[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-59881":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T17:35:29.592Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":531,"aliases":532,"duplicate_of":9,"upstream":583,"downstream":584,"duplicates":593,"related":594,"reserved_at":9,"published_at":601,"modified_at":602,"state":603,"summary":604,"references_raw":613,"kevs":675,"epss":676,"epss_history":679,"metrics":830,"affected":847},"CVE-2026-59881","AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.2, the WebSocket client accepts and decompresses frames with the RSV1 bit set even when the permessage-deflate extension was not negotiated, allowing a malicious server to cause unexpected CPU and memory consumption. This issue is fixed in version 3.14.2.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-20","Improper Input Validation","The product receives input or data, but it does\n        not validate or incorrectly validates that the input has the\n        properties that are required to process the data safely and\n        correctly.","weakness","Stable","Class","High",[20,24,28,32,36,40,44,48,232,236,240,244,248,252,256,260,264,268,272,276,280,284,325,329,333,381,385,389,393,397,401,451,455,459,463,467,471,475,479,483,487,491,495,499,503,507,511,515,519,523,527],{"id":21,"name":22,"techniques":23},"CAPEC-10","Buffer Overflow via Environment Variables",[],{"id":25,"name":26,"techniques":27},"CAPEC-101","Server Side Include (SSI) Injection",[],{"id":29,"name":30,"techniques":31},"CAPEC-104","Cross Zone Scripting",[],{"id":33,"name":34,"techniques":35},"CAPEC-108","Command Line Execution through SQL Injection",[],{"id":37,"name":38,"techniques":39},"CAPEC-109","Object Relational Mapping Injection",[],{"id":41,"name":42,"techniques":43},"CAPEC-110","SQL Injection through SOAP Parameter Tampering",[],{"id":45,"name":46,"techniques":47},"CAPEC-120","Double Encoding",[],{"id":49,"name":50,"techniques":51},"CAPEC-13","Subverting Environment Variable Values",[52,150,192],{"id":53,"name":54,"tactics":55,"countermeasures":62},"T1562.003","Impair Command History Logging",[56,59],{"id":57,"name":58},"TA0030","Defense Evasion",{"id":60,"name":61},"TA0005","Stealth",[63,68,73,78,83,88,93,97,101,105,109,114,118,122,126,130,134,138,142,146],{"id":64,"name":65,"tactic":66},"D3-RF","Restore File",{"name":67},"Restore",{"id":69,"name":70,"tactic":71},"D3-CQ","Content Quarantine",{"name":72},"Isolate",{"id":74,"name":75,"tactic":76},"D3-CI","Configuration Inventory",{"name":77},"Model",{"id":79,"name":80,"tactic":81},"D3-DF","Decoy File",{"name":82},"Deceive",{"id":84,"name":85,"tactic":86},"D3-FA","File Analysis",{"name":87},"Detect",{"id":89,"name":90,"tactic":91},"D3-DRA","Disable Remote Access",{"name":92},"Harden",{"id":94,"name":95,"tactic":96},"D3-ACH","Application Configuration Hardening",{"name":92},{"id":98,"name":99,"tactic":100},"D3-RC","Restore Configuration",{"name":67},{"id":102,"name":103,"tactic":104},"D3-FE","File Encryption",{"name":92},{"id":106,"name":107,"tactic":108},"D3-FIM","File Integrity Monitoring",{"name":87},{"id":110,"name":111,"tactic":112},"D3-RKD","Registry Key Deletion",{"name":113},"Evict",{"id":115,"name":116,"tactic":117},"D3-DA","Dynamic Analysis",{"name":87},{"id":119,"name":120,"tactic":121},"D3-CF","Content Filtering",{"name":72},{"id":123,"name":124,"tactic":125},"D3-LFP","Local File Permissions",{"name":72},{"id":127,"name":128,"tactic":129},"D3-FEV","File Eviction",{"name":113},{"id":131,"name":132,"tactic":133},"D3-EFA","Emulated File Analysis",{"name":87},{"id":135,"name":136,"tactic":137},"D3-RFAM","Remote File Access Mediation",{"name":72},{"id":139,"name":140,"tactic":141},"D3-CM","Content Modification",{"name":72},{"id":143,"name":144,"tactic":145},"D3-EAL","Executable Allowlisting",{"name":72},{"id":147,"name":148,"tactic":149},"D3-EDL","Executable Denylisting",{"name":72},{"id":151,"name":152,"tactics":153,"countermeasures":165},"T1574.006","Dynamic Linker Hijacking",[154,157,160,161,162],{"id":155,"name":156},"TA0110","Persistence",{"id":158,"name":159},"TA0111","Privilege Escalation",{"id":57,"name":58},{"id":60,"name":61},{"id":163,"name":164},"TA0104","Execution",[166,168,170,172,176,178,180,182,184,186,188,190],{"id":139,"name":140,"tactic":167},{"name":72},{"id":127,"name":128,"tactic":169},{"name":113},{"id":84,"name":85,"tactic":171},{"name":87},{"id":173,"name":174,"tactic":175},"D3-SFA","System File Analysis",{"name":87},{"id":64,"name":65,"tactic":177},{"name":67},{"id":119,"name":120,"tactic":179},{"name":72},{"id":123,"name":124,"tactic":181},{"name":72},{"id":102,"name":103,"tactic":183},{"name":92},{"id":135,"name":136,"tactic":185},{"name":72},{"id":69,"name":70,"tactic":187},{"name":72},{"id":79,"name":80,"tactic":189},{"name":82},{"id":106,"name":107,"tactic":191},{"name":87},{"id":193,"name":194,"tactics":195,"countermeasures":201},"T1574.007","Path Interception by PATH Environment Variable",[196,197,198,199,200],{"id":155,"name":156},{"id":158,"name":159},{"id":57,"name":58},{"id":60,"name":61},{"id":163,"name":164},[202,204,206,208,210,212,214,216,218,220,222,224,226,228,230],{"id":139,"name":140,"tactic":203},{"name":72},{"id":84,"name":85,"tactic":205},{"name":87},{"id":79,"name":80,"tactic":207},{"name":82},{"id":119,"name":120,"tactic":209},{"name":72},{"id":127,"name":128,"tactic":211},{"name":113},{"id":106,"name":107,"tactic":213},{"name":87},{"id":123,"name":124,"tactic":215},{"name":72},{"id":102,"name":103,"tactic":217},{"name":92},{"id":143,"name":144,"tactic":219},{"name":72},{"id":115,"name":116,"tactic":221},{"name":87},{"id":135,"name":136,"tactic":223},{"name":72},{"id":147,"name":148,"tactic":225},{"name":72},{"id":131,"name":132,"tactic":227},{"name":87},{"id":69,"name":70,"tactic":229},{"name":72},{"id":64,"name":65,"tactic":231},{"name":67},{"id":233,"name":234,"techniques":235},"CAPEC-135","Format String Injection",[],{"id":237,"name":238,"techniques":239},"CAPEC-136","LDAP Injection",[],{"id":241,"name":242,"techniques":243},"CAPEC-14","Client-side Injection-induced Buffer Overflow",[],{"id":245,"name":246,"techniques":247},"CAPEC-153","Input Data Manipulation",[],{"id":249,"name":250,"techniques":251},"CAPEC-182","Flash Injection",[],{"id":253,"name":254,"techniques":255},"CAPEC-209","XSS Using MIME Type Mismatch",[],{"id":257,"name":258,"techniques":259},"CAPEC-22","Exploiting Trust in Client",[],{"id":261,"name":262,"techniques":263},"CAPEC-23","File Content Injection",[],{"id":265,"name":266,"techniques":267},"CAPEC-230","Serialized Data with Nested Payloads",[],{"id":269,"name":270,"techniques":271},"CAPEC-231","Oversized Serialized Data Payloads",[],{"id":273,"name":274,"techniques":275},"CAPEC-24","Filter Failure through Buffer Overflow",[],{"id":277,"name":278,"techniques":279},"CAPEC-250","XML Injection",[],{"id":281,"name":282,"techniques":283},"CAPEC-261","Fuzzing for garnering other adjacent user/sensitive data",[],{"id":285,"name":286,"techniques":287},"CAPEC-267","Leverage Alternate Encoding",[288],{"id":289,"name":290,"tactics":291,"countermeasures":294},"T1027","Obfuscated Files or Information",[292,293],{"id":57,"name":58},{"id":60,"name":61},[295,297,299,301,303,305,307,309,311,313,315,317,319,321,323],{"id":106,"name":107,"tactic":296},{"name":87},{"id":79,"name":80,"tactic":298},{"name":82},{"id":143,"name":144,"tactic":300},{"name":72},{"id":147,"name":148,"tactic":302},{"name":72},{"id":123,"name":124,"tactic":304},{"name":72},{"id":64,"name":65,"tactic":306},{"name":67},{"id":127,"name":128,"tactic":308},{"name":113},{"id":115,"name":116,"tactic":310},{"name":87},{"id":135,"name":136,"tactic":312},{"name":72},{"id":102,"name":103,"tactic":314},{"name":92},{"id":84,"name":85,"tactic":316},{"name":87},{"id":139,"name":140,"tactic":318},{"name":72},{"id":119,"name":120,"tactic":320},{"name":72},{"id":69,"name":70,"tactic":322},{"name":72},{"id":131,"name":132,"tactic":324},{"name":87},{"id":326,"name":327,"techniques":328},"CAPEC-28","Fuzzing",[],{"id":330,"name":331,"techniques":332},"CAPEC-3","Using Leading 'Ghost' Character Sequences to Bypass Input Filters",[],{"id":334,"name":335,"techniques":336},"CAPEC-31","Accessing/Intercepting/Modifying HTTP Cookies",[337],{"id":338,"name":339,"tactics":340,"countermeasures":344},"T1539","Steal Web Session Cookie",[341],{"id":342,"name":343},"TA0031","Credential Access",[345,349,353,357,361,365,369,373,377],{"id":346,"name":347,"tactic":348},"D3-CTS","Credential Transmission Scoping",{"name":72},{"id":350,"name":351,"tactic":352},"D3-DUC","Decoy User Credential",{"name":82},{"id":354,"name":355,"tactic":356},"D3-CH","Credential Hardening",{"name":92},{"id":358,"name":359,"tactic":360},"D3-MFA","Multi-factor Authentication",{"name":92},{"id":362,"name":363,"tactic":364},"D3-ANCI","Authentication Cache Invalidation",{"name":113},{"id":366,"name":367,"tactic":368},"D3-CCSA","Credential Compromise Scope Analysis",{"name":87},{"id":370,"name":371,"tactic":372},"D3-CRO","Credential Rotation",{"name":92},{"id":374,"name":375,"tactic":376},"D3-CR","Credential Revocation",{"name":113},{"id":378,"name":379,"tactic":380},"D3-RIC","Reissue Credential",{"name":67},{"id":382,"name":383,"techniques":384},"CAPEC-42","MIME Conversion",[],{"id":386,"name":387,"techniques":388},"CAPEC-43","Exploiting Multiple Input Interpretation Layers",[],{"id":390,"name":391,"techniques":392},"CAPEC-45","Buffer Overflow via Symbolic Links",[],{"id":394,"name":395,"techniques":396},"CAPEC-46","Overflow Variables and Tags",[],{"id":398,"name":399,"techniques":400},"CAPEC-47","Buffer Overflow via Parameter Expansion",[],{"id":402,"name":403,"techniques":404},"CAPEC-473","Signature Spoof",[405,442],{"id":406,"name":407,"tactics":408,"countermeasures":411},"T1036.001","Invalid Code Signature",[409,410],{"id":57,"name":58},{"id":60,"name":61},[412,414,416,418,420,422,424,426,428,430,432,434,436,438,440],{"id":84,"name":85,"tactic":413},{"name":87},{"id":102,"name":103,"tactic":415},{"name":92},{"id":106,"name":107,"tactic":417},{"name":87},{"id":115,"name":116,"tactic":419},{"name":87},{"id":131,"name":132,"tactic":421},{"name":87},{"id":79,"name":80,"tactic":423},{"name":82},{"id":127,"name":128,"tactic":425},{"name":113},{"id":64,"name":65,"tactic":427},{"name":67},{"id":119,"name":120,"tactic":429},{"name":72},{"id":123,"name":124,"tactic":431},{"name":72},{"id":135,"name":136,"tactic":433},{"name":72},{"id":69,"name":70,"tactic":435},{"name":72},{"id":139,"name":140,"tactic":437},{"name":72},{"id":143,"name":144,"tactic":439},{"name":72},{"id":147,"name":148,"tactic":441},{"name":72},{"id":443,"name":444,"tactics":445,"countermeasures":450},"T1553.002","Code Signing",[446,447],{"id":57,"name":58},{"id":448,"name":449},"TA0112","Defense Impairment",[],{"id":452,"name":453,"techniques":454},"CAPEC-52","Embedding NULL Bytes",[],{"id":456,"name":457,"techniques":458},"CAPEC-53","Postfix, Null Terminate, and Backslash",[],{"id":460,"name":461,"techniques":462},"CAPEC-588","DOM-Based XSS",[],{"id":464,"name":465,"techniques":466},"CAPEC-63","Cross-Site Scripting (XSS)",[],{"id":468,"name":469,"techniques":470},"CAPEC-64","Using Slashes and URL Encoding Combined to Bypass Validation Logic",[],{"id":472,"name":473,"techniques":474},"CAPEC-664","Server Side Request Forgery",[],{"id":476,"name":477,"techniques":478},"CAPEC-67","String Format Overflow in syslog()",[],{"id":480,"name":481,"techniques":482},"CAPEC-7","Blind SQL Injection",[],{"id":484,"name":485,"techniques":486},"CAPEC-71","Using Unicode Encoding to Bypass Validation Logic",[],{"id":488,"name":489,"techniques":490},"CAPEC-72","URL Encoding",[],{"id":492,"name":493,"techniques":494},"CAPEC-73","User-Controlled Filename",[],{"id":496,"name":497,"techniques":498},"CAPEC-78","Using Escaped Slashes in Alternate Encoding",[],{"id":500,"name":501,"techniques":502},"CAPEC-79","Using Slashes in Alternate Encoding",[],{"id":504,"name":505,"techniques":506},"CAPEC-8","Buffer Overflow in an API Call",[],{"id":508,"name":509,"techniques":510},"CAPEC-80","Using UTF-8 Encoding to Bypass Validation Logic",[],{"id":512,"name":513,"techniques":514},"CAPEC-81","Web Server Logs Tampering",[],{"id":516,"name":517,"techniques":518},"CAPEC-83","XPath Injection",[],{"id":520,"name":521,"techniques":522},"CAPEC-85","AJAX Footprinting",[],{"id":524,"name":525,"techniques":526},"CAPEC-88","OS Command Injection",[],{"id":528,"name":529,"techniques":530},"CAPEC-9","Buffer Overflow in Local Command-Line Utilities",[],[],[533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582],"GHSA-mq44-7p77-q5h7","PYSEC-2026-3547","UBUNTU-CVE-2026-59881","DEBIAN-CVE-2026-59881","CGA-342c-5jrv-9x95","CGA-7v29-7h5c-ccxx","CGA-825h-f4m4-ppfj","CGA-9m67-5ch9-3q58","CGA-f4g8-w248-cp3f","CGA-f7gc-5phg-q29w","CGA-hpw9-fg9w-7m7x","CGA-m3gw-fj2g-v975","CGA-mfp9-fr5c-9p24","CGA-29mv-55p9-xm65","CGA-29w2-5c5h-9j2v","CGA-2cch-r3p5-vfwf","CGA-3rrg-386v-mm24","CGA-445x-3cmq-j5f8","CGA-46m5-3c2x-qfh2","CGA-4f6w-gwjv-72j8","CGA-5c22-vm23-rqmm","CGA-5qx6-gvq8-rvj5","CGA-6428-x58q-5x8h","CGA-65mq-m7xc-gvvj","CGA-6hj9-v267-8fcv","CGA-6v86-9p6x-h526","CGA-6vqx-vmmq-7frw","CGA-7gwp-5rhr-m3g7","CGA-8fgm-f2rv-vvwr","CGA-8wgc-qvxf-fpq9","CGA-fxwj-p5gx-gxrh","CGA-gfv2-3w68-r973","CGA-h66w-qmjp-grpp","CGA-hhm9-98g4-7m88","CGA-j8x4-38rr-hhw2","CGA-jq87-xqh6-9j2c","CGA-jw3g-wjqx-rrp7","CGA-mg8x-4mgq-3c3q","CGA-p78m-qc83-79cp","CGA-qq39-x977-3j3j","CGA-qvpj-wwx4-q5c3","CGA-r7x5-jhm4-pg52","CGA-vm54-7f85-4698","CGA-wh5v-vpr2-c5f4","CGA-x57g-2jmp-6jv2","CGA-xvrp-c57h-v8xj","CGA-2x8f-vqqw-82qx","CGA-hr3c-5jg5-ff89","CGA-rq6f-f266-9748","CGA-vf5m-h4v7-xcp4",[],[585,587,589,591],{"_key":586},"OPENSUSE-SU-2026:11467-1",{"_key":588},"OPENSUSE-SU-2026:21687-1",{"_key":590},"SUSE-SU-2026:4031-1",{"_key":592},"SUSE-SU-2026:4113-1",[],[595,596,597,598,599],{"_key":586},{"_key":588},{"_key":590},{"_key":592},{"_key":600},"CGA-FHXM-R4HW-H773","2026-07-30T17:34:32.415Z","2026-07-30T18:35:40.624Z","Deferred",{"cisa_kev":605,"cisa_ransomware":605,"cisa_vendor":9,"epss_severity":606,"epss_score":607,"severity":608,"severity_score":609,"severity_version":610,"severity_source":611,"severity_vector":612,"severity_status":603},false,"low",0.00302,"medium",6.9,"v4.0","cve.org","CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",[614,627,633,637,641,645,650,654,658,662,666,671],{"url":615,"sources":616,"tags":622},"https://github.com/aio-libs/aiohttp/security/advisories/GHSA-mq44-7p77-q5h7",[611,617,618,619,620,621],"nvd","osv_pypi","osv_ubuntu","osv_wolfi","osv_chainguard",[623,624,625,626],"X Refsource CONFIRM","WEB","REPORT","Advisory",{"url":628,"sources":629,"tags":630},"https://github.com/aio-libs/aiohttp/pull/12978",[611,617,618,619,620,621],[631,624,625,632],"X Refsource MISC","FIX",{"url":634,"sources":635,"tags":636},"https://github.com/aio-libs/aiohttp/commit/47fb6ae354d4fa22048f4dbe7dbf82b625f0a2f6",[611,617,618,620,621],[631,624,632],{"url":638,"sources":639,"tags":640},"http://github.com/aio-libs/aiohttp/releases/tag/v3.14.2",[611,617,618,620,621],[631,624],{"url":642,"sources":643,"tags":644},"https://nvd.nist.gov/vuln/detail/CVE-2026-59881",[618,620,621],[626],{"url":646,"sources":647,"tags":648},"https://github.com/aio-libs/aiohttp",[618],[649],"PACKAGE",{"url":651,"sources":652,"tags":653},"https://pypi.org/project/aiohttp",[618],[649],{"url":655,"sources":656,"tags":657},"https://github.com/advisories/GHSA-mq44-7p77-q5h7",[618],[626],{"url":659,"sources":660,"tags":661},"https://ubuntu.com/security/CVE-2026-59881",[619],[625],{"url":663,"sources":664,"tags":665},"https://www.cve.org/CVERecord?id=CVE-2026-59881",[619],[625],{"url":667,"sources":668,"tags":670},"https://security-tracker.debian.org/tracker/CVE-2026-59881",[669],"osv_debian",[626],{"url":672,"sources":673,"tags":674},"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/59xxx/CVE-2026-59881.json",[620,621],[626],[],{"date":677,"score":607,"percentile":678},"2026-09-19",0.23079,[680,683,686,689,692,695,698,701,704,707,710,713,716,719,722,725,728,731,734,737,740,743,746,749,752,755,758,761,764,767,770,773,776,779,782,785,788,790,793,796,799,802,805,808,811,814,817,820,823,826,829],{"date":681,"score":607,"percentile":682},"2026-07-31",0.22503,{"date":684,"score":607,"percentile":685},"2026-08-01",0.22502,{"date":687,"score":607,"percentile":688},"2026-08-02",0.22507,{"date":690,"score":607,"percentile":691},"2026-08-03",0.22522,{"date":693,"score":607,"percentile":694},"2026-08-04",0.22469,{"date":696,"score":607,"percentile":697},"2026-08-05",0.22419,{"date":699,"score":607,"percentile":700},"2026-08-06",0.22433,{"date":702,"score":607,"percentile":703},"2026-08-07",0.22452,{"date":705,"score":607,"percentile":706},"2026-08-08",0.22447,{"date":708,"score":607,"percentile":709},"2026-08-09",0.22437,{"date":711,"score":607,"percentile":712},"2026-08-10",0.22451,{"date":714,"score":607,"percentile":715},"2026-08-11",0.22546,{"date":717,"score":607,"percentile":718},"2026-08-12",0.22586,{"date":720,"score":607,"percentile":721},"2026-08-13",0.2261,{"date":723,"score":607,"percentile":724},"2026-08-14",0.22641,{"date":726,"score":607,"percentile":727},"2026-08-15",0.22792,{"date":729,"score":607,"percentile":730},"2026-08-16",0.22801,{"date":732,"score":607,"percentile":733},"2026-08-17",0.22708,{"date":735,"score":607,"percentile":736},"2026-08-18",0.22728,{"date":738,"score":607,"percentile":739},"2026-08-19",0.22815,{"date":741,"score":607,"percentile":742},"2026-08-20",0.22861,{"date":744,"score":607,"percentile":745},"2026-08-21",0.22896,{"date":747,"score":607,"percentile":748},"2026-08-22",0.229,{"date":750,"score":607,"percentile":751},"2026-08-23",0.22872,{"date":753,"score":607,"percentile":754},"2026-08-24",0.22171,{"date":756,"score":607,"percentile":757},"2026-08-25",0.22187,{"date":759,"score":607,"percentile":760},"2026-08-26",0.22259,{"date":762,"score":607,"percentile":763},"2026-08-27",0.22264,{"date":765,"score":607,"percentile":766},"2026-08-28",0.22266,{"date":768,"score":607,"percentile":769},"2026-08-29",0.2229,{"date":771,"score":607,"percentile":772},"2026-08-30",0.22332,{"date":774,"score":607,"percentile":775},"2026-08-31",0.22312,{"date":777,"score":607,"percentile":778},"2026-09-01",0.22338,{"date":780,"score":607,"percentile":781},"2026-09-02",0.22362,{"date":783,"score":607,"percentile":784},"2026-09-03",0.22382,{"date":786,"score":607,"percentile":787},"2026-09-04",0.22411,{"date":789,"score":607,"percentile":700},"2026-09-05",{"date":791,"score":607,"percentile":792},"2026-09-06",0.22479,{"date":794,"score":607,"percentile":795},"2026-09-07",0.22482,{"date":797,"score":607,"percentile":798},"2026-09-08",0.22493,{"date":800,"score":607,"percentile":801},"2026-09-09",0.22618,{"date":803,"score":607,"percentile":804},"2026-09-10",0.22623,{"date":806,"score":607,"percentile":807},"2026-09-11",0.22617,{"date":809,"score":607,"percentile":810},"2026-09-12",0.22722,{"date":812,"score":607,"percentile":813},"2026-09-13",0.22684,{"date":815,"score":607,"percentile":816},"2026-09-14",0.22701,{"date":818,"score":607,"percentile":819},"2026-09-15",0.22774,{"date":821,"score":607,"percentile":822},"2026-09-16",0.22866,{"date":824,"score":607,"percentile":825},"2026-09-17",0.22922,{"date":827,"score":607,"percentile":828},"2026-09-18",0.23068,{"date":677,"score":607,"percentile":678},[831,834,837,839,841,843,845],{"source":611,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":832},{"baseScore":609,"baseSeverity":833,"vectorString":612,"impactScore":9,"exploitabilityScore":9},"MEDIUM",{"source":617,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":835},{"baseScore":609,"baseSeverity":833,"vectorString":836,"impactScore":9,"exploitabilityScore":9},"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",{"source":618,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":838},{"baseScore":609,"baseSeverity":9,"vectorString":612,"impactScore":9,"exploitabilityScore":9},{"source":619,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":840},{"baseScore":609,"baseSeverity":9,"vectorString":612,"impactScore":9,"exploitabilityScore":9},{"source":669,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":842},{"baseScore":609,"baseSeverity":9,"vectorString":836,"impactScore":9,"exploitabilityScore":9},{"source":620,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":844},{"baseScore":609,"baseSeverity":9,"vectorString":612,"impactScore":9,"exploitabilityScore":9},{"source":621,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":846},{"baseScore":609,"baseSeverity":9,"vectorString":612,"impactScore":9,"exploitabilityScore":9},[848,858,867,876,880,886,892,898,902,908,914,923,929,935,939,945,953,959,965,971,977,983,987,993,999,1005,1011,1014,1017,1020,1023,1028,1031,1034,1044,1049],{"ecosystem":9,"name":849,"vendor":850,"product":849,"cpe_part":851,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":852},"aiohttp","aio-libs","a",[853],{"version":854,"is_range":855,"range_type":611,"version_start":9,"version_start_type":9,"version_end":856,"version_end_type":857,"fixed_in":9},"\u003C 3.14.2",true,"3.14.2","excluding",{"ecosystem":859,"name":860,"vendor":861,"product":860,"cpe_part":9,"purl_type":862,"purl_namespace":861,"purl_name":860,"source":9,"versions":863},"Chainguard","airflow-2","chainguard","apk",[864],{"version":865,"is_range":855,"range_type":866,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all","ecosystem",{"ecosystem":859,"name":868,"vendor":861,"product":868,"cpe_part":9,"purl_type":862,"purl_namespace":861,"purl_name":868,"source":9,"versions":869},"airflow-3",[870,873],{"version":871,"is_range":855,"range_type":866,"version_start":9,"version_start_type":9,"version_end":872,"version_end_type":857,"fixed_in":9},"lt3_3_1_r1","3.3.1-r1",{"version":874,"is_range":855,"range_type":866,"version_start":9,"version_start_type":9,"version_end":875,"version_end_type":857,"fixed_in":9},"lt3_3_0_r4","3.3.0-r4",{"ecosystem":859,"name":877,"vendor":861,"product":877,"cpe_part":9,"purl_type":862,"purl_namespace":861,"purl_name":877,"source":9,"versions":878},"airflow-3-iamguarded-compat",[879],{"version":865,"is_range":855,"range_type":866,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":859,"name":881,"vendor":861,"product":881,"cpe_part":9,"purl_type":862,"purl_namespace":861,"purl_name":881,"source":9,"versions":882},"airflow-core-2",[883],{"version":884,"is_range":855,"range_type":866,"version_start":9,"version_start_type":9,"version_end":885,"version_end_type":857,"fixed_in":9},"lt2_11_2_r6","2.11.2-r6",{"ecosystem":859,"name":887,"vendor":861,"product":887,"cpe_part":9,"purl_type":862,"purl_namespace":861,"purl_name":887,"source":9,"versions":888},"apache-beam-python-3.11-sdk",[889],{"version":890,"is_range":855,"range_type":866,"version_start":9,"version_start_type":9,"version_end":891,"version_end_type":857,"fixed_in":9},"lt2_75_0_r2","2.75.0-r2",{"ecosystem":859,"name":893,"vendor":861,"product":893,"cpe_part":9,"purl_type":862,"purl_namespace":861,"purl_name":893,"source":9,"versions":894},"apache-beam-python-3.12-sdk",[895],{"version":896,"is_range":855,"range_type":866,"version_start":9,"version_start_type":9,"version_end":897,"version_end_type":857,"fixed_in":9},"lt2_75_0_r1","2.75.0-r1",{"ecosystem":859,"name":899,"vendor":861,"product":899,"cpe_part":9,"purl_type":862,"purl_namespace":861,"purl_name":899,"source":9,"versions":900},"apache-beam-python-3.13-sdk",[901],{"version":890,"is_range":855,"range_type":866,"version_start":9,"version_start_type":9,"version_end":891,"version_end_type":857,"fixed_in":9},{"ecosystem":859,"name":903,"vendor":861,"product":903,"cpe_part":9,"purl_type":862,"purl_namespace":861,"purl_name":903,"source":9,"versions":904},"awx",[905],{"version":906,"is_range":855,"range_type":866,"version_start":9,"version_start_type":9,"version_end":907,"version_end_type":857,"fixed_in":9},"lt24_6_1_r49","24.6.1-r49",{"ecosystem":859,"name":909,"vendor":861,"product":909,"cpe_part":9,"purl_type":862,"purl_namespace":861,"purl_name":909,"source":9,"versions":910},"dask-kubernetes",[911],{"version":912,"is_range":855,"range_type":866,"version_start":9,"version_start_type":9,"version_end":913,"version_end_type":857,"fixed_in":9},"lt2026_3_0_r11","2026.3.0-r11",{"ecosystem":859,"name":915,"vendor":861,"product":915,"cpe_part":9,"purl_type":862,"purl_namespace":861,"purl_name":915,"source":9,"versions":916},"dask-kubernetes-fips",[917,920],{"version":918,"is_range":855,"range_type":866,"version_start":9,"version_start_type":9,"version_end":919,"version_end_type":857,"fixed_in":9},"lt2026_3_0_r6","2026.3.0-r6",{"version":921,"is_range":855,"range_type":866,"version_start":9,"version_start_type":9,"version_end":922,"version_end_type":857,"fixed_in":9},"lt2026_3_0_r5","2026.3.0-r5",{"ecosystem":859,"name":924,"vendor":861,"product":924,"cpe_part":9,"purl_type":862,"purl_namespace":861,"purl_name":924,"source":9,"versions":925},"datahub-ingestion-fips",[926],{"version":927,"is_range":855,"range_type":866,"version_start":9,"version_start_type":9,"version_end":928,"version_end_type":857,"fixed_in":9},"lt1_6_0_r9","1.6.0-r9",{"ecosystem":859,"name":930,"vendor":861,"product":930,"cpe_part":9,"purl_type":862,"purl_namespace":861,"purl_name":930,"source":9,"versions":931},"kserve",[932],{"version":933,"is_range":855,"range_type":866,"version_start":9,"version_start_type":9,"version_end":934,"version_end_type":857,"fixed_in":9},"lt0_20_0_r7","0.20.0-r7",{"ecosystem":859,"name":936,"vendor":861,"product":936,"cpe_part":9,"purl_type":862,"purl_namespace":861,"purl_name":936,"source":9,"versions":937},"kserve-localmodel",[938],{"version":933,"is_range":855,"range_type":866,"version_start":9,"version_start_type":9,"version_end":934,"version_end_type":857,"fixed_in":9},{"ecosystem":859,"name":940,"vendor":861,"product":940,"cpe_part":9,"purl_type":862,"purl_namespace":861,"purl_name":940,"source":9,"versions":941},"kserve-models-web-app",[942],{"version":943,"is_range":855,"range_type":866,"version_start":9,"version_start_type":9,"version_end":944,"version_end_type":857,"fixed_in":9},"lt1_0_1_r2","1.0.1-r2",{"ecosystem":859,"name":946,"vendor":861,"product":946,"cpe_part":9,"purl_type":862,"purl_namespace":861,"purl_name":946,"source":9,"versions":947},"kserve-storage-controller",[948,951,952],{"version":949,"is_range":855,"range_type":866,"version_start":9,"version_start_type":9,"version_end":950,"version_end_type":857,"fixed_in":9},"lt0_19_0_r5","0.19.0-r5",{"version":865,"is_range":855,"range_type":866,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":933,"is_range":855,"range_type":866,"version_start":9,"version_start_type":9,"version_end":934,"version_end_type":857,"fixed_in":9},{"ecosystem":859,"name":954,"vendor":861,"product":954,"cpe_part":9,"purl_type":862,"purl_namespace":861,"purl_name":954,"source":9,"versions":955},"lmcache-cuda-12.8",[956],{"version":957,"is_range":855,"range_type":866,"version_start":9,"version_start_type":9,"version_end":958,"version_end_type":857,"fixed_in":9},"lt0_5_3_r0","0.5.3-r0",{"ecosystem":859,"name":960,"vendor":861,"product":960,"cpe_part":9,"purl_type":862,"purl_namespace":861,"purl_name":960,"source":9,"versions":961},"open-webui",[962],{"version":963,"is_range":855,"range_type":866,"version_start":9,"version_start_type":9,"version_end":964,"version_end_type":857,"fixed_in":9},"lt0_11_0_r6","0.11.0-r6",{"ecosystem":859,"name":966,"vendor":861,"product":966,"cpe_part":9,"purl_type":862,"purl_namespace":861,"purl_name":966,"source":9,"versions":967},"puppygraph-python",[968],{"version":969,"is_range":855,"range_type":866,"version_start":9,"version_start_type":9,"version_end":970,"version_end_type":857,"fixed_in":9},"lt0_1_6_r2","0.1.6-r2",{"ecosystem":859,"name":972,"vendor":861,"product":972,"cpe_part":9,"purl_type":862,"purl_namespace":861,"purl_name":972,"source":9,"versions":973},"py3-cassandra-medusa",[974],{"version":975,"is_range":855,"range_type":866,"version_start":9,"version_start_type":9,"version_end":976,"version_end_type":857,"fixed_in":9},"lt0_29_1_r1","0.29.1-r1",{"ecosystem":859,"name":978,"vendor":861,"product":978,"cpe_part":9,"purl_type":862,"purl_namespace":861,"purl_name":978,"source":9,"versions":979},"py3.10-vllm-cuda-12.4",[980],{"version":981,"is_range":855,"range_type":866,"version_start":9,"version_start_type":9,"version_end":982,"version_end_type":857,"fixed_in":9},"lt0_18_1_r7","0.18.1-r7",{"ecosystem":859,"name":984,"vendor":861,"product":984,"cpe_part":9,"purl_type":862,"purl_namespace":861,"purl_name":984,"source":9,"versions":985},"py3.12-vllm-cuda-12.4",[986],{"version":981,"is_range":855,"range_type":866,"version_start":9,"version_start_type":9,"version_end":982,"version_end_type":857,"fixed_in":9},{"ecosystem":859,"name":988,"vendor":861,"product":988,"cpe_part":9,"purl_type":862,"purl_namespace":861,"purl_name":988,"source":9,"versions":989},"py3.13-scanner-test-libraries-aiohttp",[990],{"version":991,"is_range":855,"range_type":866,"version_start":9,"version_start_type":9,"version_end":992,"version_end_type":857,"fixed_in":9},"lt0_0_1_r4","0.0.1-r4",{"ecosystem":859,"name":994,"vendor":861,"product":994,"cpe_part":9,"purl_type":862,"purl_namespace":861,"purl_name":994,"source":9,"versions":995},"text-generation-inference",[996],{"version":997,"is_range":855,"range_type":866,"version_start":9,"version_start_type":9,"version_end":998,"version_end_type":857,"fixed_in":9},"lt3_3_7_r23","3.3.7-r23",{"ecosystem":859,"name":1000,"vendor":861,"product":1000,"cpe_part":9,"purl_type":862,"purl_namespace":861,"purl_name":1000,"source":9,"versions":1001},"tritonserver-backend-vllm-cuda-13.0",[1002],{"version":1003,"is_range":855,"range_type":866,"version_start":9,"version_start_type":9,"version_end":1004,"version_end_type":857,"fixed_in":9},"lt25_11_r11","25.11-r11",{"ecosystem":1006,"name":868,"vendor":1007,"product":868,"cpe_part":9,"purl_type":862,"purl_namespace":1007,"purl_name":868,"source":9,"versions":1008},"Wolfi","wolfi",[1009,1010],{"version":871,"is_range":855,"range_type":866,"version_start":9,"version_start_type":9,"version_end":872,"version_end_type":857,"fixed_in":9},{"version":874,"is_range":855,"range_type":866,"version_start":9,"version_start_type":9,"version_end":875,"version_end_type":857,"fixed_in":9},{"ecosystem":1006,"name":877,"vendor":1007,"product":877,"cpe_part":9,"purl_type":862,"purl_namespace":1007,"purl_name":877,"source":9,"versions":1012},[1013],{"version":865,"is_range":855,"range_type":866,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":1006,"name":909,"vendor":1007,"product":909,"cpe_part":9,"purl_type":862,"purl_namespace":1007,"purl_name":909,"source":9,"versions":1015},[1016],{"version":912,"is_range":855,"range_type":866,"version_start":9,"version_start_type":9,"version_end":913,"version_end_type":857,"fixed_in":9},{"ecosystem":1006,"name":930,"vendor":1007,"product":930,"cpe_part":9,"purl_type":862,"purl_namespace":1007,"purl_name":930,"source":9,"versions":1018},[1019],{"version":933,"is_range":855,"range_type":866,"version_start":9,"version_start_type":9,"version_end":934,"version_end_type":857,"fixed_in":9},{"ecosystem":1006,"name":936,"vendor":1007,"product":936,"cpe_part":9,"purl_type":862,"purl_namespace":1007,"purl_name":936,"source":9,"versions":1021},[1022],{"version":933,"is_range":855,"range_type":866,"version_start":9,"version_start_type":9,"version_end":934,"version_end_type":857,"fixed_in":9},{"ecosystem":1006,"name":946,"vendor":1007,"product":946,"cpe_part":9,"purl_type":862,"purl_namespace":1007,"purl_name":946,"source":9,"versions":1024},[1025,1026,1027],{"version":949,"is_range":855,"range_type":866,"version_start":9,"version_start_type":9,"version_end":950,"version_end_type":857,"fixed_in":9},{"version":865,"is_range":855,"range_type":866,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":933,"is_range":855,"range_type":866,"version_start":9,"version_start_type":9,"version_end":934,"version_end_type":857,"fixed_in":9},{"ecosystem":1006,"name":960,"vendor":1007,"product":960,"cpe_part":9,"purl_type":862,"purl_namespace":1007,"purl_name":960,"source":9,"versions":1029},[1030],{"version":963,"is_range":855,"range_type":866,"version_start":9,"version_start_type":9,"version_end":964,"version_end_type":857,"fixed_in":9},{"ecosystem":1006,"name":972,"vendor":1007,"product":972,"cpe_part":9,"purl_type":862,"purl_namespace":1007,"purl_name":972,"source":9,"versions":1032},[1033],{"version":975,"is_range":855,"range_type":866,"version_start":9,"version_start_type":9,"version_end":976,"version_end_type":857,"fixed_in":9},{"ecosystem":1035,"name":1036,"vendor":1037,"product":1036,"cpe_part":9,"purl_type":1038,"purl_namespace":1037,"purl_name":1036,"source":9,"versions":1039},"Debian","python-aiohttp","debian","deb",[1040,1041,1042,1043],{"version":865,"is_range":855,"range_type":866,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":865,"is_range":855,"range_type":866,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":865,"is_range":855,"range_type":866,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":865,"is_range":855,"range_type":866,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":1045,"name":1036,"vendor":1046,"product":1036,"cpe_part":9,"purl_type":1038,"purl_namespace":1046,"purl_name":1036,"source":9,"versions":1047},"Ubuntu","ubuntu",[1048],{"version":865,"is_range":855,"range_type":866,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":1050,"name":849,"vendor":1050,"product":849,"cpe_part":9,"purl_type":1051,"purl_namespace":9,"purl_name":849,"source":9,"versions":1052},"PyPI","pypi",[1053],{"version":1054,"is_range":855,"range_type":866,"version_start":9,"version_start_type":9,"version_end":856,"version_end_type":857,"fixed_in":9},"lt3_14_2"]