[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-MGASA-2026-0353":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T11:35:27.363Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":11,"aliases":12,"duplicate_of":9,"upstream":13,"downstream":34,"duplicates":35,"related":36,"reserved_at":9,"published_at":37,"modified_at":38,"state":9,"summary":39,"references_raw":41,"kevs":74,"epss":9,"epss_history":75,"metrics":76,"affected":77},"MGASA-2026-0353","Updated openssl packages fix security vulnerabilities\n\nUnbounded Memory Growth in QUIC Server Incoming Channel Queue.\n(CVE-2026-14456)\nQUIC Server May Trigger Double Free When Processing INITIAL Packet.\n(CVE-2026-18798)\nHeap Buffer Overflow in CMS Key Unwrapping. (CVE-2026-63072)\nInvalid Pointer Dereference in CMP Server via Crafted protectionAlg.\n(CVE-2026-63076)\nRPK Server Signature Algorithm Selection Can Dereference a Missing\nCertificate. (CVE-2026-14457)\nExcessive Memory Use Buffering DTLS Records for a Future Epoch.\n(CVE-2026-54874)\nUntrusted Sender DN Used as Format String in CMP Response Validation.\n(CVE-2026-63073)\nCMP Indefinite Cache Growth of ExtraCerts. (CVE-2026-63074)\nQUIC ACK-only Packet Retention Can Cause Memory Exhaustion.\n(CVE-2026-63075)\n",null,[],[],[],[14,16,18,20,22,24,26,28,30,32],{"_key":15},"CVE-2026-14456",{"_key":17},"CVE-2026-14457",{"_key":19},"CVE-2026-18798",{"_key":21},"CVE-2026-54874",{"_key":23},"CVE-2026-63072",{"_key":25},"CVE-2026-63073",{"_key":27},"CVE-2026-63074",{"_key":29},"CVE-2026-63075",{"_key":31},"CVE-2026-63076",{"_key":33},"CVE-2026-75803",[],[],[],"2026-08-31T19:40:26Z","2026-08-31T19:56:27.732690321Z",{"cisa_kev":40,"cisa_ransomware":40,"cisa_vendor":9,"epss_severity":9,"epss_score":9,"severity":9,"severity_score":9,"severity_version":9,"severity_source":9,"severity_vector":9,"severity_status":9},false,[42,48,53,58,62,66,70],{"url":43,"sources":44,"tags":46},"https://advisories.mageia.org/MGASA-2026-0353.html",[45],"osv_mageia",[47],"Advisory",{"url":49,"sources":50,"tags":51},"https://bugs.mageia.org/show_bug.cgi?id=36139",[45],[52],"REPORT",{"url":54,"sources":55,"tags":56},"https://www.openwall.com/lists/oss-security/2026/08/13/4",[45],[57],"WEB",{"url":59,"sources":60,"tags":61},"https://openssl-library.org/news/secadv/20260813.txt",[45],[57],{"url":63,"sources":64,"tags":65},"https://www.openwall.com/lists/oss-security/2026/08/25/3",[45],[57],{"url":67,"sources":68,"tags":69},"https://openssl-library.org/news/secadv/20260825.txt",[45],[57],{"url":71,"sources":72,"tags":73},"https://lists.debian.org/debian-security-announce/2026/msg00376.html",[45],[57],[],[],[],[78,90],{"ecosystem":79,"name":80,"vendor":81,"product":80,"cpe_part":9,"purl_type":82,"purl_namespace":81,"purl_name":80,"source":9,"versions":83},"Mageia","openssl","mageia","rpm",[84],{"version":85,"is_range":86,"range_type":87,"version_start":9,"version_start_type":9,"version_end":88,"version_end_type":89,"fixed_in":9},"lt3_5_8_1_mga10",true,"ecosystem","3.5.8-1.mga10","excluding",{"ecosystem":79,"name":80,"vendor":81,"product":80,"cpe_part":9,"purl_type":82,"purl_namespace":81,"purl_name":80,"source":9,"versions":91},[92],{"version":93,"is_range":86,"range_type":87,"version_start":9,"version_start_type":9,"version_end":94,"version_end_type":89,"fixed_in":9},"lt3_0_22_1_mga9","3.0.22-1.mga9"]