.0_lt3.6.3","3.6.0","3.6.3",{"version":570,"is_range":87,"range_type":574,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9}]