[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-42764":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T11:35:27.363Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":35,"downstream":36,"duplicates":58,"related":59,"reserved_at":9,"published_at":68,"modified_at":69,"state":70,"summary":71,"references_raw":80,"kevs":148,"epss":149,"epss_history":152,"metrics":425,"affected":443},"CVE-2026-42764","Issue summary: Receiving a QUIC initial packet with an invalid token may\ntrigger a NULL pointer dereference in the OpenSSL QUIC server with\naddress validation disabled.\n\nImpact summary: NULL pointer dereference typically causes abnormal termination\nof the affected QUIC server process and a Denial of Service.\n\nIf the address validation is disabled in the OpenSSL QUIC server\nimplementation, an attacker can crash the server by sending an initial\npacket with an invalid or expired token.\n\nBy default, the client address validation is enabled in the OpenSSL QUIC server\nimplementation, which makes the default configuration not vulnerable\nto this issue. However if the SSL_LISTENER_FLAG_NO_VALIDATE is used with\nthe SSL_new_listener() call, the address validation is disabled making the\nvulnerable code reachable.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-476","NULL Pointer Dereference","The product dereferences a pointer that it expects to be valid but is NULL.","weakness","Stable","Base","Medium",[],[],[22,23,24,25,26,27,28,29,30,31,32,33,34],"DEBIAN-CVE-2026-42764","UBUNTU-CVE-2026-42764","ALPINE-CVE-2026-42764","CGA-58rp-89w2-gh83","CGA-j467-89mh-9mr5","CGA-8jp4-p2rx-w7pm","CGA-gf62-p753-wqx6","CGA-h96c-qhqq-gqrx","CGA-h9vw-ffg8-mjrv","CGA-mrgh-44xg-9rj4","CGA-qj6v-76fg-54gw","CGA-qjp5-x483-c26r","CGA-wpj5-f6vw-h7r5",[],[37,39,40,42,43,44,46,48,50,52,54,56],{"_key":38},"USN-8414-1",{"_key":23},{"_key":41},"OPENSUSE-SU-2026:11023-1",{"_key":22},{"_key":24},{"_key":45},"SUSE-SU-2026:22251-1",{"_key":47},"SUSE-SU-2026:22315-1",{"_key":49},"OPENSUSE-SU-2026:21005-1",{"_key":51},"MGASA-2026-0253",{"_key":53},"SUSE-SU-2026:3835-1",{"_key":55},"RHSA-2026:25237",{"_key":57},"RHSA-2026:25239",[],[60,61,62,63,64,65,66],{"_key":41},{"_key":45},{"_key":47},{"_key":49},{"_key":53},{"_key":38},{"_key":67},"CGA-7CXF-5QQ9-3JQJ","2026-06-09T16:03:25.161Z","2026-06-10T07:47:58.940Z","Analyzed",{"cisa_kev":72,"cisa_ransomware":72,"cisa_vendor":9,"epss_severity":73,"epss_score":74,"severity":75,"severity_score":76,"severity_version":77,"severity_source":78,"severity_vector":79,"severity_status":70},false,"low",0.01165,"high",7.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",[81,92,97,101,105,110,114,118,123,127,131,135,140,144],{"url":82,"sources":83,"tags":88},"https://openssl-library.org/news/secadv/20260609.txt",[78,84,85,86,87],"nvd","osv_ubuntu","osv_wolfi","osv_chainguard",[89,90,91],"Vendor Advisory","REPORT","Advisory",{"url":93,"sources":94,"tags":95},"https://github.com/openssl/security/commit/bf29a458c1a231eca87e384c62b9c2553fa57a91",[78,84],[96],"Patch",{"url":98,"sources":99,"tags":100},"https://github.com/openssl/security/commit/a45a0aba8095682c88ff4fc4a784892b8c6f0677",[78,84],[96],{"url":102,"sources":103,"tags":104},"https://github.com/openssl/security/commit/5e3ed291b8af0b03d5d3b9e56a1da69a187e9729",[78,84],[96],{"url":106,"sources":107,"tags":108},"https://github.com/openssl/openssl/commit/bf29a458c1a231eca87e384c62b9c2553fa57a91",[78,84,86,87],[96,109],"FIX",{"url":111,"sources":112,"tags":113},"https://github.com/openssl/openssl/commit/a45a0aba8095682c88ff4fc4a784892b8c6f0677",[78,84,86,87],[96,109],{"url":115,"sources":116,"tags":117},"https://github.com/openssl/openssl/commit/5e3ed291b8af0b03d5d3b9e56a1da69a187e9729",[78,84,86,87],[96,109],{"url":119,"sources":120,"tags":122},"https://security-tracker.debian.org/tracker/CVE-2026-42764",[121],"osv_debian",[91],{"url":124,"sources":125,"tags":126},"https://ubuntu.com/security/CVE-2026-42764",[85],[90],{"url":128,"sources":129,"tags":130},"https://www.cve.org/CVERecord?id=CVE-2026-42764",[85],[90],{"url":132,"sources":133,"tags":134},"https://ubuntu.com/security/notices/USN-8414-1",[85],[91],{"url":136,"sources":137,"tags":139},"https://security.alpinelinux.org/vuln/CVE-2026-42764",[138],"osv_alpine",[91],{"url":141,"sources":142,"tags":143},"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/42xxx/CVE-2026-42764.json",[86,87],[91],{"url":145,"sources":146,"tags":147},"https://nvd.nist.gov/vuln/detail/CVE-2026-42764",[86,87],[91],[],{"date":150,"score":74,"percentile":151},"2026-09-19",0.65891,[153,157,160,163,166,169,173,176,179,182,185,188,191,194,198,201,204,207,210,213,216,219,222,225,228,231,234,237,240,243,246,249,252,255,258,261,264,267,270,273,276,279,282,285,288,291,294,296,299,302,305,308,311,314,317,320,323,326,329,332,335,338,341,344,347,350,353,356,359,362,365,368,371,374,377,380,383,386,389,392,395,398,401,404,407,410,413,416,419,422],{"date":154,"score":155,"percentile":156},"2026-06-10",0.00042,0.12998,{"date":158,"score":155,"percentile":159},"2026-06-11",0.13031,{"date":161,"score":155,"percentile":162},"2026-06-12",0.13128,{"date":164,"score":155,"percentile":165},"2026-06-13",0.13134,{"date":167,"score":155,"percentile":168},"2026-06-14",0.1311,{"date":170,"score":171,"percentile":172},"2026-06-15",0.00666,0.46796,{"date":174,"score":171,"percentile":175},"2026-06-16",0.46842,{"date":177,"score":171,"percentile":178},"2026-06-17",0.46914,{"date":180,"score":171,"percentile":181},"2026-06-18",0.46958,{"date":183,"score":171,"percentile":184},"2026-06-19",0.4695,{"date":186,"score":171,"percentile":187},"2026-06-20",0.46946,{"date":189,"score":171,"percentile":190},"2026-06-21",0.46928,{"date":192,"score":171,"percentile":193},"2026-06-22",0.46923,{"date":195,"score":196,"percentile":197},"2026-06-23",0.00684,0.47737,{"date":199,"score":196,"percentile":200},"2026-06-24",0.47775,{"date":202,"score":196,"percentile":203},"2026-06-25",0.47852,{"date":205,"score":196,"percentile":206},"2026-06-26",0.47894,{"date":208,"score":196,"percentile":209},"2026-06-27",0.47934,{"date":211,"score":196,"percentile":212},"2026-06-28",0.4793,{"date":214,"score":196,"percentile":215},"2026-06-29",0.47933,{"date":217,"score":196,"percentile":218},"2026-06-30",0.47912,{"date":220,"score":196,"percentile":221},"2026-07-01",0.48,{"date":223,"score":196,"percentile":224},"2026-07-02",0.4804,{"date":226,"score":196,"percentile":227},"2026-07-03",0.48056,{"date":229,"score":196,"percentile":230},"2026-07-04",0.48084,{"date":232,"score":196,"percentile":233},"2026-07-05",0.48097,{"date":235,"score":196,"percentile":236},"2026-07-06",0.48108,{"date":238,"score":196,"percentile":239},"2026-07-07",0.48119,{"date":241,"score":196,"percentile":242},"2026-07-08",0.48136,{"date":244,"score":196,"percentile":245},"2026-07-09",0.48199,{"date":247,"score":196,"percentile":248},"2026-07-10",0.48233,{"date":250,"score":196,"percentile":251},"2026-07-11",0.48266,{"date":253,"score":196,"percentile":254},"2026-07-12",0.48262,{"date":256,"score":196,"percentile":257},"2026-07-13",0.48293,{"date":259,"score":196,"percentile":260},"2026-07-14",0.48311,{"date":262,"score":196,"percentile":263},"2026-07-15",0.48411,{"date":265,"score":196,"percentile":266},"2026-07-16",0.48441,{"date":268,"score":196,"percentile":269},"2026-07-17",0.48456,{"date":271,"score":196,"percentile":272},"2026-07-18",0.48465,{"date":274,"score":196,"percentile":275},"2026-07-19",0.48467,{"date":277,"score":196,"percentile":278},"2026-07-20",0.48528,{"date":280,"score":196,"percentile":281},"2026-07-21",0.48553,{"date":283,"score":196,"percentile":284},"2026-07-22",0.48749,{"date":286,"score":196,"percentile":287},"2026-07-23",0.4877,{"date":289,"score":74,"percentile":290},"2026-07-24",0.63995,{"date":292,"score":74,"percentile":293},"2026-07-25",0.64028,{"date":295,"score":74,"percentile":293},"2026-07-26",{"date":297,"score":74,"percentile":298},"2026-07-27",0.64026,{"date":300,"score":74,"percentile":301},"2026-07-28",0.64067,{"date":303,"score":74,"percentile":304},"2026-07-29",0.64089,{"date":306,"score":74,"percentile":307},"2026-07-30",0.64148,{"date":309,"score":74,"percentile":310},"2026-07-31",0.64174,{"date":312,"score":74,"percentile":313},"2026-08-01",0.6418,{"date":315,"score":74,"percentile":316},"2026-08-02",0.64177,{"date":318,"score":74,"percentile":319},"2026-08-03",0.64184,{"date":321,"score":74,"percentile":322},"2026-08-04",0.64203,{"date":324,"score":74,"percentile":325},"2026-08-05",0.64229,{"date":327,"score":74,"percentile":328},"2026-08-06",0.64259,{"date":330,"score":74,"percentile":331},"2026-08-07",0.64296,{"date":333,"score":74,"percentile":334},"2026-08-08",0.64308,{"date":336,"score":74,"percentile":337},"2026-08-09",0.64302,{"date":339,"score":74,"percentile":340},"2026-08-10",0.64311,{"date":342,"score":74,"percentile":343},"2026-08-11",0.64368,{"date":345,"score":74,"percentile":346},"2026-08-12",0.64441,{"date":348,"score":74,"percentile":349},"2026-08-13",0.64471,{"date":351,"score":74,"percentile":352},"2026-08-14",0.64522,{"date":354,"score":74,"percentile":355},"2026-08-15",0.64605,{"date":357,"score":74,"percentile":358},"2026-08-16",0.64628,{"date":360,"score":74,"percentile":361},"2026-08-17",0.64631,{"date":363,"score":74,"percentile":364},"2026-08-18",0.64652,{"date":366,"score":74,"percentile":367},"2026-08-19",0.64787,{"date":369,"score":74,"percentile":370},"2026-08-20",0.64838,{"date":372,"score":74,"percentile":373},"2026-08-21",0.64879,{"date":375,"score":74,"percentile":376},"2026-08-22",0.64894,{"date":378,"score":74,"percentile":379},"2026-08-23",0.64433,{"date":381,"score":74,"percentile":382},"2026-08-24",0.64882,{"date":384,"score":74,"percentile":385},"2026-08-25",0.64904,{"date":387,"score":74,"percentile":388},"2026-08-26",0.64968,{"date":390,"score":74,"percentile":391},"2026-08-27",0.65004,{"date":393,"score":74,"percentile":394},"2026-08-28",0.64578,{"date":396,"score":74,"percentile":397},"2026-08-29",0.64606,{"date":399,"score":74,"percentile":400},"2026-08-30",0.65077,{"date":402,"score":74,"percentile":403},"2026-08-31",0.65087,{"date":405,"score":74,"percentile":406},"2026-09-01",0.65106,{"date":408,"score":74,"percentile":409},"2026-09-02",0.65143,{"date":411,"score":74,"percentile":412},"2026-09-03",0.65164,{"date":414,"score":74,"percentile":415},"2026-09-04",0.65188,{"date":417,"score":74,"percentile":418},"2026-09-05",0.64765,{"date":420,"score":74,"percentile":421},"2026-09-06",0.65234,{"date":423,"score":74,"percentile":424},"2026-09-07",0.65238,[426,431,433,435,437,439,441],{"source":78,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":427,"cvss_v4_0":9},{"baseScore":76,"baseSeverity":428,"vectorString":79,"impactScore":429,"exploitabilityScore":430},"HIGH",6,10,{"source":84,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":432,"cvss_v4_0":9},{"baseScore":76,"baseSeverity":428,"vectorString":79,"impactScore":429,"exploitabilityScore":430},{"source":121,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":434,"cvss_v4_0":9},{"baseScore":76,"baseSeverity":9,"vectorString":79,"impactScore":429,"exploitabilityScore":430},{"source":85,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":436,"cvss_v4_0":9},{"baseScore":76,"baseSeverity":9,"vectorString":79,"impactScore":429,"exploitabilityScore":430},{"source":138,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":438,"cvss_v4_0":9},{"baseScore":76,"baseSeverity":9,"vectorString":79,"impactScore":429,"exploitabilityScore":430},{"source":86,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":440,"cvss_v4_0":9},{"baseScore":76,"baseSeverity":9,"vectorString":79,"impactScore":429,"exploitabilityScore":430},{"source":87,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":442,"cvss_v4_0":9},{"baseScore":76,"baseSeverity":9,"vectorString":79,"impactScore":429,"exploitabilityScore":430},[444,460,468,472,475,481,485,490,493,504,511,515,519,527],{"ecosystem":445,"name":446,"vendor":447,"product":446,"cpe_part":9,"purl_type":448,"purl_namespace":447,"purl_name":446,"source":9,"versions":449},"Alpine Linux","openssl","alpine","apk",[450,458,459],{"version":451,"is_range":452,"range_type":453,"version_start":454,"version_start_type":455,"version_end":456,"version_end_type":457,"fixed_in":9},"gte3_5_0_lt3_5_7_r0",true,"ecosystem","3.5.0","including","3.5.7-r0","excluding",{"version":451,"is_range":452,"range_type":453,"version_start":454,"version_start_type":455,"version_end":456,"version_end_type":457,"fixed_in":9},{"version":451,"is_range":452,"range_type":453,"version_start":454,"version_start_type":455,"version_end":456,"version_end_type":457,"fixed_in":9},{"ecosystem":461,"name":462,"vendor":463,"product":462,"cpe_part":9,"purl_type":448,"purl_namespace":463,"purl_name":462,"source":9,"versions":464},"Chainguard","libcrypto3","chainguard",[465],{"version":466,"is_range":452,"range_type":453,"version_start":9,"version_start_type":9,"version_end":467,"version_end_type":457,"fixed_in":9},"lt3_6_3_r0","3.6.3-r0",{"ecosystem":461,"name":469,"vendor":463,"product":469,"cpe_part":9,"purl_type":448,"purl_namespace":463,"purl_name":469,"source":9,"versions":470},"libcrypto3-2.34",[471],{"version":466,"is_range":452,"range_type":453,"version_start":9,"version_start_type":9,"version_end":467,"version_end_type":457,"fixed_in":9},{"ecosystem":461,"name":446,"vendor":463,"product":446,"cpe_part":9,"purl_type":448,"purl_namespace":463,"purl_name":446,"source":9,"versions":473},[474],{"version":466,"is_range":452,"range_type":453,"version_start":9,"version_start_type":9,"version_end":467,"version_end_type":457,"fixed_in":9},{"ecosystem":461,"name":476,"vendor":463,"product":476,"cpe_part":9,"purl_type":448,"purl_namespace":463,"purl_name":476,"source":9,"versions":477},"openssl-provider-fips-3.6.0",[478],{"version":479,"is_range":452,"range_type":453,"version_start":9,"version_start_type":9,"version_end":480,"version_end_type":457,"fixed_in":9},"lt0","0",{"ecosystem":461,"name":482,"vendor":463,"product":482,"cpe_part":9,"purl_type":448,"purl_namespace":463,"purl_name":482,"source":9,"versions":483},"openssl-provider-fips-3.6.0-dbg",[484],{"version":479,"is_range":452,"range_type":453,"version_start":9,"version_start_type":9,"version_end":480,"version_end_type":457,"fixed_in":9},{"ecosystem":486,"name":462,"vendor":487,"product":462,"cpe_part":9,"purl_type":448,"purl_namespace":487,"purl_name":462,"source":9,"versions":488},"Wolfi","wolfi",[489],{"version":466,"is_range":452,"range_type":453,"version_start":9,"version_start_type":9,"version_end":467,"version_end_type":457,"fixed_in":9},{"ecosystem":486,"name":446,"vendor":487,"product":446,"cpe_part":9,"purl_type":448,"purl_namespace":487,"purl_name":446,"source":9,"versions":491},[492],{"version":466,"is_range":452,"range_type":453,"version_start":9,"version_start_type":9,"version_end":467,"version_end_type":457,"fixed_in":9},{"ecosystem":494,"name":446,"vendor":495,"product":446,"cpe_part":9,"purl_type":496,"purl_namespace":495,"purl_name":446,"source":9,"versions":497},"Debian","debian","deb",[498,501],{"version":499,"is_range":452,"range_type":453,"version_start":9,"version_start_type":9,"version_end":500,"version_end_type":457,"fixed_in":9},"lt3_5_6_1~deb13u2","3.5.6-1~deb13u2",{"version":502,"is_range":452,"range_type":453,"version_start":9,"version_start_type":9,"version_end":503,"version_end_type":457,"fixed_in":9},"lt3_6_3_1","3.6.3-1",{"ecosystem":505,"name":506,"vendor":507,"product":506,"cpe_part":9,"purl_type":496,"purl_namespace":507,"purl_name":506,"source":9,"versions":508},"Ubuntu","edk2","ubuntu",[509],{"version":510,"is_range":452,"range_type":453,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all",{"ecosystem":505,"name":512,"vendor":507,"product":512,"cpe_part":9,"purl_type":496,"purl_namespace":507,"purl_name":512,"source":9,"versions":513},"edk2-hwe",[514],{"version":510,"is_range":452,"range_type":453,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":505,"name":516,"vendor":507,"product":516,"cpe_part":9,"purl_type":496,"purl_namespace":507,"purl_name":516,"source":9,"versions":517},"nodejs",[518],{"version":510,"is_range":452,"range_type":453,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":505,"name":446,"vendor":507,"product":446,"cpe_part":9,"purl_type":496,"purl_namespace":507,"purl_name":446,"source":9,"versions":520},[521,524],{"version":522,"is_range":452,"range_type":453,"version_start":9,"version_start_type":9,"version_end":523,"version_end_type":457,"fixed_in":9},"lt3_5_3_1ubuntu3_4","3.5.3-1ubuntu3.4",{"version":525,"is_range":452,"range_type":453,"version_start":9,"version_start_type":9,"version_end":526,"version_end_type":457,"fixed_in":9},"lt3_5_5_1ubuntu3_2","3.5.5-1ubuntu3.2",{"ecosystem":9,"name":528,"vendor":446,"product":446,"cpe_part":529,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":530},"OpenSSL","a",[531,535,539,543],{"version":532,"is_range":452,"range_type":78,"version_start":533,"version_start_type":455,"version_end":534,"version_end_type":457,"fixed_in":9},">= 4.0.0, \u003C 4.0.1","4.0.0","4.0.1",{"version":536,"is_range":452,"range_type":537,"version_start":454,"version_start_type":455,"version_end":538,"version_end_type":457,"fixed_in":9},"gte3.5.0_lt3.5.7","cpe","3.5.7",{"version":540,"is_range":452,"range_type":537,"version_start":541,"version_start_type":455,"version_end":542,"version_end_type":457,"fixed_in":9},"gte3.6.0_lt3.6.3","3.6.0","3.6.3",{"version":533,"is_range":72,"range_type":537,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9}]