[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-35469":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-31T23:19:30.300Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":406,"aliases":407,"duplicate_of":9,"upstream":410,"downstream":411,"duplicates":454,"related":455,"reserved_at":9,"published_at":474,"modified_at":475,"state":476,"summary":477,"references_raw":486,"kevs":784,"epss":785,"epss_history":788,"metrics":1023,"affected":1038},"CVE-2026-35469","spdystream is a Go library for multiplexing streams over SPDY connections. In versions 0.5.0 and below, the SPDY/3 frame parser does not validate attacker-controlled counts and lengths before allocating memory. Three allocation paths are affected: the SETTINGS frame entry count, the header count in parseHeaderValueBlock, and individual header field sizes — all read as 32-bit integers and used directly as allocation sizes with no bounds checking. Because SPDY header blocks are zlib-compressed, a small on-the-wire payload can decompress into large attacker-controlled values. A remote peer that can send SPDY frames to a service using spdystream can exhaust process memory and cause an out-of-memory crash with a single crafted control frame. This issue has been fixed in version 0.5.1.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-770","Allocation of Resources Without Limits or Throttling","The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.","weakness","Incomplete","Base","High",[20,106,116,120,124,128,132,136,168,230,234,238,268,298,330,334,338,342,346,350],{"id":21,"name":22,"techniques":23},"CAPEC-125","Flooding",[24,78],{"id":25,"name":26,"tactics":27,"countermeasures":31},"T1498.001","Direct Network Flood",[28],{"id":29,"name":30},"TA0105","Impact",[32,37,41,45,49,53,57,61,65,69,74],{"id":33,"name":34,"tactic":35},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":36},"Detect",{"id":38,"name":39,"tactic":40},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":36},{"id":42,"name":43,"tactic":44},"D3-CSPP","Client-server Payload Profiling",{"name":36},{"id":46,"name":47,"tactic":48},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":36},{"id":50,"name":51,"tactic":52},"D3-NTSA","Network Traffic Signature Analysis",{"name":36},{"id":54,"name":55,"tactic":56},"D3-APCA","Application Protocol Command Analysis",{"name":36},{"id":58,"name":59,"tactic":60},"D3-NTCD","Network Traffic Community Deviation",{"name":36},{"id":62,"name":63,"tactic":64},"D3-RTSD","Remote Terminal Session Detection",{"name":36},{"id":66,"name":67,"tactic":68},"D3-ISVA","Inbound Session Volume Analysis",{"name":36},{"id":70,"name":71,"tactic":72},"D3-NTF","Network Traffic Filtering",{"name":73},"Isolate",{"id":75,"name":76,"tactic":77},"D3-ITF","Inbound Traffic Filtering",{"name":73},{"id":79,"name":80,"tactics":81,"countermeasures":83},"T1499","Endpoint Denial of Service",[82],{"id":29,"name":30},[84,86,88,90,92,94,96,98,100,102,104],{"id":33,"name":34,"tactic":85},{"name":36},{"id":38,"name":39,"tactic":87},{"name":36},{"id":42,"name":43,"tactic":89},{"name":36},{"id":46,"name":47,"tactic":91},{"name":36},{"id":50,"name":51,"tactic":93},{"name":36},{"id":54,"name":55,"tactic":95},{"name":36},{"id":58,"name":59,"tactic":97},{"name":36},{"id":62,"name":63,"tactic":99},{"name":36},{"id":66,"name":67,"tactic":101},{"name":36},{"id":70,"name":71,"tactic":103},{"name":73},{"id":75,"name":76,"tactic":105},{"name":73},{"id":107,"name":108,"techniques":109},"CAPEC-130","Excessive Allocation",[110],{"id":111,"name":112,"tactics":113,"countermeasures":115},"T1499.003","Application Exhaustion Flood",[114],{"id":29,"name":30},[],{"id":117,"name":118,"techniques":119},"CAPEC-147","XML Ping of the Death",[],{"id":121,"name":122,"techniques":123},"CAPEC-197","Exponential Data Expansion",[],{"id":125,"name":126,"techniques":127},"CAPEC-229","Serialized Data Parameter Blowup",[],{"id":129,"name":130,"techniques":131},"CAPEC-230","Serialized Data with Nested Payloads",[],{"id":133,"name":134,"techniques":135},"CAPEC-231","Oversized Serialized Data Payloads",[],{"id":137,"name":138,"techniques":139},"CAPEC-469","HTTP DoS",[140],{"id":141,"name":142,"tactics":143,"countermeasures":145},"T1499.002","Service Exhaustion Flood",[144],{"id":29,"name":30},[146,148,150,152,154,156,158,160,162,164,166],{"id":33,"name":34,"tactic":147},{"name":36},{"id":38,"name":39,"tactic":149},{"name":36},{"id":42,"name":43,"tactic":151},{"name":36},{"id":46,"name":47,"tactic":153},{"name":36},{"id":50,"name":51,"tactic":155},{"name":36},{"id":54,"name":55,"tactic":157},{"name":36},{"id":58,"name":59,"tactic":159},{"name":36},{"id":62,"name":63,"tactic":161},{"name":36},{"id":66,"name":67,"tactic":163},{"name":36},{"id":70,"name":71,"tactic":165},{"name":73},{"id":75,"name":76,"tactic":167},{"name":73},{"id":169,"name":170,"techniques":171},"CAPEC-482","TCP Flood",[172,198,204],{"id":25,"name":26,"tactics":173,"countermeasures":175},[174],{"id":29,"name":30},[176,178,180,182,184,186,188,190,192,194,196],{"id":33,"name":34,"tactic":177},{"name":36},{"id":38,"name":39,"tactic":179},{"name":36},{"id":42,"name":43,"tactic":181},{"name":36},{"id":46,"name":47,"tactic":183},{"name":36},{"id":50,"name":51,"tactic":185},{"name":36},{"id":54,"name":55,"tactic":187},{"name":36},{"id":58,"name":59,"tactic":189},{"name":36},{"id":62,"name":63,"tactic":191},{"name":36},{"id":66,"name":67,"tactic":193},{"name":36},{"id":70,"name":71,"tactic":195},{"name":73},{"id":75,"name":76,"tactic":197},{"name":73},{"id":199,"name":200,"tactics":201,"countermeasures":203},"T1499.001","OS Exhaustion Flood",[202],{"id":29,"name":30},[],{"id":141,"name":142,"tactics":205,"countermeasures":207},[206],{"id":29,"name":30},[208,210,212,214,216,218,220,222,224,226,228],{"id":33,"name":34,"tactic":209},{"name":36},{"id":38,"name":39,"tactic":211},{"name":36},{"id":42,"name":43,"tactic":213},{"name":36},{"id":46,"name":47,"tactic":215},{"name":36},{"id":50,"name":51,"tactic":217},{"name":36},{"id":54,"name":55,"tactic":219},{"name":36},{"id":58,"name":59,"tactic":221},{"name":36},{"id":62,"name":63,"tactic":223},{"name":36},{"id":66,"name":67,"tactic":225},{"name":36},{"id":70,"name":71,"tactic":227},{"name":73},{"id":75,"name":76,"tactic":229},{"name":73},{"id":231,"name":232,"techniques":233},"CAPEC-486","UDP Flood",[],{"id":235,"name":236,"techniques":237},"CAPEC-487","ICMP Flood",[],{"id":239,"name":240,"techniques":241},"CAPEC-488","HTTP Flood",[242],{"id":141,"name":142,"tactics":243,"countermeasures":245},[244],{"id":29,"name":30},[246,248,250,252,254,256,258,260,262,264,266],{"id":33,"name":34,"tactic":247},{"name":36},{"id":38,"name":39,"tactic":249},{"name":36},{"id":42,"name":43,"tactic":251},{"name":36},{"id":46,"name":47,"tactic":253},{"name":36},{"id":50,"name":51,"tactic":255},{"name":36},{"id":54,"name":55,"tactic":257},{"name":36},{"id":58,"name":59,"tactic":259},{"name":36},{"id":62,"name":63,"tactic":261},{"name":36},{"id":66,"name":67,"tactic":263},{"name":36},{"id":70,"name":71,"tactic":265},{"name":73},{"id":75,"name":76,"tactic":267},{"name":73},{"id":269,"name":270,"techniques":271},"CAPEC-489","SSL Flood",[272],{"id":141,"name":142,"tactics":273,"countermeasures":275},[274],{"id":29,"name":30},[276,278,280,282,284,286,288,290,292,294,296],{"id":33,"name":34,"tactic":277},{"name":36},{"id":38,"name":39,"tactic":279},{"name":36},{"id":42,"name":43,"tactic":281},{"name":36},{"id":46,"name":47,"tactic":283},{"name":36},{"id":50,"name":51,"tactic":285},{"name":36},{"id":54,"name":55,"tactic":287},{"name":36},{"id":58,"name":59,"tactic":289},{"name":36},{"id":62,"name":63,"tactic":291},{"name":36},{"id":66,"name":67,"tactic":293},{"name":36},{"id":70,"name":71,"tactic":295},{"name":73},{"id":75,"name":76,"tactic":297},{"name":73},{"id":299,"name":300,"techniques":301},"CAPEC-490","Amplification",[302],{"id":303,"name":304,"tactics":305,"countermeasures":307},"T1498.002","Reflection Amplification",[306],{"id":29,"name":30},[308,310,312,314,316,318,320,322,324,326,328],{"id":33,"name":34,"tactic":309},{"name":36},{"id":38,"name":39,"tactic":311},{"name":36},{"id":42,"name":43,"tactic":313},{"name":36},{"id":46,"name":47,"tactic":315},{"name":36},{"id":50,"name":51,"tactic":317},{"name":36},{"id":54,"name":55,"tactic":319},{"name":36},{"id":58,"name":59,"tactic":321},{"name":36},{"id":62,"name":63,"tactic":323},{"name":36},{"id":66,"name":67,"tactic":325},{"name":36},{"id":70,"name":71,"tactic":327},{"name":73},{"id":75,"name":76,"tactic":329},{"name":73},{"id":331,"name":332,"techniques":333},"CAPEC-491","Quadratic Data Expansion",[],{"id":335,"name":336,"techniques":337},"CAPEC-493","SOAP Array Blowup",[],{"id":339,"name":340,"techniques":341},"CAPEC-494","TCP Fragmentation",[],{"id":343,"name":344,"techniques":345},"CAPEC-495","UDP Fragmentation",[],{"id":347,"name":348,"techniques":349},"CAPEC-496","ICMP Fragmentation",[],{"id":351,"name":352,"techniques":353},"CAPEC-528","XML Flood",[354,380],{"id":141,"name":142,"tactics":355,"countermeasures":357},[356],{"id":29,"name":30},[358,360,362,364,366,368,370,372,374,376,378],{"id":33,"name":34,"tactic":359},{"name":36},{"id":38,"name":39,"tactic":361},{"name":36},{"id":42,"name":43,"tactic":363},{"name":36},{"id":46,"name":47,"tactic":365},{"name":36},{"id":50,"name":51,"tactic":367},{"name":36},{"id":54,"name":55,"tactic":369},{"name":36},{"id":58,"name":59,"tactic":371},{"name":36},{"id":62,"name":63,"tactic":373},{"name":36},{"id":66,"name":67,"tactic":375},{"name":36},{"id":70,"name":71,"tactic":377},{"name":73},{"id":75,"name":76,"tactic":379},{"name":73},{"id":25,"name":26,"tactics":381,"countermeasures":383},[382],{"id":29,"name":30},[384,386,388,390,392,394,396,398,400,402,404],{"id":33,"name":34,"tactic":385},{"name":36},{"id":38,"name":39,"tactic":387},{"name":36},{"id":42,"name":43,"tactic":389},{"name":36},{"id":46,"name":47,"tactic":391},{"name":36},{"id":50,"name":51,"tactic":393},{"name":36},{"id":54,"name":55,"tactic":395},{"name":36},{"id":58,"name":59,"tactic":397},{"name":36},{"id":62,"name":63,"tactic":399},{"name":36},{"id":66,"name":67,"tactic":401},{"name":36},{"id":70,"name":71,"tactic":403},{"name":73},{"id":75,"name":76,"tactic":405},{"name":73},[],[408,409],"GHSA-pc3f-x583-g7j2","GO-2026-4958",[],[412,414,416,418,420,422,424,426,428,430,432,434,436,438,440,442,444,446,448,450,452],{"_key":413},"SUSE-SU-2026:2325-1",{"_key":415},"SUSE-SU-2026:2322-1",{"_key":417},"SUSE-SU-2026:2315-1",{"_key":419},"SUSE-SU-2026:2344-1",{"_key":421},"SUSE-SU-2026:2343-1",{"_key":423},"SUSE-SU-2026:2339-1",{"_key":425},"SUSE-SU-2026:2345-1",{"_key":427},"SUSE-SU-2026:2342-1",{"_key":429},"SUSE-SU-2026:2340-1",{"_key":431},"DEBIAN-CVE-2026-35469",{"_key":433},"SUSE-SU-2026:2460-1",{"_key":435},"OPENSUSE-SU-2026:11107-1",{"_key":437},"SUSE-SU-2026:2783-1",{"_key":439},"SUSE-SU-2026:2804-1",{"_key":441},"UBUNTU-CVE-2026-35469",{"_key":443},"OPENSUSE-SU-2026:21213-1",{"_key":445},"RHSA-2026:34755",{"_key":447},"RHSA-2026:36796",{"_key":449},"RHSA-2026:41019",{"_key":451},"OPENSUSE-SU-2026:11305-1",{"_key":453},"OPENSUSE-SU-2026:11307-1",[],[456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472],{"_key":413},{"_key":415},{"_key":417},{"_key":419},{"_key":421},{"_key":423},{"_key":425},{"_key":427},{"_key":429},{"_key":433},{"_key":435},{"_key":437},{"_key":439},{"_key":443},{"_key":451},{"_key":453},{"_key":473},"CGA-V7GJ-RRXH-8985","2026-04-16T21:19:23.516Z","2026-07-22T12:08:37.197Z","Deferred",{"cisa_kev":478,"cisa_ransomware":478,"cisa_vendor":9,"epss_severity":479,"epss_score":480,"severity":481,"severity_score":482,"severity_version":483,"severity_source":484,"severity_vector":485,"severity_status":476},false,"low",0.00656,"high",8.7,"v4.0","cve.org","CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",[487,496,501,506,510,515,521,526,531,536,540,544,548,552,556,560,564,568,572,576,580,584,588,592,596,600,604,608,612,616,620,624,628,632,636,640,644,648,652,656,660,664,668,672,676,680,684,688,692,696,700,704,708,712,716,720,724,728,732,736,740,744,748,752,756,760,764,768,772,776,780],{"url":488,"sources":489,"tags":492},"https://github.com/moby/spdystream/security/advisories/GHSA-pc3f-x583-g7j2",[484,490,491],"nvd","osv_go",[493,494,495],"X Refsource CONFIRM","WEB","Advisory",{"url":497,"sources":498,"tags":499},"https://github.com/moby/spdystream/releases/tag/v0.5.1",[484,490,491],[500,494],"X Refsource MISC",{"url":502,"sources":503,"tags":504},"https://github.com/moby/spdystream",[491],[505],"PACKAGE",{"url":507,"sources":508,"tags":509},"https://nvd.nist.gov/vuln/detail/CVE-2026-35469",[491],[495],{"url":511,"sources":512,"tags":513},"https://github.com/moby/spdystream/commit/ef6121f62c730110bf5ae604a865a8613bfb787f",[491],[514,494],"FIX",{"url":516,"sources":517,"tags":518},"https://access.redhat.com/security/cve/CVE-2026-35469",[484],[519,520],"VDB Entry","X Refsource REDHAT",{"url":522,"sources":523,"tags":524},"https://bugzilla.redhat.com/show_bug.cgi?id=2457729",[484],[525,520],"Issue Tracking",{"url":527,"sources":528,"tags":529},"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35469.json",[484],[530],"X Sadp Csaf Vex",{"url":532,"sources":533,"tags":534},"https://access.redhat.com/errata/RHSA-2026:17704",[484],[535,520],"Vendor Advisory",{"url":537,"sources":538,"tags":539},"https://access.redhat.com/errata/RHSA-2026:13829",[484],[535,520],{"url":541,"sources":542,"tags":543},"https://access.redhat.com/errata/RHSA-2026:11070",[484],[535,520],{"url":545,"sources":546,"tags":547},"https://access.redhat.com/errata/RHSA-2026:11217",[484],[535,520],{"url":549,"sources":550,"tags":551},"https://access.redhat.com/errata/RHSA-2026:13791",[484],[535,520],{"url":553,"sources":554,"tags":555},"https://access.redhat.com/errata/RHSA-2026:33078",[484],[535,520],{"url":557,"sources":558,"tags":559},"https://access.redhat.com/errata/RHSA-2026:33071",[484],[535,520],{"url":561,"sources":562,"tags":563},"https://access.redhat.com/errata/RHSA-2026:27914",[484],[535,520],{"url":565,"sources":566,"tags":567},"https://access.redhat.com/errata/RHSA-2026:27983",[484],[535,520],{"url":569,"sources":570,"tags":571},"https://access.redhat.com/errata/RHSA-2026:27903",[484],[535,520],{"url":573,"sources":574,"tags":575},"https://access.redhat.com/errata/RHSA-2026:27941",[484],[535,520],{"url":577,"sources":578,"tags":579},"https://access.redhat.com/errata/RHSA-2026:21697",[484],[535,520],{"url":581,"sources":582,"tags":583},"https://access.redhat.com/errata/RHSA-2026:21692",[484],[535,520],{"url":585,"sources":586,"tags":587},"https://access.redhat.com/errata/RHSA-2026:25009",[484],[535,520],{"url":589,"sources":590,"tags":591},"https://access.redhat.com/errata/RHSA-2026:23235",[484],[535,520],{"url":593,"sources":594,"tags":595},"https://access.redhat.com/errata/RHSA-2026:20089",[484],[535,520],{"url":597,"sources":598,"tags":599},"https://access.redhat.com/errata/RHSA-2026:25046",[484],[535,520],{"url":601,"sources":602,"tags":603},"https://access.redhat.com/errata/RHSA-2026:17599",[484],[535,520],{"url":605,"sources":606,"tags":607},"https://access.redhat.com/errata/RHSA-2026:17598",[484],[535,520],{"url":609,"sources":610,"tags":611},"https://access.redhat.com/errata/RHSA-2026:17449",[484],[535,520],{"url":613,"sources":614,"tags":615},"https://access.redhat.com/errata/RHSA-2026:12118",[484],[535,520],{"url":617,"sources":618,"tags":619},"https://access.redhat.com/errata/RHSA-2026:21658",[484],[535,520],{"url":621,"sources":622,"tags":623},"https://access.redhat.com/errata/RHSA-2026:25201",[484],[535,520],{"url":625,"sources":626,"tags":627},"https://access.redhat.com/errata/RHSA-2026:20042",[484],[535,520],{"url":629,"sources":630,"tags":631},"https://access.redhat.com/errata/RHSA-2026:27004",[484],[535,520],{"url":633,"sources":634,"tags":635},"https://access.redhat.com/errata/RHSA-2026:20041",[484],[535,520],{"url":637,"sources":638,"tags":639},"https://access.redhat.com/errata/RHSA-2026:25194",[484],[535,520],{"url":641,"sources":642,"tags":643},"https://access.redhat.com/errata/RHSA-2026:17469",[484],[535,520],{"url":645,"sources":646,"tags":647},"https://access.redhat.com/errata/RHSA-2026:27063",[484],[535,520],{"url":649,"sources":650,"tags":651},"https://access.redhat.com/errata/RHSA-2026:17468",[484],[535,520],{"url":653,"sources":654,"tags":655},"https://access.redhat.com/errata/RHSA-2026:25187",[484],[535,520],{"url":657,"sources":658,"tags":659},"https://access.redhat.com/errata/RHSA-2026:17475",[484],[535,520],{"url":661,"sources":662,"tags":663},"https://access.redhat.com/errata/RHSA-2026:20034",[484],[535,520],{"url":665,"sources":666,"tags":667},"https://access.redhat.com/errata/RHSA-2026:25207",[484],[535,520],{"url":669,"sources":670,"tags":671},"https://access.redhat.com/errata/RHSA-2026:27010",[484],[535,520],{"url":673,"sources":674,"tags":675},"https://access.redhat.com/errata/RHSA-2026:19099",[484],[535,520],{"url":677,"sources":678,"tags":679},"https://access.redhat.com/errata/RHSA-2026:19108",[484],[535,520],{"url":681,"sources":682,"tags":683},"https://access.redhat.com/errata/RHSA-2026:17121",[484],[535,520],{"url":685,"sources":686,"tags":687},"https://access.redhat.com/errata/RHSA-2026:17123",[484],[535,520],{"url":689,"sources":690,"tags":691},"https://access.redhat.com/errata/RHSA-2026:29801",[484],[535,520],{"url":693,"sources":694,"tags":695},"https://access.redhat.com/errata/RHSA-2026:29835",[484],[535,520],{"url":697,"sources":698,"tags":699},"https://access.redhat.com/errata/RHSA-2026:36162",[484],[535,520],{"url":701,"sources":702,"tags":703},"https://access.redhat.com/errata/RHSA-2026:29857",[484],[535,520],{"url":705,"sources":706,"tags":707},"https://access.redhat.com/errata/RHSA-2026:29858",[484],[535,520],{"url":709,"sources":710,"tags":711},"https://access.redhat.com/errata/RHSA-2026:29865",[484],[535,520],{"url":713,"sources":714,"tags":715},"https://access.redhat.com/errata/RHSA-2026:34791",[484],[535,520],{"url":717,"sources":718,"tags":719},"https://access.redhat.com/errata/RHSA-2026:34769",[484],[535,520],{"url":721,"sources":722,"tags":723},"https://access.redhat.com/errata/RHSA-2026:34794",[484],[535,520],{"url":725,"sources":726,"tags":727},"https://access.redhat.com/errata/RHSA-2026:29795",[484],[535,520],{"url":729,"sources":730,"tags":731},"https://access.redhat.com/errata/RHSA-2026:36796",[484],[535,520],{"url":733,"sources":734,"tags":735},"https://access.redhat.com/errata/RHSA-2026:34050",[484],[535,520],{"url":737,"sources":738,"tags":739},"https://access.redhat.com/errata/RHSA-2026:34099",[484],[535,520],{"url":741,"sources":742,"tags":743},"https://access.redhat.com/errata/RHSA-2026:34766",[484],[535,520],{"url":745,"sources":746,"tags":747},"https://access.redhat.com/errata/RHSA-2026:34755",[484],[535,520],{"url":749,"sources":750,"tags":751},"https://access.redhat.com/errata/RHSA-2026:34100",[484],[535,520],{"url":753,"sources":754,"tags":755},"https://access.redhat.com/errata/RHSA-2026:37387",[484],[535,520],{"url":757,"sources":758,"tags":759},"https://access.redhat.com/errata/RHSA-2026:37187",[484],[535,520],{"url":761,"sources":762,"tags":763},"https://access.redhat.com/errata/RHSA-2026:41019",[484],[535,520],{"url":765,"sources":766,"tags":767},"https://access.redhat.com/errata/RHSA-2026:36621",[484],[535,520],{"url":769,"sources":770,"tags":771},"https://access.redhat.com/errata/RHSA-2026:37193",[484],[535,520],{"url":773,"sources":774,"tags":775},"https://access.redhat.com/errata/RHSA-2026:37580",[484],[535,520],{"url":777,"sources":778,"tags":779},"https://access.redhat.com/errata/RHSA-2026:37581",[484],[535,520],{"url":781,"sources":782,"tags":783},"https://access.redhat.com/errata/RHSA-2026:37629",[484],[535,520],[],{"date":786,"score":480,"percentile":787},"2026-07-05",0.46944,[789,793,796,799,802,806,809,812,815,818,821,824,827,830,833,836,839,842,845,848,850,853,855,858,861,864,866,869,871,873,875,878,882,885,887,890,894,897,900,903,906,909,912,915,918,921,924,927,930,933,936,939,942,945,948,950,953,956,959,961,965,968,971,974,977,980,983,986,989,992,995,998,1001,1004,1007,1010,1013,1016,1019,1022],{"date":790,"score":791,"percentile":792},"2026-04-17",0.00014,0.02362,{"date":794,"score":791,"percentile":795},"2026-04-18",0.02368,{"date":797,"score":791,"percentile":798},"2026-04-19",0.02356,{"date":800,"score":791,"percentile":801},"2026-04-20",0.02339,{"date":803,"score":804,"percentile":805},"2026-04-21",0.00018,0.04885,{"date":807,"score":804,"percentile":808},"2026-04-22",0.04602,{"date":810,"score":804,"percentile":811},"2026-04-23",0.04628,{"date":813,"score":804,"percentile":814},"2026-04-24",0.04633,{"date":816,"score":804,"percentile":817},"2026-04-25",0.04669,{"date":819,"score":804,"percentile":820},"2026-04-26",0.04667,{"date":822,"score":804,"percentile":823},"2026-04-27",0.04655,{"date":825,"score":804,"percentile":826},"2026-04-28",0.04673,{"date":828,"score":804,"percentile":829},"2026-04-29",0.04693,{"date":831,"score":804,"percentile":832},"2026-04-30",0.04706,{"date":834,"score":804,"percentile":835},"2026-05-01",0.04707,{"date":837,"score":804,"percentile":838},"2026-05-02",0.04708,{"date":840,"score":804,"percentile":841},"2026-05-03",0.04699,{"date":843,"score":804,"percentile":844},"2026-05-04",0.04695,{"date":846,"score":804,"percentile":847},"2026-05-05",0.04691,{"date":849,"score":804,"percentile":847},"2026-05-06",{"date":851,"score":804,"percentile":852},"2026-05-07",0.04727,{"date":854,"score":804,"percentile":852},"2026-05-08",{"date":856,"score":804,"percentile":857},"2026-05-09",0.04772,{"date":859,"score":804,"percentile":860},"2026-05-10",0.0479,{"date":862,"score":804,"percentile":863},"2026-05-11",0.0478,{"date":865,"score":804,"percentile":863},"2026-05-12",{"date":867,"score":804,"percentile":868},"2026-05-13",0.04783,{"date":870,"score":804,"percentile":863},"2026-05-14",{"date":872,"score":804,"percentile":863},"2026-05-15",{"date":874,"score":804,"percentile":860},"2026-05-16",{"date":876,"score":804,"percentile":877},"2026-05-17",0.04784,{"date":879,"score":880,"percentile":881},"2026-05-18",0.00019,0.05432,{"date":883,"score":880,"percentile":884},"2026-05-19",0.05427,{"date":886,"score":880,"percentile":884},"2026-05-20",{"date":888,"score":880,"percentile":889},"2026-05-21",0.05424,{"date":891,"score":892,"percentile":893},"2026-05-22",0.00029,0.08642,{"date":895,"score":892,"percentile":896},"2026-05-23",0.08619,{"date":898,"score":892,"percentile":899},"2026-05-24",0.08625,{"date":901,"score":892,"percentile":902},"2026-05-25",0.08613,{"date":904,"score":892,"percentile":905},"2026-05-26",0.08605,{"date":907,"score":892,"percentile":908},"2026-05-27",0.08654,{"date":910,"score":892,"percentile":911},"2026-05-28",0.08802,{"date":913,"score":892,"percentile":914},"2026-05-29",0.08826,{"date":916,"score":892,"percentile":917},"2026-05-30",0.0883,{"date":919,"score":892,"percentile":920},"2026-05-31",0.08815,{"date":922,"score":892,"percentile":923},"2026-06-01",0.08792,{"date":925,"score":892,"percentile":926},"2026-06-02",0.08733,{"date":928,"score":892,"percentile":929},"2026-06-03",0.08692,{"date":931,"score":892,"percentile":932},"2026-06-04",0.08703,{"date":934,"score":892,"percentile":935},"2026-06-05",0.0874,{"date":937,"score":892,"percentile":938},"2026-06-06",0.08756,{"date":940,"score":892,"percentile":941},"2026-06-07",0.08736,{"date":943,"score":892,"percentile":944},"2026-06-08",0.08688,{"date":946,"score":892,"percentile":947},"2026-06-09",0.08729,{"date":949,"score":892,"percentile":935},"2026-06-10",{"date":951,"score":892,"percentile":952},"2026-06-11",0.08775,{"date":954,"score":892,"percentile":955},"2026-06-12",0.08817,{"date":957,"score":892,"percentile":958},"2026-06-13",0.08823,{"date":960,"score":892,"percentile":920},"2026-06-14",{"date":962,"score":963,"percentile":964},"2026-06-15",0.0043,0.34089,{"date":966,"score":963,"percentile":967},"2026-06-16",0.34144,{"date":969,"score":963,"percentile":970},"2026-06-17",0.34175,{"date":972,"score":963,"percentile":973},"2026-06-18",0.34231,{"date":975,"score":963,"percentile":976},"2026-06-19",0.34222,{"date":978,"score":963,"percentile":979},"2026-06-20",0.34209,{"date":981,"score":963,"percentile":982},"2026-06-21",0.34191,{"date":984,"score":963,"percentile":985},"2026-06-22",0.34176,{"date":987,"score":963,"percentile":988},"2026-06-23",0.34249,{"date":990,"score":963,"percentile":991},"2026-06-24",0.34286,{"date":993,"score":963,"percentile":994},"2026-06-25",0.34366,{"date":996,"score":963,"percentile":997},"2026-06-26",0.34408,{"date":999,"score":963,"percentile":1000},"2026-06-27",0.34445,{"date":1002,"score":963,"percentile":1003},"2026-06-28",0.34422,{"date":1005,"score":963,"percentile":1006},"2026-06-29",0.34419,{"date":1008,"score":480,"percentile":1009},"2026-06-30",0.46757,{"date":1011,"score":480,"percentile":1012},"2026-07-01",0.46846,{"date":1014,"score":480,"percentile":1015},"2026-07-02",0.46884,{"date":1017,"score":480,"percentile":1018},"2026-07-03",0.46902,{"date":1020,"score":480,"percentile":1021},"2026-07-04",0.46929,{"date":786,"score":480,"percentile":787},[1024,1033,1036],{"source":484,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":1025,"cvss_v4_0":1031},{"baseScore":1026,"baseSeverity":1027,"vectorString":1028,"impactScore":1029,"exploitabilityScore":1030},6.5,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",6,7.2,{"baseScore":482,"baseSeverity":1032,"vectorString":485,"impactScore":9,"exploitabilityScore":9},"HIGH",{"source":490,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":1034},{"baseScore":482,"baseSeverity":1032,"vectorString":1035,"impactScore":9,"exploitabilityScore":9},"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",{"source":491,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":1037},{"baseScore":482,"baseSeverity":9,"vectorString":485,"impactScore":9,"exploitabilityScore":9},[1039,1052],{"ecosystem":1040,"name":1041,"vendor":1042,"product":1043,"cpe_part":9,"purl_type":1044,"purl_namespace":1042,"purl_name":1043,"source":9,"versions":1045},"Go","github.com/moby/spdystream","github.com/moby","spdystream","golang",[1046],{"version":1047,"is_range":1048,"range_type":1049,"version_start":9,"version_start_type":9,"version_end":1050,"version_end_type":1051,"fixed_in":9},"lt0_5_1",true,"semver","0.5.1","excluding",{"ecosystem":9,"name":1043,"vendor":1053,"product":1043,"cpe_part":1054,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":1055},"moby","a",[1056],{"version":1057,"is_range":1048,"range_type":484,"version_start":9,"version_start_type":9,"version_end":1050,"version_end_type":1051,"fixed_in":9},"\u003C 0.5.1"]