VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
100519 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-93568 | redhat_vex | io.netty/netty-codec-http2: io.netty/netty-codec-http3: Netty: HTTP/2 and HTTP/3 Extended CONNECT requests are downgraded as regular CONNECT requests | fixed: 4 known affected: 10 known not affected: 1644 | 2026-10-16T17:24:45+00:00 | Vulnerability · Source |
| CVE-2026-97031 | redhat_vex | crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references | known affected: 271 known not affected: 81 | 2026-10-16T17:24:39+00:00 | Vulnerability · Source |
| CVE-2023-39322 | redhat_vex | golang: crypto/tls: lack of a limit on buffered post-handshake | fixed: 1187 known affected: 69 known not affected: 1276 | 2026-10-16T17:20:16+00:00 | Vulnerability · Source |
| CVE-2023-37788 | redhat_vex | goproxy: Denial of service (DoS) via unspecified vectors. | fixed: 392 known affected: 132 known not affected: 4133 | 2026-10-16T17:20:08+00:00 | Vulnerability · Source |
| CVE-2023-26159 | redhat_vex | follow-redirects: Improper Input Validation due to the improper handling of URLs by the url.parse() | fixed: 165 known affected: 29 known not affected: 1365 | 2026-10-16T17:19:55+00:00 | Vulnerability · Source |
| CVE-2023-26136 | redhat_vex | tough-cookie: prototype pollution in cookie memstore | fixed: 383 known affected: 44 known not affected: 3506 | 2026-10-16T17:19:45+00:00 | Vulnerability · Source |
| CVE-2023-25173 | redhat_vex | containerd: Supplementary groups are not set up properly | fixed: 477 known affected: 114 known not affected: 2344 | 2026-10-16T17:19:42+00:00 | Vulnerability · Source |
| CVE-2022-36087 | redhat_vex | python-oauthlib: DoS when attacker provides malicious IPV6 URI | fixed: 187 known affected: 10 known not affected: 14 | 2026-10-16T17:19:30+00:00 | Vulnerability · Source |
| CVE-2022-24769 | redhat_vex | moby: Default inheritable capabilities for linux container should be empty | fixed: 34 known affected: 30 known not affected: 1170 | 2026-10-16T17:19:20+00:00 | Vulnerability · Source |
| CVE-2022-21698 | redhat_vex | prometheus/client_golang: Denial of service using InstrumentHandlerCounter | fixed: 1323 known affected: 219 known not affected: 5260 under investigation: 75 | 2026-10-16T17:19:12+00:00 | Vulnerability · Source |
| CVE-2022-1941 | redhat_vex | protobuf: message parsing vulnerability in ProtocolBuffers | fixed: 67 known not affected: 105 | 2026-10-16T17:19:12+00:00 | Vulnerability · Source |
| CVE-2021-41092 | redhat_vex | docker: cli leaks private registry credentials to registry-1.docker.io | known affected: 1 known not affected: 20 | 2026-10-16T17:19:08+00:00 | Vulnerability · Source |
| CVE-2021-4235 | redhat_vex | go-yaml: Denial of Service in go-yaml | fixed: 40 known affected: 60 known not affected: 3265 | 2026-10-16T17:19:07+00:00 | Vulnerability · Source |
| CVE-2026-48937 | redhat_vex | nodejs: Node.js HTTP/2 Server: Denial of Service due to continued data acceptance after GOAWAY frame | fixed: 316 known affected: 6 known not affected: 5 | 2026-10-16T17:15:19+00:00 | Vulnerability · Source |
| CVE-2021-32760 | redhat_vex | containerd: pulling and extracting crafted container image may result in Unix file permission changes | fixed: 37 known affected: 4 known not affected: 180 under investigation: 2 | 2026-10-16T17:14:48+00:00 | Vulnerability · Source |
| CVE-2020-28852 | redhat_vex | golang.org/x/text: Panic in language.ParseAcceptLanguage while processing bcp47 tag | fixed: 83 known affected: 68 known not affected: 546 | 2026-10-16T17:14:36+00:00 | Vulnerability · Source |
| CVE-2020-28851 | redhat_vex | golang.org/x/text: Panic in language.ParseAcceptLanguage while parsing -u- extension | fixed: 347 known affected: 55 known not affected: 164 | 2026-10-16T17:14:29+00:00 | Vulnerability · Source |
| CVE-2020-26160 | redhat_vex | jwt-go: access restriction bypass vulnerability | fixed: 44 known affected: 86 known not affected: 816 | 2026-10-16T17:14:19+00:00 | Vulnerability · Source |
| CVE-2018-17419 | redhat_vex | dns: Denial of Service (DoS) | fixed: 20 known not affected: 1356 | 2026-10-16T17:14:14+00:00 | Vulnerability · Source |
| CVE-2017-20146 | redhat_vex | gorilla: Usage of the CORS handler may apply improper CORS headers | known affected: 5 known not affected: 125 | 2026-10-16T17:14:08+00:00 | Vulnerability · Source |
| CVE-2026-80792 | redhat_vex | kernel: ipv6: fix use-after-free in ip6_finish_output2() | fixed: 1148 known affected: 100 known not affected: 91 | 2026-10-16T17:13:31+00:00 | Vulnerability · Source |
| CVE-2026-68480 | redhat_vex | kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability | fixed: 1800 known affected: 50 known not affected: 14 | 2026-10-16T17:13:24+00:00 | Vulnerability · Source |
| CVE-2026-63993 | redhat_vex | kernel: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() | fixed: 919 known affected: 22 known not affected: 90 | 2026-10-16T17:13:09+00:00 | Vulnerability · Source |
| CVE-2026-46189 | redhat_vex | kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path | fixed: 2174 known affected: 50 known not affected: 14 | 2026-10-16T17:12:45+00:00 | Vulnerability · Source |
| CVE-2026-3909 | redhat_vex | chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia | fixed: 92 known affected: 4 known not affected: 21 | 2026-10-16T17:08:03+00:00 | Vulnerability · Source |
| CVE-2024-45337 | redhat_vex | golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto | fixed: 1801 known affected: 72 known not affected: 8478 | 2026-10-16T16:52:48+00:00 | Vulnerability · Source |
| CVE-2023-25151 | redhat_vex | opentelemetry-go: DoS vulnerability for high cardinality metrics in otelhttp and otelbeego | known not affected: 287 | 2026-10-16T16:41:19+00:00 | Vulnerability · Source |
| CVE-2023-5332 | redhat_vex | consul: Command injection through script checks option | known affected: 20 known not affected: 55 | 2026-10-16T16:41:02+00:00 | Vulnerability · Source |
| CVE-2022-3064 | redhat_vex | go-yaml: Improve heuristics preventing CPU/memory abuse by parsing malicious or large YAML documents | fixed: 658 known affected: 77 known not affected: 3384 under investigation: 2 | 2026-10-16T16:40:41+00:00 | Vulnerability · Source |
| CVE-2026-93541 | suse_vex | SUSE CVE CVE-2026-93541 | known affected: 560 recommended: 4 | 2026-10-16T16:30:36+00:00 | Vulnerability · Source |
| CVE-2026-93542 | suse_vex | SUSE CVE CVE-2026-93542 | known affected: 560 recommended: 4 | 2026-10-16T16:30:34+00:00 | Vulnerability · Source |
| CVE-2026-93543 | suse_vex | SUSE CVE CVE-2026-93543 | known affected: 560 recommended: 4 | 2026-10-16T16:30:33+00:00 | Vulnerability · Source |
| CVE-2026-93544 | suse_vex | SUSE CVE CVE-2026-93544 | known affected: 560 recommended: 4 | 2026-10-16T16:30:31+00:00 | Vulnerability · Source |
| CVE-2026-93545 | suse_vex | SUSE CVE CVE-2026-93545 | known affected: 560 recommended: 4 | 2026-10-16T16:30:29+00:00 | Vulnerability · Source |
| CVE-2026-94114 | suse_vex | SUSE CVE CVE-2026-94114 | known affected: 45 recommended: 2 | 2026-10-16T16:30:07+00:00 | Vulnerability · Source |
| CVE-2026-94281 | suse_vex | SUSE CVE CVE-2026-94281 | known affected: 560 recommended: 4 | 2026-10-16T16:30:05+00:00 | Vulnerability · Source |
| CVE-2026-94282 | suse_vex | SUSE CVE CVE-2026-94282 | known affected: 560 recommended: 4 | 2026-10-16T16:30:03+00:00 | Vulnerability · Source |
| CVE-2026-97222 | suse_vex | SUSE CVE CVE-2026-97222 | No product status | 2026-10-16T16:29:59+00:00 | Vulnerability · Source |
| CVE-2026-97617 | suse_vex | SUSE CVE CVE-2026-97617 | known affected: 29 known not affected: 318 recommended: 4 | 2026-10-16T16:29:45+00:00 | Vulnerability · Source |
| CVE-2026-97687 | suse_vex | SUSE CVE CVE-2026-97687 | known affected: 99 known not affected: 80 recommended: 2 | 2026-10-16T16:29:43+00:00 | Vulnerability · Source |
| CVE-2026-98014 | suse_vex | SUSE CVE CVE-2026-98014 | known affected: 232 known not affected: 115 recommended: 4 | 2026-10-16T16:29:26+00:00 | Vulnerability · Source |
| CVE-2026-98076 | suse_vex | SUSE CVE CVE-2026-98076 | known affected: 204 known not affected: 143 recommended: 4 | 2026-10-16T16:29:21+00:00 | Vulnerability · Source |
| CVE-2026-98314 | suse_vex | SUSE CVE CVE-2026-98314 | known affected: 269 known not affected: 78 | 2026-10-16T16:29:12+00:00 | Vulnerability · Source |
| CVE-2026-98335 | suse_vex | SUSE CVE CVE-2026-98335 | known affected: 282 known not affected: 65 | 2026-10-16T16:29:10+00:00 | Vulnerability · Source |
| CVE-2026-101258 | suse_vex | SUSE CVE CVE-2026-101258 | known affected: 131 recommended: 26 | 2026-10-16T16:28:47+00:00 | Vulnerability · Source |
| CVE-2026-102555 | suse_vex | SUSE CVE CVE-2026-102555 | known affected: 26 known not affected: 183 recommended: 63 | 2026-10-16T16:28:41+00:00 | Vulnerability · Source |
| CVE-2026-102556 | suse_vex | SUSE CVE CVE-2026-102556 | known affected: 221 recommended: 116 | 2026-10-16T16:28:39+00:00 | Vulnerability · Source |
| CVE-2026-102557 | suse_vex | SUSE CVE CVE-2026-102557 | known affected: 221 recommended: 116 | 2026-10-16T16:28:36+00:00 | Vulnerability · Source |
| CVE-2026-102558 | suse_vex | SUSE CVE CVE-2026-102558 | known affected: 221 recommended: 116 | 2026-10-16T16:28:34+00:00 | Vulnerability · Source |
| CVE-2026-102559 | suse_vex | SUSE CVE CVE-2026-102559 | known affected: 221 recommended: 116 | 2026-10-16T16:28:31+00:00 | Vulnerability · Source |