[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-63074":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T11:35:27.363Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":406,"aliases":407,"duplicate_of":9,"upstream":425,"downstream":426,"duplicates":457,"related":458,"reserved_at":9,"published_at":471,"modified_at":472,"state":473,"summary":474,"references_raw":483,"kevs":550,"epss":551,"epss_history":554,"metrics":629,"affected":645},"CVE-2026-63074","Issue summary: The OpenSSL Certificate Management Protocol (CMP) caches\nadditional certificates (extraCerts) sent in a CMP message, but never expunges\nthem (for instance if they are invalid).  If a server reuses an OSSL_CMP_CTX\nfrequently, this cache of extraCerts may grow unboundedly, and a malicious\nclient may flood a CMP server with requests driving this growth.\n\nImpact summary: Users utilizing a CMP server that reuses a single OSSL_CMP_CTX\nfor the lifetime of a server process may observe unbounded memory growth in the\nevent a malicious client repeatedly sends requests containing unique extra\ncertificates, which may lead to OOM conditions.\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: If a remote user sends CMP messages to a server with a list of\nextraCerts and the message is rejected, the extraCerts from the message remains\nin the server contexts untrusted certificate stack.  This exposes servers with\nlong lived ctx objects to Denial of Service attacks in which an attacker sends\nmessages intending to be rejected with a large list of additional certificates\nrepeatedly, forcing the server to store them indefinitely.\n   \nThe issue was fixed by removing the added extra certs if the message is\nrejected, using the same method as when the context is configured to not do\ncaching at all.\n\nFIPS impact: no\nAs the CMP code lives outside the FIPS module boundary, no FIPS\nmodules are affected by this CVE.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-770","Allocation of Resources Without Limits or Throttling","The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.","weakness","Incomplete","Base","High",[20,106,116,120,124,128,132,136,168,230,234,238,268,298,330,334,338,342,346,350],{"id":21,"name":22,"techniques":23},"CAPEC-125","Flooding",[24,78],{"id":25,"name":26,"tactics":27,"countermeasures":31},"T1498.001","Direct Network Flood",[28],{"id":29,"name":30},"TA0105","Impact",[32,37,42,46,50,54,58,62,66,70,74],{"id":33,"name":34,"tactic":35},"D3-APCA","Application Protocol Command Analysis",{"name":36},"Detect",{"id":38,"name":39,"tactic":40},"D3-NTF","Network Traffic Filtering",{"name":41},"Isolate",{"id":43,"name":44,"tactic":45},"D3-ITF","Inbound Traffic Filtering",{"name":41},{"id":47,"name":48,"tactic":49},"D3-ISVA","Inbound Session Volume Analysis",{"name":36},{"id":51,"name":52,"tactic":53},"D3-RTSD","Remote Terminal Session Detection",{"name":36},{"id":55,"name":56,"tactic":57},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":36},{"id":59,"name":60,"tactic":61},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":36},{"id":63,"name":64,"tactic":65},"D3-NTCD","Network Traffic Community Deviation",{"name":36},{"id":67,"name":68,"tactic":69},"D3-CSPP","Client-server Payload Profiling",{"name":36},{"id":71,"name":72,"tactic":73},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":36},{"id":75,"name":76,"tactic":77},"D3-NTSA","Network Traffic Signature Analysis",{"name":36},{"id":79,"name":80,"tactics":81,"countermeasures":83},"T1499","Endpoint Denial of Service",[82],{"id":29,"name":30},[84,86,88,90,92,94,96,98,100,102,104],{"id":47,"name":48,"tactic":85},{"name":36},{"id":59,"name":60,"tactic":87},{"name":36},{"id":33,"name":34,"tactic":89},{"name":36},{"id":63,"name":64,"tactic":91},{"name":36},{"id":51,"name":52,"tactic":93},{"name":36},{"id":67,"name":68,"tactic":95},{"name":36},{"id":38,"name":39,"tactic":97},{"name":41},{"id":43,"name":44,"tactic":99},{"name":41},{"id":55,"name":56,"tactic":101},{"name":36},{"id":71,"name":72,"tactic":103},{"name":36},{"id":75,"name":76,"tactic":105},{"name":36},{"id":107,"name":108,"techniques":109},"CAPEC-130","Excessive Allocation",[110],{"id":111,"name":112,"tactics":113,"countermeasures":115},"T1499.003","Application Exhaustion Flood",[114],{"id":29,"name":30},[],{"id":117,"name":118,"techniques":119},"CAPEC-147","XML Ping of the Death",[],{"id":121,"name":122,"techniques":123},"CAPEC-197","Exponential Data Expansion",[],{"id":125,"name":126,"techniques":127},"CAPEC-229","Serialized Data Parameter Blowup",[],{"id":129,"name":130,"techniques":131},"CAPEC-230","Serialized Data with Nested Payloads",[],{"id":133,"name":134,"techniques":135},"CAPEC-231","Oversized Serialized Data Payloads",[],{"id":137,"name":138,"techniques":139},"CAPEC-469","HTTP DoS",[140],{"id":141,"name":142,"tactics":143,"countermeasures":145},"T1499.002","Service Exhaustion Flood",[144],{"id":29,"name":30},[146,148,150,152,154,156,158,160,162,164,166],{"id":75,"name":76,"tactic":147},{"name":36},{"id":63,"name":64,"tactic":149},{"name":36},{"id":43,"name":44,"tactic":151},{"name":41},{"id":71,"name":72,"tactic":153},{"name":36},{"id":55,"name":56,"tactic":155},{"name":36},{"id":59,"name":60,"tactic":157},{"name":36},{"id":33,"name":34,"tactic":159},{"name":36},{"id":51,"name":52,"tactic":161},{"name":36},{"id":67,"name":68,"tactic":163},{"name":36},{"id":38,"name":39,"tactic":165},{"name":41},{"id":47,"name":48,"tactic":167},{"name":36},{"id":169,"name":170,"techniques":171},"CAPEC-482","TCP Flood",[172,198,204],{"id":25,"name":26,"tactics":173,"countermeasures":175},[174],{"id":29,"name":30},[176,178,180,182,184,186,188,190,192,194,196],{"id":33,"name":34,"tactic":177},{"name":36},{"id":38,"name":39,"tactic":179},{"name":41},{"id":43,"name":44,"tactic":181},{"name":41},{"id":47,"name":48,"tactic":183},{"name":36},{"id":51,"name":52,"tactic":185},{"name":36},{"id":55,"name":56,"tactic":187},{"name":36},{"id":59,"name":60,"tactic":189},{"name":36},{"id":63,"name":64,"tactic":191},{"name":36},{"id":67,"name":68,"tactic":193},{"name":36},{"id":71,"name":72,"tactic":195},{"name":36},{"id":75,"name":76,"tactic":197},{"name":36},{"id":199,"name":200,"tactics":201,"countermeasures":203},"T1499.001","OS Exhaustion Flood",[202],{"id":29,"name":30},[],{"id":141,"name":142,"tactics":205,"countermeasures":207},[206],{"id":29,"name":30},[208,210,212,214,216,218,220,222,224,226,228],{"id":75,"name":76,"tactic":209},{"name":36},{"id":63,"name":64,"tactic":211},{"name":36},{"id":43,"name":44,"tactic":213},{"name":41},{"id":71,"name":72,"tactic":215},{"name":36},{"id":55,"name":56,"tactic":217},{"name":36},{"id":59,"name":60,"tactic":219},{"name":36},{"id":33,"name":34,"tactic":221},{"name":36},{"id":51,"name":52,"tactic":223},{"name":36},{"id":67,"name":68,"tactic":225},{"name":36},{"id":38,"name":39,"tactic":227},{"name":41},{"id":47,"name":48,"tactic":229},{"name":36},{"id":231,"name":232,"techniques":233},"CAPEC-486","UDP Flood",[],{"id":235,"name":236,"techniques":237},"CAPEC-487","ICMP Flood",[],{"id":239,"name":240,"techniques":241},"CAPEC-488","HTTP Flood",[242],{"id":141,"name":142,"tactics":243,"countermeasures":245},[244],{"id":29,"name":30},[246,248,250,252,254,256,258,260,262,264,266],{"id":75,"name":76,"tactic":247},{"name":36},{"id":63,"name":64,"tactic":249},{"name":36},{"id":43,"name":44,"tactic":251},{"name":41},{"id":71,"name":72,"tactic":253},{"name":36},{"id":55,"name":56,"tactic":255},{"name":36},{"id":59,"name":60,"tactic":257},{"name":36},{"id":33,"name":34,"tactic":259},{"name":36},{"id":51,"name":52,"tactic":261},{"name":36},{"id":67,"name":68,"tactic":263},{"name":36},{"id":38,"name":39,"tactic":265},{"name":41},{"id":47,"name":48,"tactic":267},{"name":36},{"id":269,"name":270,"techniques":271},"CAPEC-489","SSL Flood",[272],{"id":141,"name":142,"tactics":273,"countermeasures":275},[274],{"id":29,"name":30},[276,278,280,282,284,286,288,290,292,294,296],{"id":75,"name":76,"tactic":277},{"name":36},{"id":63,"name":64,"tactic":279},{"name":36},{"id":43,"name":44,"tactic":281},{"name":41},{"id":71,"name":72,"tactic":283},{"name":36},{"id":55,"name":56,"tactic":285},{"name":36},{"id":59,"name":60,"tactic":287},{"name":36},{"id":33,"name":34,"tactic":289},{"name":36},{"id":51,"name":52,"tactic":291},{"name":36},{"id":67,"name":68,"tactic":293},{"name":36},{"id":38,"name":39,"tactic":295},{"name":41},{"id":47,"name":48,"tactic":297},{"name":36},{"id":299,"name":300,"techniques":301},"CAPEC-490","Amplification",[302],{"id":303,"name":304,"tactics":305,"countermeasures":307},"T1498.002","Reflection Amplification",[306],{"id":29,"name":30},[308,310,312,314,316,318,320,322,324,326,328],{"id":67,"name":68,"tactic":309},{"name":36},{"id":43,"name":44,"tactic":311},{"name":41},{"id":47,"name":48,"tactic":313},{"name":36},{"id":71,"name":72,"tactic":315},{"name":36},{"id":59,"name":60,"tactic":317},{"name":36},{"id":33,"name":34,"tactic":319},{"name":36},{"id":75,"name":76,"tactic":321},{"name":36},{"id":55,"name":56,"tactic":323},{"name":36},{"id":51,"name":52,"tactic":325},{"name":36},{"id":38,"name":39,"tactic":327},{"name":41},{"id":63,"name":64,"tactic":329},{"name":36},{"id":331,"name":332,"techniques":333},"CAPEC-491","Quadratic Data Expansion",[],{"id":335,"name":336,"techniques":337},"CAPEC-493","SOAP Array Blowup",[],{"id":339,"name":340,"techniques":341},"CAPEC-494","TCP Fragmentation",[],{"id":343,"name":344,"techniques":345},"CAPEC-495","UDP Fragmentation",[],{"id":347,"name":348,"techniques":349},"CAPEC-496","ICMP Fragmentation",[],{"id":351,"name":352,"techniques":353},"CAPEC-528","XML Flood",[354,380],{"id":141,"name":142,"tactics":355,"countermeasures":357},[356],{"id":29,"name":30},[358,360,362,364,366,368,370,372,374,376,378],{"id":75,"name":76,"tactic":359},{"name":36},{"id":63,"name":64,"tactic":361},{"name":36},{"id":43,"name":44,"tactic":363},{"name":41},{"id":71,"name":72,"tactic":365},{"name":36},{"id":55,"name":56,"tactic":367},{"name":36},{"id":59,"name":60,"tactic":369},{"name":36},{"id":33,"name":34,"tactic":371},{"name":36},{"id":51,"name":52,"tactic":373},{"name":36},{"id":67,"name":68,"tactic":375},{"name":36},{"id":38,"name":39,"tactic":377},{"name":41},{"id":47,"name":48,"tactic":379},{"name":36},{"id":25,"name":26,"tactics":381,"countermeasures":383},[382],{"id":29,"name":30},[384,386,388,390,392,394,396,398,400,402,404],{"id":33,"name":34,"tactic":385},{"name":36},{"id":38,"name":39,"tactic":387},{"name":41},{"id":43,"name":44,"tactic":389},{"name":41},{"id":47,"name":48,"tactic":391},{"name":36},{"id":51,"name":52,"tactic":393},{"name":36},{"id":55,"name":56,"tactic":395},{"name":36},{"id":59,"name":60,"tactic":397},{"name":36},{"id":63,"name":64,"tactic":399},{"name":36},{"id":67,"name":68,"tactic":401},{"name":36},{"id":71,"name":72,"tactic":403},{"name":36},{"id":75,"name":76,"tactic":405},{"name":36},[],[408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424],"DEBIAN-CVE-2026-63074","UBUNTU-CVE-2026-63074","ALPINE-CVE-2026-63074","CGA-3cw6-4jq5-4g9w","CGA-62hg-h4px-f3r3","CGA-8p9f-qx47-q85h","CGA-9rrg-w8gf-56fp","CGA-9w8g-vfq2-fq75","CGA-cvm5-fjrh-4vqc","CGA-f8hf-cg9p-mwwf","CGA-gwxg-g7wc-mm27","CGA-j8v9-h49h-crxh","CGA-m4cr-jwgw-63mw","CGA-m892-84j4-7h2q","CGA-mv6p-rww4-r6q3","CGA-rf69-74qh-mm8p","CGA-wrm2-h9cg-f8g3",[],[427,429,431,433,435,437,439,441,443,445,447,449,451,453,455],{"_key":428},"OPENSUSE-SU-2026:11623-1",{"_key":430},"MGASA-2026-0353",{"_key":432},"USN-8678-1",{"_key":434},"OPENSUSE-SU-2026:21744-1",{"_key":436},"SUSE-SU-2026:3866-1",{"_key":438},"SUSE-SU-2026:3876-1",{"_key":440},"SUSE-SU-2026:4032-1",{"_key":442},"SUSE-SU-2026:4039-1",{"_key":444},"RHSA-2026:59635",{"_key":446},"RHSA-2026:59641",{"_key":448},"SUSE-SU-2026:23463-1",{"_key":450},"SUSE-SU-2026:23473-1",{"_key":452},"RHSA-2026:67154",{"_key":454},"RHSA-2026:67165",{"_key":456},"SUSE-SU-2026:23512-1",[],[459,460,461,462,463,464,465,466,467,468,470],{"_key":428},{"_key":434},{"_key":436},{"_key":438},{"_key":440},{"_key":442},{"_key":448},{"_key":450},{"_key":432},{"_key":469},"USN-8678-2",{"_key":456},"2026-08-25T12:59:58.278Z","2026-08-25T14:36:13.170Z","Analyzed",{"cisa_kev":475,"cisa_ransomware":475,"cisa_vendor":9,"epss_severity":476,"epss_score":477,"severity":478,"severity_score":479,"severity_version":480,"severity_source":481,"severity_vector":482,"severity_status":473},false,"low",0.00495,"medium",5.9,"v3.1","cve.org","CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",[484,492,498,502,506,510,514,519,525,529,533,538,542,546],{"url":485,"sources":486,"tags":489},"https://openssl-library.org/news/secadv/20260825.txt",[481,487,488],"nvd","osv_chainguard",[490,491],"Vendor Advisory","Advisory",{"url":493,"sources":494,"tags":495},"https://github.com/openssl/openssl/commit/74ae7f6df47a5767c1010b88c47507dfc5b32c46",[481,487,488],[496,497],"Patch","FIX",{"url":499,"sources":500,"tags":501},"https://github.com/openssl/openssl/commit/01e567978a55fba18142a230380c31296049fae7",[481,487,488],[496,497],{"url":503,"sources":504,"tags":505},"https://github.com/openssl/openssl/commit/75360af9650d4e0c82ba0050c5c9912cd79e54af",[481,487,488],[496,497],{"url":507,"sources":508,"tags":509},"https://github.com/openssl/openssl/commit/f636f9ca0fa1bae5b42f9e787f025c96fb09c43a",[481,487,488],[496,497],{"url":511,"sources":512,"tags":513},"https://github.com/openssl/openssl/commit/21a5d9658b0c66daace60e10ea18ff32a448de9f",[481,487,488],[496,497],{"url":515,"sources":516,"tags":518},"https://security-tracker.debian.org/tracker/CVE-2026-63074",[517],"osv_debian",[491],{"url":520,"sources":521,"tags":523},"https://ubuntu.com/security/CVE-2026-63074",[522],"osv_ubuntu",[524],"REPORT",{"url":526,"sources":527,"tags":528},"https://www.cve.org/CVERecord?id=CVE-2026-63074",[522],[524],{"url":530,"sources":531,"tags":532},"https://ubuntu.com/security/notices/USN-8678-1",[522],[491],{"url":534,"sources":535,"tags":537},"https://security.alpinelinux.org/vuln/CVE-2026-63074",[536],"osv_alpine",[491],{"url":539,"sources":540,"tags":541},"https://ubuntu.com/security/notices/USN-8678-2",[522],[491],{"url":543,"sources":544,"tags":545},"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/63xxx/CVE-2026-63074.json",[488],[491],{"url":547,"sources":548,"tags":549},"https://nvd.nist.gov/vuln/detail/CVE-2026-63074",[488],[491],[],{"date":552,"score":477,"percentile":553},"2026-09-19",0.41539,[555,559,562,565,568,571,574,577,580,583,586,589,592,595,598,601,604,607,610,613,616,619,622,625,628],{"date":556,"score":557,"percentile":558},"2026-08-26",0.00488,0.39889,{"date":560,"score":557,"percentile":561},"2026-08-27",0.39933,{"date":563,"score":557,"percentile":564},"2026-08-28",0.3987,{"date":566,"score":557,"percentile":567},"2026-08-29",0.39907,{"date":569,"score":557,"percentile":570},"2026-08-30",0.40025,{"date":572,"score":557,"percentile":573},"2026-08-31",0.40033,{"date":575,"score":557,"percentile":576},"2026-09-01",0.40064,{"date":578,"score":557,"percentile":579},"2026-09-02",0.40114,{"date":581,"score":557,"percentile":582},"2026-09-03",0.4014,{"date":584,"score":557,"percentile":585},"2026-09-04",0.40183,{"date":587,"score":557,"percentile":588},"2026-09-05",0.40128,{"date":590,"score":557,"percentile":591},"2026-09-06",0.40254,{"date":593,"score":557,"percentile":594},"2026-09-07",0.4026,{"date":596,"score":557,"percentile":597},"2026-09-08",0.40279,{"date":599,"score":557,"percentile":600},"2026-09-09",0.40431,{"date":602,"score":557,"percentile":603},"2026-09-10",0.40454,{"date":605,"score":557,"percentile":606},"2026-09-11",0.40483,{"date":608,"score":557,"percentile":609},"2026-09-12",0.40573,{"date":611,"score":557,"percentile":612},"2026-09-13",0.40519,{"date":614,"score":477,"percentile":615},"2026-09-14",0.4103,{"date":617,"score":477,"percentile":618},"2026-09-15",0.41102,{"date":620,"score":477,"percentile":621},"2026-09-16",0.41289,{"date":623,"score":477,"percentile":624},"2026-09-17",0.41363,{"date":626,"score":477,"percentile":627},"2026-09-18",0.41509,{"date":552,"score":477,"percentile":553},[630,635,637,639,641,643],{"source":481,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":631,"cvss_v4_0":9},{"baseScore":479,"baseSeverity":632,"vectorString":482,"impactScore":633,"exploitabilityScore":634},"MEDIUM",6,5.6,{"source":487,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":636,"cvss_v4_0":9},{"baseScore":479,"baseSeverity":632,"vectorString":482,"impactScore":633,"exploitabilityScore":634},{"source":536,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":638,"cvss_v4_0":9},{"baseScore":479,"baseSeverity":9,"vectorString":482,"impactScore":633,"exploitabilityScore":634},{"source":517,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":640,"cvss_v4_0":9},{"baseScore":479,"baseSeverity":9,"vectorString":482,"impactScore":633,"exploitabilityScore":634},{"source":522,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":642,"cvss_v4_0":9},{"baseScore":479,"baseSeverity":9,"vectorString":482,"impactScore":633,"exploitabilityScore":634},{"source":488,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":644,"cvss_v4_0":9},{"baseScore":479,"baseSeverity":9,"vectorString":482,"impactScore":633,"exploitabilityScore":634},[646,666,676,681,686,690,694,698,705,719,726,730,734,749,756],{"ecosystem":647,"name":648,"vendor":649,"product":648,"cpe_part":9,"purl_type":650,"purl_namespace":649,"purl_name":648,"source":9,"versions":651},"Alpine Linux","openssl","alpine","apk",[652,658,659,660,664,665],{"version":653,"is_range":654,"range_type":655,"version_start":9,"version_start_type":9,"version_end":656,"version_end_type":657,"fixed_in":9},"lt3_5_8_r0",true,"ecosystem","3.5.8-r0","excluding",{"version":653,"is_range":654,"range_type":655,"version_start":9,"version_start_type":9,"version_end":656,"version_end_type":657,"fixed_in":9},{"version":653,"is_range":654,"range_type":655,"version_start":9,"version_start_type":9,"version_end":656,"version_end_type":657,"fixed_in":9},{"version":661,"is_range":654,"range_type":655,"version_start":662,"version_start_type":663,"version_end":656,"version_end_type":657,"fixed_in":9},"gte3_0_0_lt3_5_8_r0","3.0.0","including",{"version":661,"is_range":654,"range_type":655,"version_start":662,"version_start_type":663,"version_end":656,"version_end_type":657,"fixed_in":9},{"version":661,"is_range":654,"range_type":655,"version_start":662,"version_start_type":663,"version_end":656,"version_end_type":657,"fixed_in":9},{"ecosystem":667,"name":668,"vendor":669,"product":668,"cpe_part":9,"purl_type":650,"purl_namespace":669,"purl_name":668,"source":9,"versions":670},"Chainguard","eco-python-openssl-4","chainguard",[671,673],{"version":672,"is_range":654,"range_type":655,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all",{"version":674,"is_range":654,"range_type":655,"version_start":9,"version_start_type":9,"version_end":675,"version_end_type":657,"fixed_in":9},"lt4_0_2_r0","4.0.2-r0",{"ecosystem":667,"name":677,"vendor":669,"product":677,"cpe_part":9,"purl_type":650,"purl_namespace":669,"purl_name":677,"source":9,"versions":678},"eco-python-openssl-4-pyca",[679,680],{"version":672,"is_range":654,"range_type":655,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":674,"is_range":654,"range_type":655,"version_start":9,"version_start_type":9,"version_end":675,"version_end_type":657,"fixed_in":9},{"ecosystem":667,"name":682,"vendor":669,"product":682,"cpe_part":9,"purl_type":650,"purl_namespace":669,"purl_name":682,"source":9,"versions":683},"eco-python-openssl-4-pyca-dev",[684,685],{"version":672,"is_range":654,"range_type":655,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":674,"is_range":654,"range_type":655,"version_start":9,"version_start_type":9,"version_end":675,"version_end_type":657,"fixed_in":9},{"ecosystem":667,"name":687,"vendor":669,"product":687,"cpe_part":9,"purl_type":650,"purl_namespace":669,"purl_name":687,"source":9,"versions":688},"openssl-provider-fips-3.4.0",[689],{"version":672,"is_range":654,"range_type":655,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":667,"name":691,"vendor":669,"product":691,"cpe_part":9,"purl_type":650,"purl_namespace":669,"purl_name":691,"source":9,"versions":692},"openssl-provider-fips-3.4.0-dbg",[693],{"version":672,"is_range":654,"range_type":655,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":667,"name":695,"vendor":669,"product":695,"cpe_part":9,"purl_type":650,"purl_namespace":669,"purl_name":695,"source":9,"versions":696},"openssl-provider-fips-3.6.0",[697],{"version":672,"is_range":654,"range_type":655,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":667,"name":699,"vendor":669,"product":699,"cpe_part":9,"purl_type":650,"purl_namespace":669,"purl_name":699,"source":9,"versions":700},"openssl-provider-fips-3.6.0-dbg",[701,702],{"version":672,"is_range":654,"range_type":655,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":703,"is_range":654,"range_type":655,"version_start":9,"version_start_type":9,"version_end":704,"version_end_type":657,"fixed_in":9},"lt0","0",{"ecosystem":706,"name":648,"vendor":707,"product":648,"cpe_part":9,"purl_type":708,"purl_namespace":707,"purl_name":648,"source":9,"versions":709},"Debian","debian","deb",[710,711,712,713,716],{"version":672,"is_range":654,"range_type":655,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":672,"is_range":654,"range_type":655,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":672,"is_range":654,"range_type":655,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":714,"is_range":654,"range_type":655,"version_start":9,"version_start_type":9,"version_end":715,"version_end_type":657,"fixed_in":9},"lt3_5_7_1~deb13u2","3.5.7-1~deb13u2",{"version":717,"is_range":654,"range_type":655,"version_start":9,"version_start_type":9,"version_end":718,"version_end_type":657,"fixed_in":9},"lt3_6_4_1","3.6.4-1",{"ecosystem":720,"name":721,"vendor":722,"product":721,"cpe_part":9,"purl_type":708,"purl_namespace":722,"purl_name":721,"source":9,"versions":723},"Ubuntu","edk2","ubuntu",[724,725],{"version":672,"is_range":654,"range_type":655,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":672,"is_range":654,"range_type":655,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":720,"name":727,"vendor":722,"product":727,"cpe_part":9,"purl_type":708,"purl_namespace":722,"purl_name":727,"source":9,"versions":728},"edk2-hwe",[729],{"version":672,"is_range":654,"range_type":655,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":720,"name":731,"vendor":722,"product":731,"cpe_part":9,"purl_type":708,"purl_namespace":722,"purl_name":731,"source":9,"versions":732},"nodejs",[733],{"version":672,"is_range":654,"range_type":655,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":720,"name":648,"vendor":722,"product":648,"cpe_part":9,"purl_type":708,"purl_namespace":722,"purl_name":648,"source":9,"versions":735},[736,739,740,743,746],{"version":737,"is_range":654,"range_type":655,"version_start":9,"version_start_type":9,"version_end":738,"version_end_type":657,"fixed_in":9},"lt3_0_2_0ubuntu1_29","3.0.2-0ubuntu1.29",{"version":672,"is_range":654,"range_type":655,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":741,"is_range":654,"range_type":655,"version_start":9,"version_start_type":9,"version_end":742,"version_end_type":657,"fixed_in":9},"lt3_0_2_0ubuntu1_29+Fips1","3.0.2-0ubuntu1.29+Fips1",{"version":744,"is_range":654,"range_type":655,"version_start":9,"version_start_type":9,"version_end":745,"version_end_type":657,"fixed_in":9},"lt3_0_13_0ubuntu3_15","3.0.13-0ubuntu3.15",{"version":747,"is_range":654,"range_type":655,"version_start":9,"version_start_type":9,"version_end":748,"version_end_type":657,"fixed_in":9},"lt3_5_5_1ubuntu3_4","3.5.5-1ubuntu3.4",{"ecosystem":720,"name":750,"vendor":722,"product":750,"cpe_part":9,"purl_type":708,"purl_namespace":722,"purl_name":750,"source":9,"versions":751},"openssl-fips",[752,753],{"version":672,"is_range":654,"range_type":655,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":754,"is_range":654,"range_type":655,"version_start":9,"version_start_type":9,"version_end":755,"version_end_type":657,"fixed_in":9},"lt3_0_13_0ubuntu3_15+Fips1","3.0.13-0ubuntu3.15+Fips1",{"ecosystem":9,"name":757,"vendor":648,"product":648,"cpe_part":758,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":759},"OpenSSL","a",[760,764,768,772,776],{"version":761,"is_range":654,"range_type":762,"version_start":662,"version_start_type":663,"version_end":763,"version_end_type":657,"fixed_in":9},"gte3.0.0_lt3.0.22","cpe","3.0.22",{"version":765,"is_range":654,"range_type":762,"version_start":766,"version_start_type":663,"version_end":767,"version_end_type":657,"fixed_in":9},"gte3.4.0_lt3.4.7","3.4.0","3.4.7",{"version":769,"is_range":654,"range_type":762,"version_start":770,"version_start_type":663,"version_end":771,"version_end_type":657,"fixed_in":9},"gte3.5.0_lt3.5.8","3.5.0","3.5.8",{"version":773,"is_range":654,"range_type":762,"version_start":774,"version_start_type":663,"version_end":775,"version_end_type":657,"fixed_in":9},"gte3.6.0_lt3.6.4","3.6.0","3.6.4",{"version":777,"is_range":654,"range_type":762,"version_start":778,"version_start_type":663,"version_end":779,"version_end_type":657,"fixed_in":9},"gte4.0.0_lt4.0.2","4.0.0","4.0.2"]