[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-4686":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T08:55:32.481Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":22,"downstream":23,"duplicates":106,"related":107,"reserved_at":9,"published_at":120,"modified_at":121,"state":122,"summary":123,"references_raw":132,"kevs":160,"epss":161,"epss_history":164,"metrics":382,"affected":390},"CVE-2026-4686","Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-754","Improper Check for Unusual or Exceptional Conditions","The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.","weakness","Incomplete","Class","Medium",[],[],[],[],[24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,82,84,86,88,90,92,94,96,98,100,102,104],{"_key":25},"OPENSUSE-SU-2026:10413-1",{"_key":27},"DSA-6178-1",{"_key":29},"DLA-4510-1",{"_key":31},"DLA-4511-1",{"_key":33},"DSA-6179-1",{"_key":35},"SUSE-SU-2026:1127-1",{"_key":37},"SUSE-SU-2026:1126-1",{"_key":39},"OPENSUSE-SU-2026:10447-1",{"_key":41},"OPENSUSE-SU-2026:10458-1",{"_key":43},"SUSE-SU-2026:1163-1",{"_key":45},"OPENSUSE-SU-2026:20439-1",{"_key":47},"SUSE-SU-2026:20978-1",{"_key":49},"MGASA-2026-0080",{"_key":51},"MGASA-2026-0081",{"_key":53},"UBUNTU-CVE-2026-4686",{"_key":55},"DEBIAN-CVE-2026-4686",{"_key":57},"RHSA-2026:5930",{"_key":59},"RHSA-2026:5931",{"_key":61},"RHSA-2026:5932",{"_key":63},"RHSA-2026:6188",{"_key":65},"RHSA-2026:6342",{"_key":67},"RHSA-2026:6917",{"_key":69},"RHSA-2026:7837",{"_key":71},"RHSA-2026:7838",{"_key":73},"RHSA-2026:7839",{"_key":75},"RHSA-2026:7840",{"_key":77},"RHSA-2026:7841",{"_key":79},"RHSA-2026:7842",{"_key":81},"RHSA-2026:7843",{"_key":83},"RHSA-2026:7845",{"_key":85},"RHSA-2026:7858",{"_key":87},"RHSA-2026:8284",{"_key":89},"RHSA-2026:8285",{"_key":91},"RHSA-2026:8286",{"_key":93},"RHSA-2026:8287",{"_key":95},"RHSA-2026:8288",{"_key":97},"RHSA-2026:8289",{"_key":99},"RHSA-2026:8290",{"_key":101},"RHSA-2026:8315",{"_key":103},"RHSA-2026:8427",{"_key":105},"RHSA-2026:8850",[],[108,109,110,111,112,113,114,115,116,117,118],{"_key":25},{"_key":35},{"_key":37},{"_key":39},{"_key":41},{"_key":43},{"_key":45},{"_key":47},{"_key":49},{"_key":51},{"_key":119},"CGA-4VH7-QR7J-3W4P","2026-03-24T12:30:21.639Z","2026-05-07T14:50:23.927Z","Modified",{"cisa_kev":124,"cisa_ransomware":124,"cisa_vendor":9,"epss_severity":125,"epss_score":126,"severity":127,"severity_score":128,"severity_version":129,"severity_source":130,"severity_vector":131,"severity_status":122},false,"low",0.00027,"high",7.5,"v3.1","nvd","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",[133,139,144,148,152,156],{"url":134,"sources":135,"tags":137},"https://bugzilla.mozilla.org/show_bug.cgi?id=2016351",[136,130],"cve.org",[138],"Permissions Required",{"url":140,"sources":141,"tags":142},"https://www.mozilla.org/security/advisories/mfsa2026-20/",[136,130],[143],"Vendor Advisory",{"url":145,"sources":146,"tags":147},"https://www.mozilla.org/security/advisories/mfsa2026-21/",[136,130],[143],{"url":149,"sources":150,"tags":151},"https://www.mozilla.org/security/advisories/mfsa2026-22/",[136,130],[143],{"url":153,"sources":154,"tags":155},"https://www.mozilla.org/security/advisories/mfsa2026-23/",[136,130],[],{"url":157,"sources":158,"tags":159},"https://www.mozilla.org/security/advisories/mfsa2026-24/",[136,130],[],[],{"date":162,"score":126,"percentile":163},"2026-06-04",0.08017,[165,169,172,175,178,181,185,188,191,194,197,200,203,206,209,212,215,218,221,224,227,230,233,236,239,242,245,248,251,254,257,260,264,267,270,273,276,279,282,285,288,291,294,297,300,303,306,309,312,315,318,321,324,327,330,333,336,339,342,345,348,351,354,357,360,363,366,369,372,375,378,381],{"date":166,"score":167,"percentile":168},"2026-03-25",0.00018,0.04476,{"date":170,"score":167,"percentile":171},"2026-03-26",0.04509,{"date":173,"score":167,"percentile":174},"2026-03-27",0.04511,{"date":176,"score":167,"percentile":177},"2026-03-28",0.04513,{"date":179,"score":167,"percentile":180},"2026-03-29",0.04506,{"date":182,"score":183,"percentile":184},"2026-03-30",0.00024,0.06252,{"date":186,"score":183,"percentile":187},"2026-03-31",0.06231,{"date":189,"score":183,"percentile":190},"2026-04-01",0.06235,{"date":192,"score":183,"percentile":193},"2026-04-02",0.06269,{"date":195,"score":183,"percentile":196},"2026-04-03",0.06282,{"date":198,"score":183,"percentile":199},"2026-04-04",0.06303,{"date":201,"score":183,"percentile":202},"2026-04-05",0.06301,{"date":204,"score":183,"percentile":205},"2026-04-06",0.06271,{"date":207,"score":183,"percentile":208},"2026-04-07",0.0628,{"date":210,"score":183,"percentile":211},"2026-04-08",0.06326,{"date":213,"score":183,"percentile":214},"2026-04-09",0.06366,{"date":216,"score":183,"percentile":217},"2026-04-10",0.06371,{"date":219,"score":183,"percentile":220},"2026-04-11",0.06359,{"date":222,"score":183,"percentile":223},"2026-04-12",0.06354,{"date":225,"score":183,"percentile":226},"2026-04-13",0.06343,{"date":228,"score":183,"percentile":229},"2026-04-14",0.06268,{"date":231,"score":183,"percentile":232},"2026-04-15",0.06276,{"date":234,"score":183,"percentile":235},"2026-04-16",0.06281,{"date":237,"score":183,"percentile":238},"2026-04-17",0.06292,{"date":240,"score":183,"percentile":241},"2026-04-18",0.06294,{"date":243,"score":183,"percentile":244},"2026-04-19",0.06277,{"date":246,"score":183,"percentile":247},"2026-04-20",0.06254,{"date":249,"score":183,"percentile":250},"2026-04-21",0.06443,{"date":252,"score":183,"percentile":253},"2026-04-22",0.06446,{"date":255,"score":183,"percentile":256},"2026-04-23",0.06468,{"date":258,"score":183,"percentile":259},"2026-04-24",0.06458,{"date":261,"score":262,"percentile":263},"2026-04-25",0.00026,0.0717,{"date":265,"score":262,"percentile":266},"2026-04-26",0.07159,{"date":268,"score":262,"percentile":269},"2026-04-27",0.07145,{"date":271,"score":262,"percentile":272},"2026-04-28",0.07111,{"date":274,"score":262,"percentile":275},"2026-04-29",0.07118,{"date":277,"score":262,"percentile":278},"2026-04-30",0.07124,{"date":280,"score":262,"percentile":281},"2026-05-01",0.07106,{"date":283,"score":262,"percentile":284},"2026-05-02",0.07158,{"date":286,"score":262,"percentile":287},"2026-05-03",0.07146,{"date":289,"score":262,"percentile":290},"2026-05-04",0.07123,{"date":292,"score":262,"percentile":293},"2026-05-05",0.07131,{"date":295,"score":262,"percentile":296},"2026-05-06",0.07157,{"date":298,"score":262,"percentile":299},"2026-05-07",0.07286,{"date":301,"score":262,"percentile":302},"2026-05-08",0.07314,{"date":304,"score":262,"percentile":305},"2026-05-09",0.07367,{"date":307,"score":262,"percentile":308},"2026-05-10",0.07364,{"date":310,"score":262,"percentile":311},"2026-05-11",0.07346,{"date":313,"score":262,"percentile":314},"2026-05-12",0.07361,{"date":316,"score":262,"percentile":317},"2026-05-13",0.07366,{"date":319,"score":262,"percentile":320},"2026-05-14",0.07396,{"date":322,"score":262,"percentile":323},"2026-05-15",0.07393,{"date":325,"score":262,"percentile":326},"2026-05-16",0.07409,{"date":328,"score":262,"percentile":329},"2026-05-17",0.074,{"date":331,"score":262,"percentile":332},"2026-05-18",0.07354,{"date":334,"score":262,"percentile":335},"2026-05-19",0.07325,{"date":337,"score":262,"percentile":338},"2026-05-20",0.07316,{"date":340,"score":262,"percentile":341},"2026-05-21",0.07313,{"date":343,"score":262,"percentile":344},"2026-05-22",0.07604,{"date":346,"score":262,"percentile":347},"2026-05-23",0.07609,{"date":349,"score":262,"percentile":350},"2026-05-24",0.07612,{"date":352,"score":262,"percentile":353},"2026-05-25",0.07597,{"date":355,"score":262,"percentile":356},"2026-05-26",0.07583,{"date":358,"score":262,"percentile":359},"2026-05-27",0.07634,{"date":361,"score":262,"percentile":362},"2026-05-28",0.07784,{"date":364,"score":262,"percentile":365},"2026-05-29",0.07806,{"date":367,"score":262,"percentile":368},"2026-05-30",0.07796,{"date":370,"score":126,"percentile":371},"2026-05-31",0.08128,{"date":373,"score":126,"percentile":374},"2026-06-01",0.08109,{"date":376,"score":126,"percentile":377},"2026-06-02",0.08062,{"date":379,"score":126,"percentile":380},"2026-06-03",0.08002,{"date":162,"score":126,"percentile":163},[383,388],{"source":130,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":384,"cvss_v4_0":9},{"baseScore":128,"baseSeverity":385,"vectorString":131,"impactScore":386,"exploitabilityScore":387},"HIGH",6,10,{"source":136,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":389,"cvss_v4_0":9},{"baseScore":128,"baseSeverity":385,"vectorString":131,"impactScore":386,"exploitabilityScore":387},[391,414,424],{"ecosystem":9,"name":392,"vendor":393,"product":392,"cpe_part":394,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":395},"firefox","mozilla","a",[396,403,407,410],{"version":397,"is_range":398,"range_type":136,"version_start":399,"version_start_type":400,"version_end":401,"version_end_type":402,"fixed_in":9},">= unspecified, \u003C 149",true,"unspecified","including","149","excluding",{"version":404,"is_range":398,"range_type":405,"version_start":9,"version_start_type":9,"version_end":406,"version_end_type":402,"fixed_in":9},"lt115.34.0","cpe","115.34.0",{"version":408,"is_range":398,"range_type":405,"version_start":9,"version_start_type":9,"version_end":409,"version_end_type":402,"fixed_in":9},"lt149.0","149.0",{"version":411,"is_range":398,"range_type":405,"version_start":412,"version_start_type":400,"version_end":413,"version_end_type":402,"fixed_in":9},"gte128.0_lt140.9.0","128.0","140.9.0",{"ecosystem":9,"name":415,"vendor":393,"product":416,"cpe_part":394,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":417},"firefox esr","firefox_esr",[418,421],{"version":419,"is_range":398,"range_type":136,"version_start":399,"version_start_type":400,"version_end":420,"version_end_type":402,"fixed_in":9},">= unspecified, \u003C 115.34","115.34",{"version":422,"is_range":398,"range_type":136,"version_start":399,"version_start_type":400,"version_end":423,"version_end_type":402,"fixed_in":9},">= unspecified, \u003C 140.9","140.9",{"ecosystem":9,"name":425,"vendor":393,"product":426,"cpe_part":394,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":427},"Thunderbird","thunderbird",[428,429],{"version":397,"is_range":398,"range_type":136,"version_start":399,"version_start_type":400,"version_end":401,"version_end_type":402,"fixed_in":9},{"version":422,"is_range":398,"range_type":136,"version_start":399,"version_start_type":400,"version_end":423,"version_end_type":402,"fixed_in":9}]